Legal
Privacy Policy
Last updated: June 2026
This Privacy Policy governs the manner in which The Drop ("The Drop," "we," "us," or "our") collects, uses, maintains, and discloses information collected from users ("you," "your," or "User") of The Drop platform, accessible at enterthedrop.com. The Drop is a pickleball session management platform that enables players to register for sessions, join clubs, and track their play history.
By creating an account and using The Drop, you acknowledge that you have read and agree to the practices described in this Privacy Policy.
1
Definitions
2
Information We Collect
a. Information you provide directly
- -Account information: Name, email address, phone number, date of birth, and country of residence, collected at registration or profile completion.
- -Sport profile information: Skill level, DUPR rating, DUPR ID, and home court, provided voluntarily to improve session matching and rating accuracy.
- -Profile images: Photos you upload to your profile or, where applicable, to a club you administer.
- -Session and booking data: Your registration history, waitlist positions, cancellations, and attendance records for sessions you join.
- -Payment records: When you pay for a session, an administrator records the amount, payment method (cash, bank transfer, or card), and payment status. We do not store credit or debit card numbers and no raw payment card data ever enters the Platform.
b. Information collected automatically
- -Session cookie: When you sign in, we store a secure, encrypted session token in a cookie on your browser. This cookie expires after 30 days or when you sign out. It is strictly necessary for the Platform to function and cannot be disabled without preventing sign-in.
- -Sign-in method: We record whether you authenticated via email/password or Google OAuth.
c. Information received from Google (Google OAuth sign-in only)
If you choose to sign in with Google, Google shares your name, email address, and profile picture with us. We do not request or receive any other information from Google, including contacts or location. You may revoke this access at any time through your Google account settings.
d. Information provided by Club Administrators
Club Admins may create a temporary guest or placeholder profile on your behalf to manage session rosters, waitlists, and club records before you have registered directly. This information typically includes your name and contact details. This data is held securely and may be fully claimed, corrected, or deleted by you at any time by contacting us at info@enterthedrop.com.
3
How We Use Your Information
- -Create and maintain your Account
- -Process your session registrations and waitlist positions
- -Enable Club Admins to manage session attendance and payments for their clubs
- -Send you transactional emails, including registration confirmations, waitlist promotions, payment receipts, session reminders, email verification codes, and password reset links
- -Display relevant session and player information within the Platform
- -Maintain internal records of session history and payment status
- -Share relevant information with Business Partners as described in Section 6, where applicable
We do not use your information for unsolicited marketing or advertising without your prior consent. We do not sell your Personal Information to any third party.
4
Club Admins and Your Information
If you register for a session run by a club, the Club Admin for that club can view your name, contact details, skill level, registration status, and payment records for sessions within their club. Club Admins cannot access your information in relation to other clubs or platform-wide data.
5
Third-Party Processors
We use the following third-party services to operate the Platform. Each acts as a data processor on our behalf and is contractually bound to handle your data only as directed by us:
| Service | Purpose | Data shared |
|---|---|---|
| Google OAuth | Sign-in authentication | Name, email, profile picture (only if you use Google sign-in) |
| Resend | Transactional email delivery | Your name and email address, included in emails we send you |
| UploadThing | Profile and club image storage | Image files you upload |
| DigitalOcean | Platform hosting and database | All Platform data, stored on servers in New York, USA |
We do not use Google Analytics, advertising networks, or any behavioural tracking tools.
6
Business Partners and Data Sharing
From time to time, we may share certain Personal Information with trusted Business Partners whose services complement or integrate with the Platform. Examples may include sport rating platforms, tournament operators, event organisers, or other organisations relevant to the pickleball community.
When we share your data with a Business Partner, we will:
- -Disclose the categories of data shared and the purpose at or before the time of sharing
- -Only share data that is relevant and proportionate to the purpose
- -Require that the Business Partner handles your data in accordance with applicable data protection law
We will not share your Personal Information with a Business Partner for their independent marketing purposes without your express prior consent. Where we rely on consent, you may withdraw it at any time by contacting us at info@enterthedrop.com.
Sport rating and tournament platforms
Where you have linked your DUPR ID to your Account, we may share your play data with sport rating systems to facilitate automated rating submissions or tournament registration at your request. This sharing is a utility driven by your own action in linking your account; it is not background data brokering.
What will never be shared
Your payment records, date of birth, and session authentication credentials will not be shared with Business Partners under any circumstances.
7
Cookies
We use a single first-party cookie to maintain your signed-in session. It contains an encrypted token (not your Personal Information in readable form) and is deleted when you sign out or after 30 days of inactivity.
We do not use advertising cookies, analytics cookies, or any third-party tracking cookies. Because we set only strictly necessary cookies, no cookie consent banner is required under T&T or EU law. If this changes, this Policy will be updated and you will be notified.
8
Your Rights
Under the T&T Data Protection Act 2011
- -Access the Personal Information we hold about you
- -Request correction of inaccurate or incomplete information
- -Request deletion of your Account and associated Personal Information
- -Be informed of the purposes for which your data is used
- -Object to processing that causes you damage or distress
Under the EU/UK General Data Protection Regulation (GDPR)
If you are located in the European Economic Area or United Kingdom, you additionally have the right to:
- -Data portability: receive your data in a structured, machine-readable format
- -Restrict processing in certain circumstances
- -Object to processing based on legitimate interests
- -Withdraw consent where processing is consent-based
- -Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at info@enterthedrop.com. We will respond within 30 days (or within the shorter period required by applicable law). Where we deny a request, we will explain why and, where applicable, how you may appeal.
9
Account Deletion
You may request deletion of your Account by contacting us at info@enterthedrop.com. Upon a verified deletion request, we will permanently remove your profile, registration history, and associated Personal Information from the Platform. Anonymised aggregate data (such as session attendance counts) may be retained for operational records but will not be linked to your identity.
10
Data Retention
We retain your Personal Information for as long as your Account is active or as needed to provide you with the Platform's services. Session and payment records may be retained for up to seven (7) years for financial record-keeping purposes. Where you request deletion, Personal Information will be removed or irreversibly anonymised within a reasonable period, except where retention is required by law.
11
Data Security
We implement commercially reasonable security measures including encrypted session tokens, HTTPS transmission, and access controls. However, no internet transmission is completely secure and we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and the relevant authority in accordance with applicable law.
12
Children
The Platform is not directed at children under 16. We do not knowingly collect Personal Information from children under 16 without verified parental consent. If you believe a child under 16 has registered without consent, please contact us at info@enterthedrop.com and we will promptly remove the account.
13
International Data Transfers
The Drop operates from Trinidad and Tobago. Your data is stored on servers hosted by DigitalOcean in New York, USA. If you access the Platform from the European Economic Area or United Kingdom, your data is transferred to and processed in the United States, a jurisdiction outside the EEA/UK. We take steps to ensure such transfers are subject to appropriate safeguards consistent with GDPR Article 46, including where applicable the use of Standard Contractual Clauses with our processors.
14
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
15
Contact
For any questions, concerns, or requests regarding this Privacy Policy or your Personal Information: