Privacy policy | Racquet

1. General, and the database owner

This policy explains how Data Pulse — Bitton Eliran, Business ID 024131856, 4/1 Havatzelet St., Kiryat Shmona (the "operator", "we"), the database owner of the Racquet platform, collects, stores and uses personal information in accordance with the Protection of Privacy Law, 5741–1981, including Amendment No. 13 which came into force in August 2025, and with the Protection of Privacy Regulations (Data Security), 5777–2017.

The policy applies to the landing page, the app in the browser, the public profiles and club pages, and every channel through which the platform is accessible. It is part of the Terms of use.

We wrote it on the basis of what the system actually stores as of the version date, and not on the basis of what is planned. When a feature that collects new information is added, the policy will be updated before it.

2. Notice under section 11 of the Law

When you give us information — at registration, in your profile, in a service request or in a support case — please note:

There is no legal obligation to provide us with information. Providing it depends on your wishes and your consent.
Without a display name, a password, and an email address or (in Israel) a mobile phone number, an account cannot be opened. Everything else — the second contact detail, picture, area, date of birth, gender, ratings, description, services, certificates and the shipping details in the shopping cart — is optional, and not providing it only limits what the platform can do for you. A tournament with an age or gender restriction asks for the date of birth or the gender in order to accept a registration for it.
The purposes for which the information is collected are set out in section 4.
To whom the information is given, and for what purpose — in sections 6 and 7.
Your rights of access and correction — in section 10.

3. What information is collected

Below are the types of information the system stores today, by source. "Required" means the action is not possible without it; "optional" means you choose whether to provide it.

Account and identification

Information stored when an account is opened and on sign-in
What	Required / optional	Note
Email address	Required, unless you registered with a phone number	The registration code is sent to it; also used for sign-in
Password	required	Stored only as a hash (bcrypt); we cannot read it
Full name at registration, and display name	required	The display name is what others see. You can also add a name in Latin letters
Mobile phone number	Required if you registered with it (Israel only); otherwise optional	Stored in international format and used as a sign-in identifier. Added to the account only after it has been verified with a code sent to it
One-time registration code	—	Stored only as a hash, for 15 minutes; it is not logged or stored in plain text. Along with the registration request, the IP address and browser identification, to prevent abuse
Two-factor authentication secret	optional	Only if you turned it on; stored encrypted and decrypted only at the moment of verification
Sign-ins (sessions)	—	The token hash, creation time, expiry, last activity and revocation
Phone notification token	Optional, in the app only	Only if notifications were allowed on the device; with the device type and the app version (below, "The phone app")
Preferred language and time zone	optional
Account status	—	Pending / active / suspended / deleted, and the deletion date

Profile

Profile picture (optional). The picture is re-encoded on the server to a small size; metadata that was in the original file (for example, where the photo was taken) is not kept.
Area of activity / locality (optional).
A location for the "near me" search (optional, for an approved provider): an exact point on the map, an address if you confirmed it, and the choice whether to appear in the "near me" search (later in this section).
Date of birth and gender (optional). The date of birth is used to check age when registering for tournaments, for a parent account up to age 16 and for the protections for minors (section 11); the gender is used for registering for tournaments and for pairs by category, and for placement in the men's and women's ranking tables. They are not shown on the profile, but placement in a ranking table or in a tournament age category reveals them.
Sports and a self-rating for each sport (optional) — what you reported about yourself, not a measurement.
Personal description and description of experience (optional).
The choice whether to show your phone number and email address on your public profile. By default both are hidden (section 6).

Services and certificates

The services you offer, their descriptions and their prices.
Certificates: the certificate type, reference number, issue and expiry dates, and the document file itself. The document is private, stored outside the public area of the server, and viewed only by you and by the platform's review team.
The review decision: who reviewed, when, what was decided and why.

Club, business and shop

The organisation's name, type, address, description, logo, organisation documents, its courts and the "last-minute" offers it published.
The place’s location on the map for the "near me" search (optional): an exact point, an address and the choice whether to appear in the "near me" search (later in this section).
Who the owners, managers, coaches and members of the organisation are, and what permissions each of them has.

