This notice covers the personal data Badders Mafia Badminton Club and the other clubs using The Racket, our members app, hold about their members and anyone who comes to a taster session. Last updated 28 October 2026.
Who we are
Each club is the data controller of its own members’ records: its committee and its games. Badders Mafia runs the app and its server for every club. Questions, requests and complaints go to baddersmafia@gmail.com, read by the Badders Mafia committee. Members of another club can also ask their own club’s committee. The chairman of Badders Mafia, Cal Bryant, looks after the app and its data.
The clubs are adults only (18+), and do not knowingly hold data about anyone under 18.
What we hold and why
| Data | Why | Lawful basis |
|---|---|---|
| Name, address, email and phone number | To run your membership and contact you. The club’s insurance only covers taster sessions if we record each newcomer’s name, address and dates of attendance (see insurance) | Legitimate interests: running the club and keeping its insurance valid |
| Emergency contact: name, relationship and phone number | To reach someone if you are hurt or taken ill at a session. Please tell them we hold their details | Legitimate interests: your safety |
| Date of birth and join date | To confirm you are 18 or over, and for club records | Legitimate interests |
| Health: allergies, medical conditions, medication, accessibility needs, GP | Optional. So the committee can help, or tell paramedics, if something happens at a session | Your explicit consent, by answering yes to the health consent on your profile, which you can withdraw at any time by clearing the fields and answering no |
| Profile photo | To show who is who on the court and leaderboard | Your consent, given by adding a photo, which you can withdraw by removing it on your profile |
| Photos of you at the club, such as from club nights | To post on our website and social media | Your consent, by answering yes to the photo consent on your profile, which you can change to no at any time |
| Games, scores and the dates you played | Scorekeeping, the leaderboard, and the attendance dates the insurance needs | Legitimate interests |
| Clubs you belong to, committee role, and who invited you | Running the club | Legitimate interests |
| Passkeys, login sessions and notification subscriptions | To log you in, and send notifications if you turn them on | Needed to provide the app you asked for |
Health details are special category data under UK GDPR, so they are optional and only held with your explicit consent.
Who sees it
- The committee of your club sees everything you enter, so they can run the club and help in an emergency. Your profile is one record shared by every club you belong to, so the committee of each of those clubs sees it.
- Other members of your club see your name, your profile photo if you added one, and the games you played in that club and their scores.
- Nobody outside your clubs, except as below. We do not sell or share your data for marketing.
Joining another club is done by the operator of the app, Badders Mafia, at your request. Your profile is not shared with a club you have not joined.
We may pass details to Badminton England’s insurers, or to emergency services, if there is an accident or claim.
Where it is kept
The app’s data is held on a server run by the chairman in the UK, with an encrypted offsite backup. These services handle it for us:
- Cloudflare, which serves the website and app and carries all traffic to the server, so it handles everything you send. Cloudflare is in the US. The transfer is covered by its certification under the UK Extension to the EU-US Data Privacy Framework, and otherwise by the ICO’s International Data Transfer Addendum in its data processing addendum.
- Apple, Google or Mozilla, if you turn notifications on. They are encrypted so only your device can read them; the push service sees only that we sent something to that device.
- Google, for our email account, and Meta, if you contact us on Facebook or Instagram. Their own privacy policies apply.
How long we keep it
- While you are a member, we keep your profile for as long as you play.
- After 27 days without a game in a club you are marked inactive in that club and logged out of it. You can come back at any time.
- Once you are inactive in every club, and three years have passed since your last game, profile change or invite in any club, the app anonymises your account automatically: your name becomes “Former member”, and every other detail, your photo, passkeys and sessions are deleted. Your past games stay on the leaderboard under that name. Three years is the time limit for a personal injury claim, which the insurance records may be needed to answer.
- Anonymised data drops out of our backups within two months.
- Login sessions last 14 days. Invite links expire after a week.
Cookies
The app only uses cookies it needs to work: session keeps you logged in, login holds a login while it is in progress, and Cloudflare sets cf_clearance when it checks your browser is not a bot. There are no analytics or advertising cookies.
Your rights
You can ask us to:
- Give you a copy of your data.
- Correct it. You can change most of it yourself on your profile.
- Delete it. We anonymise your account as above, at once.
- Stop or restrict using it, or object to how we use it.
- Give it to you in a form you can take elsewhere.
Withdrawing consent does not affect what we did with it before. Email baddersmafia@gmail.com. We will reply within one month.
Complaints
If you are unhappy with how we handle your data, email baddersmafia@gmail.com. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.
If you are still unhappy, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.