Security & UK GDPR Commitment

Under UK GDPR, ManageMyMatch is the controller of the personal data members give the platform, and processes it to run their club services. When your club takes a copy of member data into its own systems, your club becomes the controller of that copy.

• Consent is the lawful basis for processing, recorded when each member agrees to the privacy policy.
• Data your club exports, for example to its till, door system or email platform, is then controlled by your club.
• ManageMyMatch is provided by Affinity Resource Group Ltd, contactable at support@managemymatch.com.

All card payments run on Stripe, which is certified to PCI DSS Level 1, the highest level of the payment card industry standard.

• Card details are entered into Stripe's secure card fields and go straight to Stripe.
• Card numbers never touch your club's systems, ManageMyMatch's servers or any clubhouse hardware.
• Saved cards are held by Stripe, and members can add or remove them themselves.

ManageMyMatch is hosted on Amazon Web Services infrastructure in the EU (Ireland) region, and all traffic between members' devices and the platform is encrypted in transit.

• Hosting, scheduled jobs and file storage run in the AWS EU (Ireland) region.
• Connections to the platform use encrypted HTTPS.
• A separate reporting copy of club data is refreshed daily, so heavy reports never touch the live booking system.

Clubhouse hardware is tied to your club and to your members, and keeps working safely if the internet drops.

• Clubhouse kiosks are paired to your club as registered devices, and members unlock them with their own fob or PIN.
• Door controllers keep a local copy of the access list with battery backup, so access follows membership status even during an internet or power cut.
• Court lighting and heating relays sit on your club's own local network.

Every change is traceable, and members can exercise their data rights without waiting on a volunteer.

• A 30 day operational change log records booking movements, relay switching, payment adjustments and cancellations in plain English.
• Club officials, members and ManageMyMatch staff each see only the data their role allows.
• Members can view and update their own details, review their consents and photography preferences, and delete their account and personal data themselves.
• Subject access and other data requests can be sent to support@managemymatch.com.