Flowfield - Revolutionize Rugby Training

Welcome to Flowfield Sports! This Privacy Policy explains how Roberti Sportics B.V.("we," "us," or "our") collects, uses, and discloses information about you when you access or use our application, websites, and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Data Controller

The data controller responsible for your information is:

Roberti Sportics B.V.

Da Costakade, 1052SH Amsterdam, Netherlands

Registration Number: 97899631

Contact Email: info@flowfieldsports.com

2. Information We Collect

Information You Provide to Us

Data Category	Examples	Legal Basis	Retention Period
Account Information	Name, email, password, date of birth, role, club affiliation	Performance of Contract	Account lifetime + 5 years
User-Generated Content	Tactical maps, drills, formations, strategies	Performance of Contract	Until deleted by user or account closure
Payment Information	Stripe transaction tokens, billing details	Legal Obligation	10 years (tax/accounting requirements)
Communications	Support messages, feedback	Legitimate Interest	3 years
Usage Data	Features used, pages visited, session duration	Legitimate Interest (service improvement)	24 months
Device Information	IP address, browser type, device identifiers	Legitimate Interest (security)	12 months

3. How We Use Your Information

We use the information we collect for various purposes:

To provide, operate, and maintain our Service
To process your registration and manage your account
To process subscription payments through Stripe
To allow you to share your User Content through our Club and Community libraries
To improve, personalize, and expand our Service
To understand and analyze how you use our Service
To communicate with you for customer service and service updates
For marketing communications only with your explicit consent
For security purposes, including fraud prevention and enforcement of our Terms of Use

4. Legal Basis for Processing (for EEA/UK Users)

We process your personal data based on the following legal grounds:

Performance of Contract: To provide the Service you signed up for
Legitimate Interest: For security, fraud prevention, and service improvement
Consent: For marketing communications and optional features
Legal Obligation: For payment records and tax compliance

You can request our legitimate interest assessment at info@flowfieldsports.com.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with third parties in the following situations:

Third-Party Service Providers: Stripe (payment processing), Neon PostgreSQL (database hosting), Vercel (lobby hosting), Railway (application hosting)
Club and Community Libraries: When you share User Content, it becomes accessible according to the permissions you set
Legal Requirements: When required by law or in response to valid legal requests

All third-party processors are bound by Standard Contractual Clauses (SCCs) or equivalent data protection frameworks.

6. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction. We ensure adequate protection through:

Standard Contractual Clauses (SCCs) for EEA transfers
Data Privacy Framework (DPF) for US transfers (Stripe, Vercel)
Adequacy decisions where applicable

7. Your Data Protection Rights

You have the following rights regarding your personal information:

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate information
Right to Erasure: Request deletion of your data
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to processing based on legitimate interest
Right to Withdraw Consent: For consent-based processing

Response Time: We will respond to your requests within 30 days.

You can exercise these rights through your account settings or by contacting info@flowfieldsports.com.

8. Children's Privacy

Protecting the privacy of children is especially important. Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

For users between the ages of 13 and 18: Creating an account constitutes a declaration that they have obtained permission from a parent or legal guardian to use our Service and agree to our Terms of Use and this Privacy Policy.

If we become aware that we have collected personal data from a minor without verification of parental consent, we will take steps to remove that information from our servers.

9. Data Retention

We retain your personal data according to the schedule in Section 2. You can request deletion of your account and associated data at any time through your account settings or by contacting us.

10. Data Breach Notification

If we detect a security breach affecting personal data, we will:

Notify the Dutch Data Protection Authority within 72 hours (GDPR Article 33)
Notify affected users without undue delay if the breach poses high risk to their rights and freedoms
Provide details about the breach, its likely consequences, and measures taken

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

Posting the new Privacy Policy on this page
Updating the "Last Updated" date
Sending email notification for material changes
Displaying an in-app notification

Continued use of the Service after changes constitutes acceptance of the updated policy.

Privacy Policy for Flowfield Sports