BPT Academy Limited · Company No. 16487239
Last updated: 9 August 2026
BPT Academy Limited (“BPT Academy”, “we”, “us”, “our”) is a private limited company registered in England and Wales (Company No. 16487239). Registered office: 12 Lakeside Rise, Manchester, England, M9 8QD. For all data protection enquiries: office@bptacademy.uk
We are committed to protecting your privacy. This Policy explains what personal data we collect, why we collect it, and your rights under UK data protection law, including the UK GDPR and the Data Protection Act 2018. By using our Platform you confirm that you have read and understood this policy.
Account & Identity: Full name, date of birth, email address, phone number, profile photo, city of residence, and user role. Junior / Child Accounts: Where a parent or guardian registers a child, we collect the child’s name, date of birth and age group, an optional profile photo added by the parent, and — through the child’s training at the academy — attendance, skill assessments, coaching notes, session and lesson bookings, and the payment records relating to them. All child accounts are created and managed by a parent or guardian, and payments for a child’s training are always made by the parent. Sporting & Performance: Padel skill level, division, previous experience, attendance, training progress, coaching notes, skill assessments, and monthly activity standings. Bookings & Scheduling: Private lesson bookings and requests, session schedules, cancellations, and reschedules. For coaches: availability, lesson pricing, and blocked dates. Payment Records: Payment amounts, dates, methods, and the programme or lesson they relate to. We do not store your card details. Where a coach chooses to accept bank transfers, the account details they provide are stored securely and shown only to students booking with that coach. Communications: In-app messages, announcements, and notifications. Media: Training videos (hosted via Mux) and profile photographs. Technical Data: Device type, OS, app usage logs, push notification tokens, and installation identifiers. Delivering notifications, keeping the app up to date, and preventing payment fraud rely on identifiers that relate to your app installation or your device rather than to you personally: a push notification token, an app installation identifier used to deliver app updates and route notifications, and device level risk signals collected by our payment provider when you make a card payment. We do not use advertising identifiers, and none of this data is used for advertising or to track you across other apps or websites.
We process your data to: • Create and manage your account (contract) • Deliver coaching programmes and track progress (contract) • Process payments and maintain financial records (contract / legal obligation) • Send service notifications (contract / legitimate interests) • Safeguard children and verify parental consent (legal obligation) • Improve the Platform (legitimate interests) • Comply with legal obligations
Account & identity data: duration of account + 2 years Payment records: 7 years (UK tax law) Performance data: duration of account + 1 year Messages: 2 years from date Child account data: until age 18, or 1 year after closure Technical data: 12 months rolling After the applicable period, data is securely deleted or anonymised.
Access is strictly limited to: • Super Administrators — authorised BPT Academy personnel for operational and safeguarding purposes • Coaches — only data for students enrolled in their programmes or booking lessons with them • Coaches additionally see the name and phone number of a junior student’s parent or guardian, for contact about their child • Parents / Guardians — only their linked child’s profile, progress, bookings and payments, which they manage on the child’s behalf. A child’s profile photo is never shown to other members: on shared surfaces such as leaderboards, juniors appear as a shortened name with initials only • Other members — limited information only, such as your name in shared programmes and group conversations, and your position on monthly activity leaderboards (shown as first name and last initial only) We do not sell your personal data to any third party.
We use trusted technology providers to operate the Platform: • Supabase — database & authentication (EU) • Stripe Payments UK Ltd — payment processing (UK/EU) • Mux, Inc. — video hosting (USA, SCCs apply) • Resend — transactional email (USA, SCCs apply) • Expo Inc. — mobile app & push notifications (USA, SCCs apply) • Google (Firebase Cloud Messaging) — Android push notification delivery (USA, SCCs apply) All providers operate under binding data processing agreements.
We implement appropriate technical and organisational measures including: • Encryption in transit (TLS/HTTPS) • Encrypted data storage • Role-based access controls • Row-level database security • Regular security reviews If you suspect unauthorised access to your account, contact office@bptacademy.uk immediately.
Children under 18 may only use the Platform through an account created and managed by a parent or guardian. By creating a child’s profile, you confirm that you hold parental responsibility for that child and consent to the processing of their data as described in this policy. What we hold about a child is limited to what their training requires: name, date of birth and age group, an optional photo added by the parent, and their training records — attendance, skill assessments, coaching notes and bookings. Junior age groups are set by age, and a child’s photo is never shown to other members. Children aged 12 and over may be given their own app login. That login is created by the parent, remains under the parent’s management, and carries no access to any payment feature — every payment for a child’s training is made by the parent, from the parent’s own account. Parents can view and correct their child’s name, birthday and photo directly in the app, and may request deletion of the child’s data at any time via the app or office@bptacademy.uk. We do not knowingly collect personal data directly from children under 13; any account a child under 13 uses is created by, and operates under the consent of, their parent or guardian.
You have the right to: • Access — request a copy of your personal data • Rectification — correct inaccurate or incomplete data • Erasure — request deletion in certain circumstances • Restrict processing — limit how we use your data • Data portability — receive your data in a structured format • Object — to processing based on legitimate interests To exercise any right, contact office@bptacademy.uk. We will respond within 30 days. You may also lodge a complaint with the ICO at ico.org.uk or on 0303 123 1113.
We may update this policy from time to time. When we make material changes, we will notify you via the Platform or by email. Continued use following notification constitutes acceptance of the updated policy.
BPT Academy Limited Email: office@bptacademy.uk 12 Lakeside Rise, Manchester, England, M9 8QD Company No. 16487239