Privacy Policy

1. Introduction

Pickle Berry ("we," "our," or "us") operates the Pickle Berry platform (the "Service"), a pickleball court booking, player matching, and community platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. We are committed to protecting your privacy in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and profile photo when you create an account through our OAuth authentication system.
• Profile Information: Skill level, playing preferences, location, DUPR rating, and bio that you voluntarily provide.
• Booking Information: Court reservations, session bookings, and scheduling preferences.
• Payment Information: Payment details are processed securely through Stripe. We do not store your full credit card numbers on our servers.
• Communications: Messages, feedback, and support requests you send to us.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, search queries, and interaction patterns.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Location Data: Approximate location based on IP address; precise location only with your explicit consent for court search functionality.
• Cookies: Session cookies for authentication and preferences. See Section 7 for details.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Pickle Berry platform
• Process court bookings, coaching sessions, and payments
• Match players based on skill level, location, and preferences
• Send booking confirmations, reminders, and service notifications
• Personalize your experience and provide relevant recommendations
• Analyze usage patterns to improve our services
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share your information with:

• Facility Partners: Court booking details shared with facilities to fulfill reservations.
• Other Players: Limited profile information visible to other users for player matching (you control visibility in your settings).
• Service Providers: Third-party services that help us operate the platform (e.g., Stripe for payments, cloud hosting providers).
• Legal Requirements: When required by law, court order, or to protect our rights and safety.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• HTTPS encryption for all data transmission
• Secure session management with HttpOnly, Secure, and SameSite cookie flags
• Rate limiting on authentication and API endpoints
• Content Security Policy (CSP) headers to prevent cross-site scripting
• Regular security audits and vulnerability assessments
• Encrypted database connections with SSL/TLS

6. Your Rights

Under PIPEDA and applicable privacy laws, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Withdrawal of Consent: Withdraw consent for data processing at any time (may affect service availability).
• Data Portability: Request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at the address below.

7. Cookies & Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and core platform functionality. Cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the platform to improve our services.
• Preference Cookies: Remember your settings and preferences (e.g., theme, language).

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Booking and payment records are retained for 7 years for legal and accounting purposes. You may request deletion of your account at any time, and we will remove your data within 30 days, except where retention is required by law.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly. Players under 18 should use the platform with parental or guardian consent.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and Canada. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us