Activity on the platform

Service requests: who asked whom, for what, when, in what status, and the counter-offers exchanged in negotiation (terms, price, notes).
Last-minute court requests: which offer was taken and by whom.
Support cases and the correspondence in them, including internal staff notes that are not shown to you.
Change requests you submitted to the operator, and tracking of how they are handled.
Transaction cancellation form: the name, the email or phone, the transaction details and the reason you wrote, the time of receipt, and the IP address and browser identification of the sender, to prevent abuse. The request and its handling are kept and are not deleted.
Contact form — to the platform, a club, a store or a service provider, and also a request for an additional verification code: the name, the email or phone, the subject, the message content, to whom it was sent, and the IP address and browser identification of the sender, to prevent abuse. A message to a club, store or service provider is also sent to their email address.
Payment requests sent to you: what for, the amount, the period and the status of the request.
Card payments (once payment on the site opens to users): what for (a court booking or a business's monthly subscription), the amount, the time, the status, the approval number, the last four digits and the card type, a token the payment processor issues for refunds, the tax document issued (number and link), and refund requests and the decision on them — who decided and when. Full card details do not reach us.
Reports about users or content (through a support case), and blocks you set in chat.
Chat: the messages, the pictures and documents attached to them, and when they were read. A message that has been read is deleted after a set period (section 9).
Tournaments, leagues and series: registration, partner, the draw, match results and ranking points. Also results of matches outside the platform that you entered yourself, or that a club with which you share your performance entered for you.
Classes, courses, training camps and court rentals: registration, waiting lists, attendance and bookings.
Reviews you wrote about service providers or clubs, and replies written to them.
Posts on the boards: second-hand listings, jobs and applications for them, special offers and calls for SOS.
The performance dashboard: summaries the system calculates from your results and, if you have consented, sharing them with a club.
Parent account: the link between a parent's account and a child's account, and actions taken in the child's account by a parent or club manager (section 11).
An account opened for you by a tournament manager: a tournament manager can register a player who contacted them and open a basic account for that player — name, a phone number verified with a code or an email address, and, depending on the tournament, also date of birth and gender.

Shopping cart for EVENTI PADEL

On the page of the store EVENTI PADEL (Italy), you can collect products in a cart and send the cart to the store's website. The purchase and payment take place directly at the store. We send it the cart, the referral code and the country of activity, and with your consent also the shipping details (section 7). We do not collect any money, and payment details do not reach us. We keep:

The products in the cart: the product's identifier at the store, the size or colour you chose, and the quantity. For display, the product's name is also kept, and the price you saw when you added it, if a price was shown.
Shipping details (optional): first name and surname, phone, street and house number, apartment or entrance, town and postcode — in English letters, for delivery in Israel only. They are kept in the cart only, not in the profile, and only after you have consented to their transfer (section 5).
The consent to pre-filling the order details: which wording was shown to you, when you consented and when you withdrew the consent, and whether this was done in the cart or in the profile.
Each transfer of the cart to the store: when, which products and in what quantities, the page language, the country of activity sent to the store, whether you asked for pre-filling, and which fields were passed on and when — without the values themselves. A hash of the details you saw before the transfer is also kept, to make sure that exactly what you saw was passed on.
A report from the store on each transfer: which products entered the cart on its site, whether you were signed in to an account there, and whether the shipping country was set there and pre-filling was offered.
Referral code: on every move from us to the store — to its home page, to a product page or with the cart — a random code is created and attached to the address you go to. We keep with the account a hash of the code, when it was created, and where you went: to the store's home page, to a specific product or with the cart. The code alone does not identify you in the store's eyes.

Which publications are opened on RACQUET

When you browse RACQUET, we record which publications were opened: services, courses, camps, tournaments, listings, jobs, promotions, club, shop and academy pages, and the products of EVENTI PADEL. What is recorded is a press that opens a publication or its details, or the page of a publication that was opened — not a publication that was only shown in a list. We also record which products of EVENTI PADEL went on to the shop’s website, through a product link or with the cart. With each visit we keep when it started and ended, the language of the page, and the time zone the browser is set to (a setting of the device’s clock, not a location). When browsing from a signed-in account, the visit is kept together with the account; without an account it is kept as a guest visit. With each visit we also keep the IP address and the browser identification; they are deleted together with the visit record after 90 days, and only the system administrator sees them, to tell real visitors from automated programs. A person’s profile is not recorded as a publication. The purpose is to learn what interests users and to improve what the platform offers.

What you open in the EVENTI PADEL shop is also used to show you first the products you viewed and related products, and the most-opened products are shown first to everyone (from the totals only); without an account, the list of products you viewed is kept only in your browser.

For every visit that included a shop’s page, the site operator receives an email with these details and the country — from the profile when browsing from a signed-in account, and from the browser’s time zone without an account — and, for a visit from a signed-in account, also the account’s display name and verified email and phone (for an account of someone under 18 — no identifying detail at all), in order to follow interest in the shops and products. No message is sent about other visits. The recording happens only on RACQUET’s pages: on the website of EVENTI PADEL nothing is added, and this information is not passed to it. The record of each visit is kept for 90 days; after that only aggregate numbers per publication and per day remain, without any detail about who viewed (section 9).

"Near me" search and location on the map

An approved provider can add to the profile the place where they work, and whoever manages a club, shop, academy or business can add its place — from the device’s location, from a typed address, or with a pin on a map. It is optional. What is kept is the exact point (latitude and longitude, not rounded), the address if you confirmed it, and the choice "appear in the near-me search". As long as the choice is on, anyone searching "near me" sees how close they are to the point, and the card, the profile and the place’s page show navigation buttons to the point inWaze andGoogle Maps — so the point itself is visible to anyone who opens them. You can turn the choice off at any time and the point stops appearing at once; and you can delete the location.

A service provider may save up to four more named places, and choose for each service where it is given: at their own place, at a club chosen from the list, or with no fixed place. For every place the same details and the same "appear in the near-me search" choice are kept; a service given at a club is shown by the club’s point and under its name.

When an address is typed, our server sends the address — and only it, with the country code and the page language — to the service Nominatim of OpenStreetMap in order to find the point. Your browser does not contact it. When a map is shown, the map images load from the servers of OpenStreetMap, which see theIP address of the device and the map area shown. For places that already published an address on their page, the point may have been set automatically from that address; the place’s manager can correct it, turn it off or delete it.

Someone searching "near me": the device asks whether to share the location, and without permission the search stays by area. Your location is used for one search only — it is sent in the body of the request and not in the page address, andis neither stored nor logged anywhere, not even in the server’s logs.

The phone app

In the app of RACQUET phone app (Android and iPhone) the same screens are shown as on the website, and the same information is collected. In addition, for notifications to the phone:

After you sign in, and only if you allow notifications on the device, we store a notification token (push token) — an identifier that the device issues solely for sending notifications — the device type (Android or iOS), the app version and the time of last use. No advertising identifier, contacts or files from the device are stored.
Every notification that appears in the app's bell is also sent to the phone: the title, the text, the link that opens when tapped, and the number of unread notifications. The notification passes through Firebase Cloud Messaging of Google, and on iPhone also through the notification service of Apple (section 7).
Signing out of the account on the phone deletes the token of that device. A token that the service reports as no longer valid is marked inactive, and no notifications are sent to it. Deleting the account deletes all of its tokens. You can also turn notifications off at any moment in the phone's settings.
Location: the app asks for access to location only when you tap the "near me" search or add a location, and only what is described above (under "Near me" search and location on the map) is stored.

Audit trail (audit log)

Sensitive actions — sign-in, profile change, certificate upload, review decision, permission change, suspension — are recorded in the log with: who performed it, what, on which item, when, the reason (if given), and a correlation ID (correlation id) that makes it possible to link records belonging to the same request. The log does not store IP addresses, browser identification or document content.

Address IP and browser identification are stored only where they are needed for security and abuse prevention: with a registration request, with a message sent through a contact form (to the platform, a club or a service provider), with a transaction cancellation form, with a visit record (90 days, section 9), and in the server's technical logs, which may include them and are used to trace faults and protect against attacks. The technical logs are kept with restricted access and used only for operations and security.

What we do not collect

No third-party analytics tools (analytics), no social network pixels and no advertising.
The location of someone searching "near me" is not kept. An exact location is kept only when a provider or a place’s manager chooses to add it ("near me" search, above).
No credit card number and no security code (CVV). As of this version, payment on the site is in internal testing and is not yet open to users. When it opens (court bookings at a club and businesses' monthly subscriptions), card details will be typed on the payment page of the payment processor (Cardcom) and will not reach us; we will keep only the transaction details: the amount, the time, the status, the approval number, the last four digits and the card type, and a token the payment processor issues for making a refund.

