LEGAL
Privacy Policy
1. Data we collect
(1) At sign-up (required): name, ID, password (stored hashed), residency, email address. (2) At sign-up (optional): DUPR ID, date of birth, mobile number, gender, region (province and city/district), and a profile photo and short bio (added on My Page) — without a mobile number you cannot receive KakaoTalk notices about entries and draws. (3) My Page › DUPR (optional): DUPR ID, DUPR account email, romanized name, DUPR doubles rating. (4) At tournament entry: (required) depositor name, where you live (province and city/district — optional for foreign-national members), and for DUPR-rated divisions your DUPR ID and consent to the DUPR cross-border transfer (section 4); (optional) DUPR account email, romanized name, gender to confirm the division, mobile number (if not given at sign-up). Members who already entered without a city/district are asked for it when they sign in (optional — leaving it out does not affect your entry), and tournament operators may contact a player and enter it on their behalf. (5) Lesson or education inquiries (including non-members): Inquiry type, Name, Phone, Email, Organization (school, club, institution), Region, Approx. participants, Preferred dates / days / times, Your message. (6) Coach, club, court or vendor listings (including non-members): name or nickname, photos, phone, email, social or open-chat links, areas, gender, age band, DUPR rating, career and description you write, and an edit code (stored hashed). (7) Mate listings (members): the items in (6) plus skill level, availability and what you are looking for. (8) Community “Looking for players” posts (members): your member name, post title and body. (9) Member-to-member messages (members): message text, sender and recipient, the name of the mate listing the conversation started from, when each message was sent and read, when an email alert was sent, blocks (including the name shown for the other member when you blocked them), reports (including the reason and the operator's resolution note), and whether you receive message email alerts (if alerts were turned off with the link in an alert email, an irreversibly transformed value identifying that address). (10) Collected automatically: access logs, browser information (for session management), visit statistics, and behavioral data through advertising cookies (section 7).
2. Purpose
(1) Member management (identity, account management, notices). (2) Tournament registration and operations (entries, payment checks, draw and result notices). (3) Minimal disambiguation in doubles partner search — alongside the name we show, when searching by name, a partly masked ID (e.g. ho****19); when searching by email or mobile, a partly masked form of that email or number (e.g. 010-****-1234); and whether a DUPR ID is registered. If several members match (the same name, or the same email or mobile), we show each one's partly masked ID and sign-up date, whatever you searched by. Dates of birth are not shown. (4) Submitting results to DUPR (only for members who consent to the cross-border transfer, section 4). (5) Balancing groups in the draw — the DUPR doubles rating you enter on My Page is visible only to you and the operators and is used only to spread groups evenly. Where you live (province and city/district) is used to keep teams from the same neighborhood out of the same group; the city/district is seen only by you and the tournament operators and is never published (public player profiles show the province only). (6) Receiving and answering lesson and education inquiries. (7) Operating the coach, club, court, vendor and mate directories — listings are published so users can find and contact you; phone, email and social links appear only where you ticked “public”, and the rest is seen by operators only. (8) Reviewing and processing listings (checking content, verifying edit codes). (9) Publishing community posts — the author's name appears with the post. (10) Sending promotional messages (only with separate consent, which you can withdraw on My Page at any time). (11) Publishing player records — name (or nickname), gender, region (province), profile photo and short bio (if provided), tournament history and results, and KPR ranking points — as part of the official record service. Contact details (email, mobile number, date of birth) are never published; you may request name masking via My Page or the privacy officer. (12) Visit statistics to improve the service, and advertising to help fund the site (section 7). (13) Member-to-member messages — delivering and storing messages so you can contact a mate listing's owner without sharing phone numbers, and emailing you when a new message arrives (the email does not include the message, and you can turn it off on My Page or with the link in the email; once turned off with the link, no alerts go to that address until its owner turns them back on with the button in a confirmation email sent to it). Messages from a member you block are not delivered to you, whichever mate listing the conversation started from, and the sender is not told they were blocked. The “blocked” notice appears only in the conversation where you blocked them and on that conversation's mate listing. Operators do not read messages; only when a message is reported do they see that message and up to two messages before and after it, to handle the report (checking for advertising or harassment, hiding the message, or stopping the sender from sending). Each mate listing has its own conversation. In messages, a mate listing's owner appears under the listing's name as it was when the conversation started, and a member who writes to them appears under their member name (masked if they turned on name hiding on My Page); renaming or removing the listing doesn't change the name in conversations already started. “Accept messages” is on when a mate listing starts (including listings posted before messaging opened) and can be turned off in Edit listing. The other member can see whether you have read a message (“Read”).
3. Retention
Member data is deleted without delay when you delete your account. Data from lesson and education inquiries is deleted one year after the inquiry is received. Coach, club, court, vendor and mate listings are kept until the owner takes them down or asks us to delete them, and are then deleted with their photos. Coach, club and vendor listings rejected on review are deleted automatically, photos included, 30 days after rejection (court listings are not rejected but kept private, and are deleted as above when the owner takes them down or asks). When a member deletes their account, their mate listing and any coach, club, court or vendor listing they registered while signed in are deleted too, photos included; non-member coach, club, court and vendor listings can be taken down with the edit code or by contacting us. Member-to-member conversations, with their messages and reports, are deleted automatically one year after their last message. When a member deletes their account, every conversation they took part in (including the same conversation in the other member's inbox) and their blocks and reports are deleted immediately. Blocks are kept until you unblock the member or either of you deletes your account (you can unblock anytime on My Page). The transformed value of an address whose alerts were turned off with the email link is kept until alerts are turned back on or the account is deleted. Photos not attached to any listing are deleted automatically 24 hours after upload. Korean law may require longer retention in specific cases (e-commerce contract and payment records 5 years, consumer dispute records 3 years, access logs 3 months).
