Política de Privacidade
Última atualização · Junho de 2026
This Privacy Policy explains how kortbase ("kortbase", "we", "us") collects, uses, shares and protects personal data when you visit our website, when a club subscribes to our platform, and when members use the white-label apps and booking pages we power on a club's behalf. We are committed to handling personal data lawfully, fairly and transparently in line with the EU and UK General Data Protection Regulation (GDPR), Turkey's Law on the Protection of Personal Data (KVKK) and other applicable data-protection laws. Please read it together with our Cookie Policy.
Who we are and how to reach us
kortbase provides white-label club-management software for racket-sports clubs (padel, pickleball and tennis), including booking pages, member apps and back-office tools. For questions about this policy or your personal data, contact our privacy team at hello@kortbase.com. If you are a member of a club that uses kortbase, please contact your club first, as it decides how your data is used; we will support the club in responding to your request.
Controller and processor roles
When we operate a club's apps, booking pages and member records, the club is the data controller and kortbase acts as a data processor that handles member data only on the club's documented instructions under a data-processing agreement. For our own activities, such as running our website, marketing, managing club accounts and billing, and improving the platform, kortbase is the controller. This policy describes both roles; which one applies depends on whose data is being processed and why.
Information we collect
Account and contact data for club owners and staff (name, email, phone, role, login credentials). Member and booking data that a club records in or imports into the platform (member names, contact details, bookings, attendance, memberships, messaging preferences and history). Payment and billing data (subscription plan, invoices and, for transactions, limited details handled by the connected payment provider; we do not store full card numbers). Communications you send us, including support requests and survey responses. Technical and usage data collected automatically (IP address, device and browser type, pages viewed, and similar analytics), and cookies as described in our Cookie Policy.
How we use personal data
To provide, operate and maintain the platform and the club apps; to create and manage bookings, memberships and payments; to send transactional and opt-in notifications (for example booking confirmations and reminders by email, SMS or WhatsApp) that members or clubs have requested; to provide customer support; to take payment and manage subscriptions; to keep the service secure and prevent fraud or abuse; to analyze and improve our products; to send service and, where permitted, marketing communications to clubs; and to comply with our legal obligations.
Legal bases for processing
Where we act as controller, we rely on: performance of a contract (to provide the service and bill for it); our legitimate interests (to run, secure and improve the platform and to market to business customers), balanced against your rights; your consent (for example for certain cookies and marketing where required), which you can withdraw at any time; and compliance with legal obligations (such as tax and accounting). Where we act as processor, the club is responsible for establishing the legal basis for member data and for obtaining any required consents, including for marketing messages.
Sharing and service providers
We do not sell personal data. We share it only with sub-processors and partners that help us run the service under contract and appropriate safeguards, including hosting and infrastructure providers, payment processors, messaging and notification providers (such as email, SMS and WhatsApp Business providers), error-monitoring and analytics tools, and professional advisers. We may also disclose data where required by law, to protect our rights or users' safety, or in connection with a corporate transaction such as a merger or acquisition. A current list of key sub-processors is available on request.
International data transfers
We operate across multiple regions, including the European Union and Turkey, so personal data may be transferred to and processed in countries outside your own. Where we transfer personal data internationally, we use appropriate safeguards such as adequacy decisions, the European Commission's Standard Contractual Clauses, or equivalent KVKK-compliant mechanisms, together with technical and organizational measures to protect the data.
How long we keep data
We keep personal data only as long as needed for the purposes described here. Member and booking data is retained for as long as a club keeps its account active and according to the club's instructions; on termination it is returned or deleted in line with the data-processing agreement, except where we must retain certain records (for example invoices) to meet legal obligations. Account and billing data is kept for the life of the relationship plus any period required by law.
How we protect data
We use technical and organizational measures appropriate to the risk, including encryption of data in transit and at rest, access controls and least-privilege permissions, network and application security, logging and monitoring, regular backups, and staff confidentiality obligations. No system can be guaranteed completely secure, but we work to protect personal data and to notify the relevant parties of any breach as required by law.
Your privacy rights
Subject to applicable law, you may request access to your personal data and a copy of it, correction of inaccurate data, deletion, restriction or objection to certain processing, and portability, and you may withdraw consent where processing is based on it. To exercise these rights, contact your club if you are a member, or email hello@kortbase.com. You also have the right to lodge a complaint with your local supervisory authority, such as your EU data-protection authority or, in Turkey, the Personal Data Protection Authority (KVKK Kurumu).
Cookies and similar technologies
Our website and apps use cookies and similar technologies for essential functionality, to remember preferences such as language, and, with consent where required, for analytics. You can manage non-essential cookies through our consent banner and your browser settings. See our Cookie Policy for details.
Children's privacy
The platform is intended for clubs and adult users. Where a club registers members who are minors, the club is responsible for obtaining any consent required from a parent or guardian under applicable law. We do not knowingly collect data directly from children without the appropriate authorization.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the date shown above and, where appropriate, notify clubs. Your continued use of the service after an update means you accept the revised policy.
Contact us
For any privacy question or request, email hello@kortbase.com. We aim to respond within the timeframes required by applicable data-protection law.