4. Purposes of use

Activate the account — identification, sign-in, account recovery, two-factor authentication.
The brokering itself — showing the profile and services to people searching, passing service requests and replies between the parties, court requests.
Trust — checking certificates and showing the "Verified" mark, handling reports and blocks.
"Near me" search — showing the providers and places near the searcher, the distance to them, and navigation buttons to those who chose to appear.
Support and operations — answering support cases, handling change requests, tracing faults using the correlation ID.
Security and record-keeping — the audit trail, preventing abuse, backup and restore.
Service messages — a sign-up code, an update when a service request changes status (to both sides), an update on a change request you submitted, messages about tournaments, classes and chats you take part in, and a reminder to complete details in your account (for example to choose a club, name a town or verify an email address) — as a notification on the site, by email or by text message. Every such text message has a link to stop: one tap, and no more such reminders will be sent to you by text message. Advertising messages (marketing mailings) are sent only to those who gave explicit, separate consent, under section 30A of the Communications Law, and the consent can be withdrawn at any time.
Shopping cart for EVENTI PADEL — keeping the cart and sending it to the store's website at your request, so that you complete the purchase there. With separate consent only: saving the shipping details in the cart, and pre-filling the order details at the store's checkout, only after you press for this on its site. The referral code and the email in the order allow the store and us to identify that the purchase came through us, and likewise in your later purchases at the store, until you close your account with us. As of this version this identification does not operate: the plugin that is meant to send us order details from the store, and the email in them, is installed at the store but switched off, and receiving them is also blocked on our side. Therefore no order details or email addresses reach us. Before it is turned on, the policy will be updated and your consent to the new version will be requested.
What interests users — which publications and products are opened, and who opened them when browsing from a signed-in account, in order to learn what is of interest and improve what the platform offers. For visits to shop pages the site operator receives an email, in order to follow interest in the shops and products (section 3).
Compliance with the law and with the requirements of competent authorities.

We will not use information for another purpose without notifying you and obtaining consent, unless the law permits it.

5. Basis for collection

Information is collected Send the cancellation request — by providing it at registration and in your profile, and by ticking consent to the terms and to this policy. For the information needed for the account and to carry out your requests, the basis is also the performance of the engagement you asked for. The audit trail and backups are kept for data security and record-keeping, as required by the Data Security Regulations.

You can withdraw consent at any time by closing the account (section 9) or by deleting an optional item of information from your profile. Withdrawing consent does not affect processing carried out before it.

Saving the shipping details in the cart and pre-filling the order details at EVENTI PADEL are done only with explicit and separate consent: a tick in the cart, next to the full wording of the consent. Without the tick, you fill in the details yourself at the store's checkout. A change in the wording of the consent requires consent again. You can withdraw the consent at any time — in the cart, or in the profile on the card “Privacy: sharing details with EVENTI PADEL”. Withdrawing the consent immediately deletes the shipping details saved in the cart and applies to future transfers. Details that were already transferred are kept by the store under its privacy policy.

6. Who sees what

The profile is public

Every profile on the platform is Public: it is shown in search and on the public profile page, including to people who are not signed in. What is shown on it — and what never is — is set out in the table. You choose whether to show your phone number and your email address, each separately, in the profile settings; by default both are hidden. An approved service provider also receives enquiries through the contact form on their profile, which is sent to the email address in their account.

What is shown on a public profile, and what never is
Shown to anyone who opens a public profile	Never shown to the public
Display name (and the name in Latin letters, if you added one), picture, description and experience, sports and self-rating (with a note if it was verified), areas of activity, services and prices, and the club where each service is given, the type of certificates verified and the "Verified" mark, reviews of your service, ranking points from tournaments, and the clubs where you are an owner, manager or coach. Phone number and email address — only if you chose to show them. The location on the map — only if you added it and chose "appear in the near-me search": the distance to it and navigation buttons to it.	The password, the authentication secret, date of birth, gender, certificate files, support cases, your service requests, chat messages, the audit trail, the shipping details in the shopping cart, your location when you search "near me", and the location on the map while the choice "appear in the near-me search" is off.

Tournaments and leagues

Anyone who plays in a tournament or league has their name shown in the draw, the schedule, the results and the tables, which are public, as are the ranking tables and points for each sport.

The other party to a service request

When you send a service request, the service provider sees your display name, the content of the request and the offers you exchanged. When a request is approved, each party sees the other's contact details as far as they are shown on the profile. Last-minute court: the club sees who took the offer.

Club pages

A published organisation page is public and shows the name, logo, address, description, services and offers. The organisation's documents are not shown. The organisation's staff — owners, managers, coaches and employees — are shown on the page by name, with the picture, description and experience from their public profile. Customers and members without a role are not shown.

Platform staff

Staff access to information is set by role and limited to what the role requires: a certificate reviewer sees pending certificates; a support agent sees support cases; a platform administrator sees accounts. Every such access is recorded in the audit trail with the identity of the person who acted. No one on the staff can read passwords or authentication secrets.

The shipping details in the shopping cart are shown only to you. A platform administrator, parent or club manager who enters your account does not see them.

7. Transfer to third parties

We do not sell personal information and do not pass it on to marketers. Information reaches third parties only in the following cases:

Who receives information, what, and why
Who	What it receives	Why
Server hosting provider	The entire database and files	Running the system. The server on which the information and files are stored is hosted by a hosting provider, and the operator manages it with restricted access.
Google Drive	Nightly backup copy of the database	Recovery after a failure. The backup is kept in the operator's account, with restricted access, for 30 days, plus 7 days on the server itself.
Email provider (server: SMTP)	The email address and the content of the message (registration code, service request updates, change request updates, tournament notices and more)	Sending service messages. The messages are sent from an operator sender address, through an external email provider.
Text message provider (SMS)	The phone number and the content of the message	Sending verification codes (at sign-up, password reset, change of contact details and approval of sensitive actions), an invitation that a club or shop sent to a phone number, and a service reminder to complete details in the account (every such text has a link to stop).
Payment processor (Cardcom)	The card details you type on its payment page, the amount, and the cardholder's name (filled in beforehand with the name in the account, and you can change it)	Carrying out and verifying the payment, and refunding to the card when the club manager approves a refund. Payment for a court goes to the club's own terminal. Not yet open to users.
Tax document issuing (SmartBee)	The name in the account, the email address (if there is one), the transaction description (court, club and time) and the amount	Issuing a tax invoice-receipt or a receipt for every card payment, and emailing it to you. Anyone holding the link can open the document. Applies once payment on the site opens.
OpenStreetMap (Nominatim and the map servers)	The address you typed to add a location, with the country code and the page language — sent from our server, without any detail about the account. When a map is shown: theIP address of the device and the map area	Finding the point of an address, and showing the map on which the point is chosen (section 3, "near me" search).
Waze and Google Maps	The point of the provider or the place — only when a navigation button is pressed	Navigation to the point. The button opens their app or website, under their privacy policy.
Google Firebase (Firebase Cloud Messaging), and on iPhone also the notification service of Apple	The device's notification token, and the notification content: the title, the text, the link that opens when tapped, and the number of unread notifications	Sending notifications to the phone app (section 3, "The phone app"), only to those who installed the app and allowed notifications in it. The services act as data processors on behalf of the operator, and no other detail from the account is sent to them.
The shared accessibility widget	The IP address, when the script loads; accessibility preferences are stored in the browser only	The accessibility menu. The script is hosted by the operator and not by an outside party.
EVENTI PADEL (Italy), the store the cart is sent to	The products in the cart (identifier, size or colour, quantity), the referral code and the country of activity in the profile. Also when going to the store's website without the cart — to its home page or to a product page — the referral code and the country of activity are attached to the address. Only with consent, and only after you have pressed on its site “Fill in my details from RACQUET” (filling in the details from RACQUET): the name, phone and shipping address you filled in in the cart (in English letters: street and house number, apartment or entrance, town, postcode, Israel), and the email of the account — only if it has been verified. Before you press, it receives only a masked hint: the first letter of the first name and of the surname, the last four digits of the phone, and the first letter of the email with its domain (for example e•••@gmail.com), and a list of the details that will be filled in, without the values themselves (for example, that there is a shipping address in Israel).	Carrying out the order you asked for, on its site. Only empty fields are filled in there, and no account is opened for you. The purchase and payment take place directly at the store, and we do not collect any money. From the moment of the transfer EVENTI PADEL is responsible for the information under its privacy policy.

In addition, we will disclose information:

To another user — only what section 6 describes, and in line with your settings.
To a competent authority, to a court or under an order — when the law requires it.
To an acquirer of the platform, if it is sold — subject to this policy and with advance notice.

Some of the providers in the table — including the server hosting provider, Google Drive where the backup is stored, and the email provider — may store information outside Israel. Such transfers are made in accordance with the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761–2001.

The same applies to Google Firebase and the notification service of Apple, through which notifications reach the phone app: they may process the token and the notification content outside Israel.

The information transferred to EVENTI PADEL (in the table above) reaches Italy, outside Israel, and is stored there by the store under its privacy policy. The transfer is made at your request, in order to carry out the order you asked for, and the shipping details and email are transferred only with your explicit consent.

