Privacy Policy
This Privacy Policy explains how Cardiff Giant Ventures Limited (company no. 12322092), of Unit 12 Green Park, Coed Cae Lane Industrial Estate, Pontyclun, CF72 9GP, Wales, United Kingdom, collects and uses personal data when you use Ruck Grassroots. We are the data controller. For privacy questions contact privacy@ruckgrassroots.com.
1. Data we collect
Account data: your name, email address, and the profile details you provide (e.g. club name, role).
Coaching data: teams, players, sessions, attendance, and notes you enter. Where this includes information about young players, you are responsible for having a lawful basis and appropriate consent to record it.
Usage data: device and log information needed to operate and secure the Service.
Payment data: handled by our payment processor, Stripe. We do not store your full card details.
2. How and why we use it
To provide and maintain the Service (performance of our contract with you).
To process subscriptions and prevent fraud (legitimate interests and legal obligation), via Stripe.
To communicate service and account messages (legitimate interests/contract).
To improve and secure the Service (legitimate interests).
3. Processors we use
Supabase (database, authentication, and hosting of your account and coaching data).
Stripe (payment processing and fraud prevention).
Email delivery and infrastructure providers used to send transactional email.
These processors act on our instructions under data-processing terms.
4. Sharing and international transfers
We do not sell your personal data. We share it only with the processors above to run the Service, or where required by law. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the UK IDTA or EU Standard Contractual Clauses.
5. Retention
We keep account and coaching data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, or security obligations. You can delete your data by contacting us; some records may be retained where law requires.
6. Your rights
You have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these, email privacy@ruckgrassroots.com. You can also complain to the UK Information Commissioner's Office (ICO).
7. Children
The Service is for adult coaches and administrators. We do not knowingly create accounts for children. Where you record information about young players, you act as the controller of that information within your club and must handle it in line with safeguarding and data-protection law.
RUCK is operated by Cardiff Giant Ventures Limited (company no. 12322092), Unit 12 Green Park, Coed Cae Lane Industrial Estate, Pontyclun, CF72 9GP, Wales, United Kingdom.