4. Cross-border transfer
(1) DUPR ratings — only matches of members who consent are transferred. · Recipient: DUPR (USA). Items: name (Korean and romanized), DUPR ID, DUPR account email, birth year, gender, match records. When and how: in bulk after each tournament, by file upload or API. Purpose: rating calculation. Retention: per DUPR policy. · When consent is needed: to enter a division whose results are submitted to DUPR (a DUPR-rated division), the applicant must consent; without consent you cannot enter that division. Divisions not rated by DUPR (e.g. para divisions) can be entered without consent. A member named as a doubles partner can play without consenting, but that team's matches are then not submitted to DUPR. · You can withdraw consent on My Page at any time; you are then left out of later DUPR submissions (entries you already made stay in place). (2) Storage and processing abroad for service operation — carried out without separate consent, as necessary to perform our service and disclosed in this policy (PIPA Art. 28-8(1)3). · Vercel Inc. (USA): hosting and visit statistics. Items: information submitted while using the service (member data, tournament entries, inquiries, coach/club/court/vendor/mate listings, community posts, member-to-member messages) and visit statistics (section 7). When and how: continuously while the service is used, over the network. Retention: until the processing agreement ends. · Neon Inc. (USA): database storage. Items: as above. When and how: continuously, over the network. Retention: per the periods in section 3. · Vercel Blob (Vercel Inc., USA): photo storage. Items: photos uploaded with coach/club/court/vendor/mate listings and member profile photos. When and how: on upload, over the network. Retention: per the listing retention in section 3. · Resend (USA): email delivery. Items: recipient name, email address and message body. When: when an email is sent. Retention: until the processing agreement ends. · If you do not want these transfers, you can stop the processing by deleting your account or withdrawing your inquiry, which limits use of the related service.
5. Sharing with third parties
We do not share personal data with third parties, except where you have separately consented (the cross-border transfer in section 4) or where required by law. The advertising provider in section 7 (Google) may place its own cookies in your browser and collect behavioral data directly in order to show ads. This is not a transfer of the member data we hold; how to refuse is described in section 7. Data from lesson and education inquiries is used only to respond to the inquiry — never for marketing, and never shared.
6. Processors
We entrust the following work; processors may not use the data for any other purpose. · Vercel Inc. (USA): hosting, visit statistics (Vercel Web Analytics) · Neon Inc. (USA): database · Vercel Blob (Vercel Inc., USA): photo storage · Resend (USA): email delivery · Solapi (Korea): KakaoTalk and SMS delivery
7. Cookies and similar technologies
(1) Essential cookies: a session cookie that keeps you signed in, a cookie for the administrator two-factor step, a cookie that remembers your language (Korean or English), a cookie that remembers you passed the access password while the site is closed to the public, and a cookie that remembers for 12 hours that you closed the “where you live” notice. They are used only to make the site work. Blocking them prevents sign-in. (2) Visit statistics: Vercel Web Analytics (Vercel Inc., USA) records the page address, the previous page (referrer), country, and device, OS and browser type. It uses no cookies, does not identify individuals, and is used only for statistics such as visitor counts and popular pages. The admin console, My Page, sign-in, sign-up, account deletion and print pages and the message email turn-off page are excluded. (3) Advertising: public pages show Google AdSense ads (Google LLC, USA). To show ads and personalized ads, Google collects behavioral data (pages visited, time of visit, browser and device information, advertising identifiers, etc.) directly through its own cookies; retention follows Google's policy (policies.google.com/technologies/ads). No ads appear on the admin console, My Page, sign-in, sign-up, account deletion or print pages or the message email turn-off page. (4) How to refuse: you can block or delete cookies in your browser settings (e.g. Chrome — Settings › Privacy and security › Third-party cookies; Safari — Settings › Privacy & Security). You can turn off personalized ads at adssettings.google.com. Refusing advertising cookies does not limit your use of the site; non-personalized ads may still appear.
8. Your rights
You may request access, correction, deletion, or suspension of processing at any time via My Page or the contact below, and we act without delay. If you sent an inquiry without an account, you can exercise the same rights through the privacy officer below.
9. Deletion
Data whose retention period has passed or whose purpose has been fulfilled is destroyed without delay by irreversible means.
10. Security
Passwords are one-way hashed (bcrypt); stored data is encrypted at rest (AES-256, by our processor Neon Inc.); transport is encrypted (HTTPS, TLS 1.2+); access is limited to the minimum necessary; administrator accounts require two-factor authentication by SMS; administrator actions are logged; and data past its retention period is purged automatically.
11. Privacy officer
Seokjae Lee · 02-6332-2017 · pickleballkorea@pickleballkorea.com Privacy questions, complaints and requests for redress can be sent to this contact.
12. Notice
This policy applies from October 3, 2026 (previous version effective September 5, 2026). This revision adds two new kinds of data. The city/district where you live is used only to keep teams from the same neighborhood out of the same group in the draw, and is never published (section 1 (2) and (4), section 2 (5)). Member-to-member messages let you contact a mate listing's owner without a phone number; operators see only reported messages, and conversations are deleted one year after their last message or immediately when either member deletes their account (section 1 (9), section 2 (13), section 3). Because messaging is a new optional service, the items about messages apply from the day the messaging service opens. The rest corrects statements that did not match processing already in place: that consent to the DUPR transfer is a condition for entering DUPR-rated divisions (section 4), that a DUPR ID is optional at sign-up and what My Page and tournament entry collect (section 1), what partner search shows and how the DUPR rating is used (section 2), and which rejected listings, and which listings on account deletion, are deleted (section 3). Section 7 on visit statistics and advertising cookies is new. We announce additions, deletions and changes on the site at least 7 days in advance.