Your Boathouse logoYour Boathouse

Privacy Policy

Last updated 6 June 2026

This Privacy Policy explains how Sports Stats Limited (“we”, “us”, “our”) collects, uses and protects personal data when you use Your Boathouse (the “Service”). Sports Stats Limited is a company registered in England and Wales. We are the data controller for personal data processed through the Service, except where we act as a processor on behalf of a club (see “Club data” below).

1. Data we collect

Account data

When you register, we collect your name, email address and an encrypted (hashed) password. We never store your password in plain text.

Club data

When you create or join a club, we process information about the club and its activity — including boats, bookings, on-water sessions, maintenance and issue reports, member roles and permissions, and invitations. For this data the club’s administrators are the controller and we act as a processor on their behalf.

Payment data

Subscription payments are handled by Stripe. We do not see or store your full card details. We retain limited billing metadata such as your plan, subscription status, billing currency and renewal date.

Technical & usage data

We collect standard technical data (such as IP address, device and browser information) and limited usage information needed to operate and secure the Service.

2. Cookies

Strictly-necessary cookies

We use strictly-necessary cookies to keep you signed in and to remember your active club: session tokens (pb_at, pb_rt, pb_exp) and an active-club preference (pb_active_club). These are always on, as the Service cannot function without them.

Analytics cookies (consent-based)

With your consent, we use Google Tag Manager and Google Analytics to understand how our website is used. These set analytics cookies and are loaded using Google Consent Mode — they stay disabled until you accept via our cookie banner. You can decline, or change your mind later: we remember your choice in your browser (as pb_consent), and clearing it will show the banner again. We do not use advertising or cross-site tracking cookies.

3. How we use your data

  • To provide, operate and maintain the Service and your account;
  • To process subscriptions and payments;
  • To send service and transactional emails (for example, invitations, password resets and billing notices);
  • To secure the Service, prevent abuse and comply with our legal obligations;
  • To respond to your enquiries and provide support.

4. Legal bases

We rely on the following legal bases under UK GDPR: performance of a contract (to provide the Service you sign up for), legitimate interests (to secure and improve the Service), legal obligation (for example, accounting records), and consent where specifically requested.

5. Sharing & sub-processors

We do not sell your personal data. We share data with the service providers below, who process it only on our instructions:

  • Supabase — Authentication and database hosting (EU / US).
  • Netlify — Application hosting and content delivery (US).
  • Stripe — Payment processing and subscription billing (EU / US).
  • Resend — Transactional email delivery (invitations, account emails) (US).
  • Google (Tag Manager & Analytics) — Website analytics — only with your consent (US).

We may also disclose data where required by law or to protect our rights.

6. International transfers

Some of our providers process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

7. Data retention

We keep personal data for as long as your account or club is active, and thereafter only as long as needed for legitimate or legal purposes (such as billing and tax records). You may ask us to delete your account at any time.

8. Your rights

Subject to UK GDPR, you have the right to access, correct, delete or restrict processing of your personal data, to object to processing, and to data portability. To exercise these rights, contact us at privacy@your-boathouse.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Security

We use industry-standard measures including encryption in transit, hashed passwords and access controls. No system is completely secure, but we work to protect your data and to notify you of any breach where required.

10. Children

The Service is intended for use by clubs and their adult administrators. Where a club registers data about junior members, the club is responsible for obtaining any necessary consents.

11. Changes

We may update this policy from time to time. We will post the updated version here and revise the “last updated” date above.

12. Contact

Sports Stats Limited
privacy@your-boathouse.com