What we do with your data.

PIKL is operated by DRFT Solutions Ltd, a company registered in England and Wales. We are the data controller for the personal data we collect about you when you use the PIKL website and apps.

For questions about this notice or your data, write to privacy@pikl.app.

The data we hold about you depends on how you use PIKL. Most of it you give us directly when you sign up, complete your profile, or interact with clubs, groups, and venues.

Information you give us

Information collected automatically

Information from third parties

Where you connect another service to PIKL — for example, signing in with Apple or Google, or linking your DUPR profile — we receive a limited set of profile data from that service. The third party tells you what it shares before you connect it.

Special category data

We do not knowingly collect special category data (such as racial or ethnic origin, religious beliefs, health information, or sexual orientation). Please do not post this kind of information through PIKL unless you mean to make it public.

UK GDPR requires us to have a lawful basis for every purpose we process your data for. This is how the main purposes break down.

Where our basis is consent (such as marketing or analytics), you can withdraw consent at any time without affecting processing we already did. Where our basis is legitimate interests, you have the right to object — see your rights below.

We do not sell your personal data. We share it only with the processors and partners that make PIKL work, with people you have chosen to interact with on PIKL, and where the law requires.

Service providers (processors)

The companies below act on our instructions under written agreements. Each one only handles the data needed for its job, and only for the purposes set out in our agreement.

People you choose to share with on PIKL

When you join a club or group, post a message, leave a review, or RSVP to a session, the relevant organiser and other members can see the information you have shared in that context. Public listings (club profiles, public group pages, court pages) show only what the organiser has chosen to make public.

Legal and safety

We may share data where the law requires, where we need to defend our rights, or where it is necessary to protect the safety of any person. We will challenge requests we consider overbroad and notify you where we are legally allowed to do so.

Business transfers

If DRFT Solutions Ltd merges, is acquired, or sells part of the business, we may share your data with the buyer subject to the same protections. We will let users know before any transfer that materially changes how we handle their data.

PIKL is built and run from the UK. Some of our service providers process data outside the UK and the European Economic Area, mainly in the United States. Where we transfer your data outside the UK, we use one or more of these safeguards:

• Transfers to a country covered by a UK adequacy decision.
• The UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum.
• Where applicable, the UK Extension to the EU-US Data Privacy Framework when the recipient is certified.

You can ask us for a copy of the safeguards in place for a specific transfer by writing to privacy@pikl.app.

We keep personal data only as long as we need it for the purposes we collected it for. The main retention periods are below — they are guides, not absolutes, because legitimate reasons sometimes require us to keep specific data longer (for example, an open investigation).

Under UK GDPR you have the following rights. They are not absolute — there are legal exceptions — but where they apply we will act on a request within one month, or tell you why we cannot.

To exercise any of these rights, email privacy@pikl.app from the address on your account. We may need to verify your identity before we act, particularly for access and erasure requests, to protect your data from someone impersonating you.

PIKL uses a small number of cookies and similar technologies. Our cookie notice lists each one and what it does. On logged-out pages we only set strictly necessary cookies until you give consent for the rest.

You can change your cookie preferences at any time by clearing the PIKL cookie banner or visiting your browser settings. Some browser features such as Global Privacy Control are not yet a UK legal standard, so we treat them as a strong signal but not as a binding opt-out.

PIKL is intended for players aged 13 and over. Children under 13 should not use the Service or share their personal data with us. Where we learn that a child under 13 has signed up, we will close the account and delete the data.

Where you are a parent or guardian and want to give consent for a 13–17-year-old to use the Service, you may need to be present during sign-up depending on the activity (for example, paying for a club membership).

We use technical and organisational measures designed to protect personal data, including encryption in transit, access controls, principle-of-least-privilege for staff, audit logging, and incident-response plans. No system is completely secure — if you believe your account has been compromised, contact us immediately at support@pikl.app.

Where a personal-data breach is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours as required and notify you without undue delay.

We will update this notice from time to time. The “Last updated” date at the top reflects the latest version. Where a change is material — for example, a new processor or a new processing purpose — we will tell you in advance through the Service or by email.

For privacy questions, requests, or complaints, write to privacy@pikl.app. We will normally reply within a few working days.