Privacy Policy

Vanta Padel respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what personal data we collect, why we collect it, how we use it and how we keep it safe.

This policy applies to the Vanta Padel website at vanta-padel.co.uk, our early access programme, any future app or platform services, and all interactions you have with us via forms, email or other digital channels.

Please read this policy carefully. By using our website or services, you confirm that you have read and understood how we use your information.

Vanta Padel is a DBA/trading name of nexrstack Software, Inc. Vanta Padel operates as the UK-facing brand and operating arm for the Vanta Padel platform. nexrstack Software, Inc. is responsible for the operation of the Vanta Padel website, early access services and related digital products unless otherwise stated.

For the purposes of UK data protection law, nexrstack Software, Inc. trading as Vanta Padel is the data controller in respect of personal information collected through this website and our services.

You can contact us at hello@vanta-padel.co.uk.

Vanta Padel is currently operated as a brand and business line of nexrstack Software, Inc. As Vanta Padel grows, our operating structure may change. This may include establishing additional regional entities, subsidiaries, affiliates, local branches or operating companies to support customers, clubs, players, partners and regulatory requirements in different markets.

Where this happens, we will update this policy and make clear which entity is responsible for your personal information. References to "Vanta Padel", "we", "us" or "our" in this policy refer to nexrstack Software, Inc. trading as Vanta Padel, unless a different entity is identified in a specific agreement or communication.

We may collect and process the following categories of personal information:

Contact and identity information

• Name
• Email address
• Phone number, if provided
• Club or company name, if provided
• Role type — player, club owner or operator, affiliate, partner or investor
• Enquiry details submitted via contact or early access forms

Early access and marketing data

• Early access signup details and signup date
• Marketing consent preferences and opt-in records
• Email communication preferences and unsubscribe status

Payment and subscription data

• Payment and subscription status via Stripe
• Subscription tier, billing date and payment history
• We do not store full card details — these are handled directly by Stripe

Website and technical data

• Website usage data including pages visited and time on site
• Analytics data including traffic source, device type and browser
• IP address and approximate location derived from it
• Cookies and similar tracking technologies where consent is given

App and platform data (when available)

• App usage data, activity logs and feature engagement
• Match history, booking history and performance statistics
• Watch and wearable device data where supported and enabled
• Club booking and CRM data where provided by or on behalf of clubs
• AI scoring, court performance and game data where enabled
• Video or camera-derived scoring data, only where enabled by clubs and communicated to users with the appropriate lawful basis

We collect personal information through the following means:

• Website contact and enquiry forms
• Early access signup forms
• Direct email enquiries sent to hello@vanta-padel.co.uk
• Stripe payment flows during subscription or purchase
• EmailOctopus mailing list signups and campaign interactions
• Website analytics tools including cookies where consent is given
• Future app registration, login and in-app activity
• Club onboarding processes where clubs provide data about their business and members
• Affiliate and partner enquiries, applications or agreements

We use personal information for the following purposes:

• Providing early access updates, notifications and pre-launch communications
• Managing signups, waitlists and early access allocations
• Responding to enquiries, support requests and feedback
• Processing payments and managing subscriptions via Stripe
• Onboarding clubs to the platform and providing operational support
• Supporting players with bookings, match history and app features
• Improving the website, app and platform features based on usage data
• Sending marketing communications where consent has been given or where we have a legitimate interest
• Analysing product interest and user behaviour to guide development priorities
• Developing and improving AI scoring, court technology and related platform features
• Fraud prevention, security monitoring and protecting our systems
• Meeting our legal and regulatory obligations under applicable law

Under UK GDPR, we must have a lawful basis for processing your personal information. We rely on the following bases:

We may send marketing communications relating to Vanta Padel, including product launch updates, early access pricing announcements, platform news, club-specific updates and affiliate programme information.

We will only send marketing emails where you have given consent or, in limited circumstances, where we have a legitimate interest to do so in line with applicable law. You can unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us at hello@vanta-padel.co.uk.

Unsubscribing from marketing will not affect essential service communications such as account updates, payment confirmations or legal notices.

Payment processing for subscriptions and purchases is handled by Stripe, a third-party payment provider. When you make a payment through our platform, your card and payment details are submitted directly to Stripe's secure systems.

Vanta Padel does not store, process or have access to full card numbers, CVV codes or other sensitive payment credentials. We receive and retain payment status, subscription details and transaction references from Stripe for the purposes of account management and billing.

Stripe operates its own privacy policy, which you can review at stripe.com/gb/privacy.

We may use EmailOctopus to manage our mailing lists, send email campaigns and handle unsubscribe requests. When you sign up to our email list, your email address and any other details provided may be stored and processed within EmailOctopus.

EmailOctopus processes data in accordance with its own privacy policy. All marketing emails sent via EmailOctopus will include an unsubscribe option. You can opt out at any time.

Our website uses cookies and similar technologies to operate correctly and to understand how visitors use the site. We may use analytics tools to collect information about page views, traffic sources, device types and general usage patterns.

Non-essential cookies, including analytics and marketing cookies, are only used where you have given consent via our cookie consent banner. You can manage your preferences at any time.

For full details of the cookies we use and how to manage them, please read our Cookie Policy.

Vanta Padel may support AI-assisted scoring and court technology, including camera-enabled or sensor-enabled scoring features where deployed by a club or venue. These features may involve processing match, scoring, gameplay, court usage, performance or video-derived data.

Where camera or AI scoring features are used, data handling may be configured on a per-location or per-club basis. This may include local processing, regional storage, restricted access controls or customer-specific data retention settings where appropriate. Clubs using these features may be required to provide appropriate notices to players and visitors depending on how the technology is deployed.

