Legal
Last updated: September 2026
This Privacy Policy governs the manner in which Amalfi Group Limited, trading as The Drop ("The Drop," "we," "us," or "our") collects, uses, maintains, and discloses information collected from users ("you," "your," or "User") of The Drop platform, accessible at enterthedrop.com. The Drop is a pickleball session management platform that enables players to register for sessions, join clubs, and track their play history.
By creating an account and using The Drop, you acknowledge that you have read and agree to the practices described in this Privacy Policy.
1
2
a. Information you provide directly
b. Information collected automatically
c. Information received from Google (Google OAuth sign-in only)
If you choose to sign in with Google, Google shares your name, email address, and profile picture with us. We do not request or receive any other information from Google, including contacts or location. You may revoke this access at any time through your Google account settings.
d. Information provided by Club Administrators
Club Admins may create a temporary guest or placeholder profile on your behalf to manage session rosters, waitlists, and club records before you have registered directly. This information typically includes your name and contact details. This data is held securely and may be fully claimed, corrected, or deleted by you at any time by contacting us at info@enterthedrop.com.
3
We do not use your information for unsolicited marketing or advertising without your prior consent. We do not sell your Personal Information to any third party.
4
If you register for a session run by a club, the Club Admin for that club can view your name, contact details, skill level, registration status, and payment records for sessions within their club. Club Admins cannot access your information in relation to other clubs or platform-wide data.
Separately, platform administrators can temporarily view the Platform as a specific member, for support and safety purposes. This access is read-only, time-limited, requires the administrator to record a reason before it begins, and every use is logged for audit.
5
We use the following third-party services to operate the Platform. Each acts as a data processor on our behalf and is contractually bound to handle your data only as directed by us:
| Service | Purpose | Data shared |
|---|---|---|
| Google OAuth | Sign-in authentication | Name, email, profile picture (only if you use Google sign-in) |
| Resend | Transactional email delivery | Your name and email address, included in emails we send you |
| UploadThing | Profile and club image storage | Image files you upload |
| DigitalOcean | Platform hosting and database | All Platform data, stored on servers in New York, USA |
We do not use Google Analytics, advertising networks, or any behavioural tracking tools.
6
From time to time, we may share certain Personal Information with trusted Business Partners whose services complement or integrate with the Platform. Examples may include sport rating platforms, tournament operators, event organisers, or other organisations relevant to the pickleball community.
When we share your data with a Business Partner, we will:
We will not share your Personal Information with a Business Partner for their independent marketing purposes without your express prior consent. Where we rely on consent, you may withdraw it at any time by contacting us at info@enterthedrop.com.
Sport rating and tournament platforms
Where you have linked your DUPR ID to your Account, we may share your play data with sport rating systems to facilitate automated rating submissions or tournament registration at your request. This sharing is a utility driven by your own action in linking your account; it is not background data brokering.
What will never be shared
Your payment records, date of birth, and session authentication credentials will not be shared with Business Partners under any circumstances.
7
We set a small number of first-party cookies, all of them needed for the Platform to work: your signed-in session, your marketplace cart, access to a club page you opened through a share link, the page to return you to after sign-in, your light or dark theme choice, and a short-lived security token during Google sign-in. None of them is used for advertising or profiling, and none is shared with third parties.
We use Umami, a cookieless analytics service, to count page views and completed sign-ups so we can see how the Platform is used. It sets no cookies and records no personal identifiers.
Because we set only strictly necessary cookies and our analytics are cookieless, no cookie consent banner is required under Trinidad and Tobago or EU law. If this changes, this Policy will be updated first.
8
Under the T&T Data Protection Act 2011
Under the EU/UK General Data Protection Regulation (GDPR)
If you are located in the European Economic Area or United Kingdom, you additionally have the right to:
To exercise any of these rights, contact us at info@enterthedrop.com. We will respond within 30 days (or within the shorter period required by applicable law). Where we deny a request, we will explain why and, where applicable, how you may appeal.
9
You may request deletion of your Account by contacting us at info@enterthedrop.com. Upon a verified deletion request, we will permanently remove your profile, registration history, and associated Personal Information from the Platform. Anonymised aggregate data (such as session attendance counts) may be retained for operational records but will not be linked to your identity.
10
We retain your Personal Information for as long as your Account is active or as needed to provide you with the Platform's services. Session and payment records may be retained for up to seven (7) years for financial record-keeping purposes. Where you request deletion, Personal Information will be removed or irreversibly anonymised within a reasonable period, except where retention is required by law.
11
We implement commercially reasonable security measures including encrypted session tokens, HTTPS transmission, and access controls. However, no internet transmission is completely secure and we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and the relevant authority in accordance with applicable law.
12
The Platform is not directed at children under 13. We do not knowingly collect Personal Information from children under 13 without verified parental consent. If you believe a child under 13 has registered without consent, please contact us at info@enterthedrop.com and we will promptly remove the account.
13
The Drop operates from Trinidad and Tobago. Your data is stored on servers hosted by DigitalOcean in New York, USA. If you access the Platform from the European Economic Area or United Kingdom, your data is transferred to and processed in the United States, a jurisdiction outside the EEA/UK. We take steps to ensure such transfers are subject to appropriate safeguards consistent with GDPR Article 46, including where applicable the use of Standard Contractual Clauses with our processors.
14
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
15
For any questions, concerns, or requests regarding this Privacy Policy or your Personal Information:
Amalfi Group Limited, trading as The Drop
41 Rosalino Street, Woodbrook, Port of Spain, Trinidad & Tobago
info@enterthedrop.comenterthedrop.com