8. Data security

We apply these measures, in accordance with the Data Security Regulations:

Communication with the platform is encrypted (HTTPS); an unencrypted request is redirected automatically to the encrypted channel.
Passwords are stored only as a strong hash. Sign-in tokens are stored in the database as a hash, so that even a leak of the database does not expose an active sign-in.
Two-factor authentication secrets are encrypted in the database and decrypted only at the moment of the check.
Certificate and document files are stored outside the public area of the server and are served only through an endpoint that checks who is asking. The file type is determined by its content, not by its name.
Pictures are re-encoded on the server; what is stored is what the server produced, not the uploaded file.
Permissions are checked on every request, so revoking a permission takes effect immediately.
The registration code is limited to five attempts and 15 minutes, and a new code cannot be requested more than once every two minutes.
An audit trail of sensitive actions, with no secrets and no document content.
An automatic nightly backup of the database, kept with restricted access.
Staff access by role, and an administration screen that records every change.

No system is completely immune. If a serious security incident affecting your information occurs, we will notify the Privacy Protection Authority and you as required by law, and explain what happened and what we recommend you do.

9. Retention and deletion

Information is kept as long as the account is active, and after that:

Retention periods
What	How long
Account and profile after the account is closed	On closure, the account is closed and hidden from everyone. The personal information will be deleted or de-identified at your request or 30 days after closure, by the platform staff. Information about referrals to the store EVENTI PADEL is unlinked from the account 6 months after closure (further down the table)
The map location of a provider or a place ("near me" search)	Until you delete it. A provider’s — deleted at once when the account is closed; a place’s — deleted with the place
The location of someone searching "near me"	Not kept at all. Used for one search and gone when it ends
Certificate files and organisation documents	Hidden as soon as the account is closed, and deleted when the account or the organisation is deleted
Incomplete registration	The code expires after 15 minutes; the pending record, with the IP address and browser identification stored in it, is deleted after 30 days by the platform staff
A device's notification token (the phone app)	Until signing out of the account on that device. A token that is no longer valid is marked inactive, and all of the account's tokens are deleted when it is deleted
Card payments, tax documents and credit requests	7 years from the end of the tax year in which the payment was made, as tax and accounting law requires — even after the account is closed
Sign-ins (sessions)	Expire after 72 hours (the system default) without signing in again; expired records are deleted a week after expiry
Service requests, support cases and correspondence	Kept with the account, and even after it is closed they remain with the other party. When the personal information is deleted, the requests you sent and the support cases you opened are deleted with it
Chat messages	A message that has been read is deleted 24 hours after it was read (a period the system administrator can change), as is a picture attached to it. An attached document is kept together with the message in which it was sent
Server technical logs	Kept with restricted access, for operations and security only, and deleted by the platform staff
Contact form messages, with the IP address and browser identification of the sender	Kept for handling the message and preventing abuse. You can ask for them to be deleted through a support case or at the address in section 14
The products in the cart for EVENTI PADEL	Until you remove them, or until the store reports that they entered the cart on its site. A cart you have not used for 90 days is emptied, and closing the account also empties it
The shipping details in the cart	Until you delete them or withdraw the consent, and at most until the cart is emptied after 90 days without use. They are also deleted when the account is closed
The details of each cart transfer to the store: which products and in what quantities, the country of activity sent, the hash, and the store's report	30 days
A brief record of each transfer, of the shipping details and of the consent, in the audit trail: when, how many products, whether you asked for pre-filling and which fields were passed on or changed — without the values themselves	Same as the audit trail
The consent to pre-filling: the wording shown and the times of consent and withdrawal	As long as the account exists, and also after it is closed — until the account is deleted, as a record of what you consented to and when
Referral codes for going to the store	Up to one year from the day they were created
Visits: which publications and products were opened and which products went on to the shop EVENTI PADEL, and the account when browsing was done from one; the IP address and browser identification of the visit	90 days from the start of the visit. When the account is deleted, its visits are detached from it. An email sent about a shop visit stays with the site operator
Aggregate numbers per publication and per day: how many times it was opened, how many of the views were from a signed-in account, and how many times it went on to the shop — without any detail about who viewed	No time limit
Information about referrals to the store EVENTI PADEL for a closed account: the referral codes and the link to the store account	6 months from account closure. At the end of that period the link to the store account is deleted, and the referral codes saved with an order are unlinked from the account; only aggregate figures remain
Audit trail	For security and record-keeping, without IP. Entries older than 24 months will be deleted by the platform staff
Backups	7 days on the server, 30 days in Google Drive. Information deleted from the system disappears from the backups within 30 days at most

You close the account yourself in your profile in the app, in the "Delete the account" card. You can also request this through a support case from within the app or at the address in section 14, and the request will be carried out within the same periods.

Information that the law requires us to keep (for example, to defend against a claim or under a court order) will be kept only for the required period, separately and with restricted access.

10. Your rights

Access (section 13 of the Law) — to see the information stored about you. Most of the information is shown to you directly in your profile and on the "My requests" and "My cases" screens; for a full copy — contact us.
Correction (section 14) — to correct information that is not accurate, complete or up to date. You can correct most details yourself in your profile.
Delete — to ask us to delete information collected unlawfully, or the whole account (section 9).
Unsubscribing from mailings — if marketing mail is sent, every message will include an unsubscribe link.
Withdrawing consent — at any time, for optional information.
The shipping details in the cart — you can view and correct them in the cart itself when the cart is available to you, and delete them at any time: in the cart, in the profile, or through a support case.

A request is sent to the address in section 14 or through a support case from within the app. To protect you, we will verify that the request comes from the account holder, and we will respond to it in accordance with the law and within the period it sets. If we refuse a request, we will give our reasons, and you may apply to the Privacy Protection Authority or to the Magistrates' Court as provided by law.

11. Minors

The platform is intended for people aged 18 and over. Anyone under 18 uses it only with the consent of a parent or guardian, as set out in the Terms of use. If we discover that an account was opened for a minor without parental consent, we will close it and delete the information. A parent or guardian who believes that a minor has given us information is welcome to contact us.

Parent account

A parent can link their account to the account of a child under 16: the parent sends a request and the child approves it in their profile, or the child invites the parent by email. A system administrator, or a manager of a club the child belongs to, can also link them directly, and both parties are also notified of this by email. Each child can have up to two linked parents.

The parent can do everything in the child's account that the child can, except for two things: they do not see the child's private chat or the child's contact details (email and phone), and they cannot change the password, the contact details or two-factor authentication, close the account or change the parent links. Every change a parent makes in the child's account is recorded in the audit trail, and the parent receives by email a copy of every registration of the child for a tournament, course or camp. The link stops working on the child's 16th birthday, unless the child chooses to keep it, and either party can cancel it at any time.

Club manager access

A manager of a club or academy approved on the platform can manage the account of a club member under 16 — for example to register them for tournaments — even without parental consent. The child and the linked parents are notified when the access begins, and every change the manager makes in the account is reported by email to the parents (or to the child, if no parent is linked). The child or the parent can end the access at any time from the profile, and it ends on the child's 16th birthday. Even with this access, the manager does not see the child's private chat or contact details, and cannot change the password or close the account.

Chat with minors

An adult user cannot send a chat message to anyone under 18 unless both belong to the same club. In that case the sender is told in advance that a copy of the message will be sent by email to the minor's linked parents and to the club managers, and the copy is sent. The minor's parents and the platform staff are not subject to this restriction.

Coaches may not upload pictures or details of minor students to their profile without the parents' consent, and we will remove such content when it is reported.

In the shopping cart for EVENTI PADEL, the shipping details form and pre-filling of the order details are available only to account holders aged 18 or over whose date of birth appears in the profile. In the account of someone who is not yet 18, or that has no date of birth, shipping details cannot be saved in the cart, and no name, phone, address or email is transferred to the store. A parent or club manager who enters a minor's account sees only the products in the cart: they cannot change the cart or send it to the store, and they do not see shipping details.

12. Cookies and browser storage

The platform does not use cookies (cookies) of its own, and does not load tracking or advertising cookies. It keeps in your browser, in the storage mechanism localStorage, only the following:

The sign-in token (racquet.token) — so that you do not have to sign in again on every page. It is deleted when you sign out, and expires on the server after 72 hours (the system default).
Display preferences — the language you chose, and the country in which you are searching.
Tournament sign-up link — if you manage a tournament and have created a registration link for it, the browser remembers the last link in order to show it again.
Products you viewed in the shop — the identifiers of the EVENTI PADEL products you opened in this browser (up to 24), to show them under “Recently viewed”. They are sent to us only to fetch the product cards, and we do not keep them.
Accessibility menu preferences — larger text, contrast and stopping animations, if you chose them. Stored in the browser only and not sent to us.

And in the browser tab (sessionStorage), until the tab is closed: the last tab you chose in search; an invitation link you opened (to a tournament or a parent account), until you sign in and use it; and, when someone signs in to another person's account — a parent or club manager in a child's account, or the platform staff — the temporary sign-in token for that tab; and a random key for the visit (section 3), which changes after ten minutes without activity.

Clearing the site data in the browser deletes all of them. Using "private mode" in the browser makes the sign-in temporary and limited to that window.

On the page of the store EVENTI PADEL, the cart keeps in the browser tab (sessionStorage) only two markers: that you chose to skip the shipping form, and the number of the last transfer if you chose to keep the products in the cart after a transfer that was not confirmed. They are deleted when you close the tab. The store's own site stores its own cookies, under its own policy. Details that were pre-filled there remain on its site, in the browser in which you filled them in, until the order is placed or the cart expires.

13. Database registration

Under the Protection of Privacy Law, a database may have to be registered with the Registrar of Databases, depending on the number of people whose information is stored and the sensitivity of the information. Amendment 13 changed the registration and reporting obligations. The operator will fulfil the registration and reporting obligations that the law imposes on the database.

Privacy questions and requests are handled directly by the operator, using the contact details in section 14.

14. Contact details

For any question, request for access, correction or deletion, or to report a privacy incident — contact us here. We will try to reply promptly.

Database owner:: Data Pulse — Bitton Eliran
Business ID:: 024131856
Address:: 4/1 Havatzelet St., Kiryat Shmona
Phone:: 054-8885642
Email for privacy requests:: bittoneliran1970@gmail.com

15. Changes to the policy

This policy will be updated when we add a feature that collects new information, when we change a provider, or when the law changes. Each version has a number and a date at the top of the page. A material change — for example a new purpose, a new provider that receives personal information, or a shorter retention period — will be announced in the app and by email to the address saved in the account before it takes effect. A new use of information already collected, for a purpose not agreed to — only with renewed consent.

What changed in this version (2026-10-23): Ahead of opening payment on the site, the payment processor (Cardcom) and the tax document provider (SmartBee) are described in sections 3 and 7. A section "The phone app" was added: the notification token, and sending notifications through Google Firebase and the notification service of Apple (sections 3, 7, 8 and 9). Fonts are loaded from our server, so your device's address is no longer sent to Google Fonts.

The "near me" search was added in version 2026-10-16: an approved service provider and a manager of a club, shop, academy or business can add an exact location on the map, shown to searchers as a distance with navigation buttons for Waze andGoogle Maps as long as the choice "appear in the near-me search" is on, and it can be turned off or deleted at any time. An address you type is sent toOpenStreetMap to find the point, and the map images load from its servers. The location of someone searching is used for one search only and is neither stored nor logged. Details in sections 3, 4, 6, 7 and 9.

In the previous version (2026-10-06) a record of the publications opened on RACQUET has been added — services, courses, camps, tournaments, listings, jobs, promotions, place pages and the products of EVENTI PADEL — and which products went on to the shop, together with the account when browsing was done from one, in order to learn what interests users; and an email to the site operator about every visit to a shop’s page, with the country. The record of each visit is kept for 90 days, and after that only aggregate numbers without details about people remain. Details in sections 3, 4, 9 and 12.

In the version before that (2026-10-05) the policy came into force on 5.10.2026. It now also describes what has been added to the platform since the previous version: all profiles are public, and the phone number and email are shown only if you choose (section 6); registration with a phone number (section 3); chat, tournaments, leagues, classes, reviews and boards (sections 3, 6 and 9); parent accounts, club manager access and the protection of minors in chat (section 11); and what is stored in the browser (section 12). It also sets the retention periods (section 9).

In the version before that one (2026-10-04), we added the shopping cart for EVENTI PADEL — what is kept in it, what is transferred to the store and when, with what consent, and for how long. The details are mainly in sections 3, 5, 7 and 9. Referral codes and the country of activity are transferred to the store from 2.10.2026, and the cart transfer — from 4.10.2026. Saving shipping details and pre-filling are active from 4.10.2026, and only with explicit consent.

Version 2026-10-23. In force from 23 October 2026. Payment on the site and notifications to the phone app are not yet active for users; opening them — and with it the transfer of data to the providers described here — will be announced in the app and by email before it takes effect (section 15). Prepared on the basis of what the system actually stores as of this date.