Vanta Padel will implement appropriate technical and organisational safeguards for any video or biometric-adjacent processing and will update this policy as AI scoring and court technology features develop.

We do not sell personal information. We may share data with the following categories of third-party service providers and subprocessors where necessary to deliver and operate the platform:

• Hosting and cloud infrastructure providers
• Regional cloud infrastructure providers to support data residency requirements
• Database and cloud storage services, including Supabase or equivalent
• Payment processors — specifically Stripe — for subscription and payment management
• Email marketing providers — specifically EmailOctopus — for managing mailing lists and campaigns
• Analytics providers for understanding website and platform usage
• App infrastructure and distribution platforms
• Support tooling and customer communication platforms
• Security monitoring and fraud prevention services
• AI processing infrastructure and model providers where relevant to platform features
• Court technology integrations and hardware partners
• Communications, notifications and messaging services
• Customer relationship management tools
• Professional advisers including legal, financial or technical consultants
• Law enforcement, regulatory bodies or courts where we are legally required to disclose information

Where we share data with third-party providers, we ensure appropriate data processing agreements and safeguards are in place. The list of providers may change as the business grows. Regional providers may be added to support data residency requirements in specific markets.

Vanta Padel is being built with data residency in mind. As the platform expands, we intend to support data processing and storage on a per-location or regional basis where commercially, technically and legally appropriate.

This means that data relating to clubs, players or users in a particular region may be stored or processed within that region or in a location selected to support performance, compliance, security and operational requirements. For example:

• UK and European data may be stored or processed in the UK, EEA or other approved locations with appropriate safeguards
• APAC data may be stored or processed in APAC-based infrastructure where required or appropriate
• US or international data may be stored or processed in the United States or other suitable regions
• Club-specific data may be configured on a per-location basis where the product, customer agreement or local law requires it

Data residency does not always mean that data will never leave a region. Some trusted service providers, support teams, security tools, infrastructure providers, analytics services or payment and email providers may process limited data in other countries. Where international transfers are required, Vanta Padel will use appropriate safeguards, contractual protections and vendor due diligence where applicable.

Because Vanta Padel is operated by nexrstack Software, Inc. and may use global technology providers, your personal information may be processed outside the country where you are based. This may include processing in the United States, United Kingdom, European Economic Area, APAC region or other locations where our infrastructure, partners or service providers operate.

Where personal information is transferred internationally, we will take steps designed to protect that information in line with applicable data protection laws. These steps may include using contractual protections, appropriate transfer mechanisms, regional hosting options, data minimisation, access controls and security safeguards.

If you have questions about international data transfers, please contact us at hello@vanta-padel.co.uk.

Where Vanta Padel works with clubs, venues, partners or users in different regions, we may apply different data handling practices depending on the location of the customer, the users, the club, the service being provided and the applicable legal requirements.

This may include region-specific hosting, local support arrangements, local contractual terms, regional subprocessors or separate data processing arrangements for clubs and enterprise customers.

As the platform matures and new markets are served, data handling arrangements will be updated to reflect the operating model, product features, customer agreements and applicable regulatory requirements in each region.

Where a club or venue uses Vanta Padel, certain data may relate to that club's own customers, players, bookings, scoring activity, court usage, CRM records, communications and operational workflows. In some cases, the club may act as the controller of that information and Vanta Padel may act as a processor or service provider. In other cases, Vanta Padel may act as an independent controller for platform account, security, billing, analytics and product improvement data.

The exact role may depend on the product feature, customer agreement and region. Where Vanta Padel acts as a data processor for club data, we will process that information only in accordance with the club's documented instructions and applicable data protection law.

Users and clubs retain ownership of their own content and data. By using the platform, you grant Vanta Padel a limited, non-exclusive licence to process, store and use your data solely to the extent necessary to deliver and improve the services you have requested.

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

• Enquiry and contact form data: retained for up to 2 years from last contact, unless a business relationship develops
• Early access signup data: retained until the service launches and beyond for account management purposes
• Marketing consent records: retained for as long as we send marketing and for a reasonable period thereafter as evidence of consent
• Payment and subscription records: retained for a minimum of 6 years in line with applicable accounting and tax requirements
• App and platform usage data: retained in line with service delivery needs and any applicable product terms
• Legal obligation data: retained for the periods required by applicable law

When data is no longer needed, it is securely deleted or anonymised.

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, disclosure or alteration.

These measures include secure cloud infrastructure, encrypted data storage and transmission (HTTPS), restricted access controls, and the use of reputable third-party providers with their own security standards.

While we take reasonable precautions, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security, but we will notify you and any relevant authorities of a data breach where we are legally required to do so.

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal information:

To exercise any of these rights, please contact us at hello@vanta-padel.co.uk. We will respond within one month in most cases.

If you are unhappy with how we have handled your personal information, please contact us first at hello@vanta-padel.co.uk so that we can try to resolve your concern.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at any time:

Vanta Padel is not directed at children. Our website and platform are intended for adults who are able to enter into legally binding agreements.

We do not knowingly collect personal information from children without appropriate parental or guardian consent. Individual clubs using the Vanta platform may have their own participation rules, age restrictions and consent requirements for younger players, which are the responsibility of those clubs.

If you believe we have inadvertently collected information from a child, please contact us at hello@vanta-padel.co.uk.

We may update this Privacy Policy from time to time as Vanta Padel develops, our operating structure evolves and as applicable law or regulatory guidance changes. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of the website or services following any update constitutes acceptance of the revised policy.

If you have any questions, requests or concerns about this Privacy Policy or the way we handle your personal information, please contact us: