CourtBound Privacy Policy
CourtBound is operated by CourtBound Limited, a company registered in England and Wales ("we", "us", "our"). We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and share your personal data when you use the CourtBound platform at getcourtbound.com (the "Platform"). Please read this policy carefully. By using the Platform you confirm that you have read and understood it.
1. Who We Are
Data Controller: CourtBound Limited
Registered in England and Wales
Contact email: privacy@getcourtbound.com
If you have any questions about how we handle your data, please contact us at the email address above.
2. Data We Collect
We collect and process the following categories of personal data:
- Account and profile data: Full name, email address, password (stored in encrypted form — we never see it in plain text)
- Athlete profile details: height, weight, position, graduation year, nationality
- Academic information: qualifications, grades, predicted results
- Athletic credentials: statistics, team history, international honours
- Links to external content such as highlight reels and social media profiles
- Usage and activity data: Colleges tracked, outreach activity, goals set, AI match queries, login times, browser type, and device information
- Payment data: Subscription tier and billing history. Payment processing is handled entirely by Stripe. CourtBound does not store or have access to card numbers or bank details
- Data relating to minors: Where an athlete is under 18, we require that a parent or guardian creates the account and provides consent on their behalf. We do not knowingly collect data from users under 13 under any circumstances.
3. How We Use Your Data
We use your personal data for the following purposes:
- To create and manage your account
- To provide the Platform's features including college matching, outreach tools, follow-up reminders, and the strategy advisor
- To process your subscription payments via Stripe
- To send you weekly digests, goal reminders, and platform notifications
- To improve the Platform through aggregated, anonymised usage analysis
- To comply with our legal obligations
We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.
4. Legal Basis for Processing
We process your data on the following legal bases under UK GDPR:
- Contract performance: to provide the service you have signed up for
- Legitimate interests: to improve the Platform and ensure its security
- Legal obligation: to comply with applicable laws and regulations
- Consent: where we ask for your explicit agreement, such as for marketing communications
5. How We Share Your Data
We do not sell your personal data. We share data only in the following limited circumstances:
- Stripe: for payment processing. Stripe's privacy policy is available at stripe.com/gb/privacy
- Hosting and infrastructure providers: we use reputable third-party cloud services to host the Platform. These providers act as data processors under our instruction
- Legal requirements: where we are required to disclose data by law, court order, or regulatory authority
We do not share athlete profiles or personal data with US colleges, coaches, or any third party without your explicit consent.
6. Data Retention
We retain your personal data for as long as your account is active. If you close your account:
- Your profile and activity data will be deleted within 30 days of account closure
- Payment records will be retained for 7 years as required by UK tax law
- Anonymised and aggregated usage data may be retained indefinitely as it cannot identify you
7. Your Rights
Under UK GDPR you have the following rights:
- Right of access: to request a copy of the data we hold about you
- Right to rectification: to correct inaccurate data
- Right to erasure: to request deletion of your data in certain circumstances
- Right to restrict processing: to ask us to limit how we use your data
- Right to data portability: to receive your data in a structured, machine-readable format
- Right to object: to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at privacy@getcourtbound.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
We use essential cookies to keep you logged in and maintain your session. We also use analytics cookies to understand how the Platform is used, subject to your consent. You can manage your cookie preferences through the cookie settings on the Platform.
9. Security
We take the security of your data seriously. We use industry-standard encryption (HTTPS/TLS), hashed passwords, and access controls to protect your data. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the ICO as required by law.
10. International Transfers
Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including UK adequacy decisions or Standard Contractual Clauses, to protect your data to UK GDPR standards.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or by a prominent notice on the Platform before the changes take effect. Continued use of the Platform after that date constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related queries, please contact: privacy@getcourtbound.com
Last updated: 5 May 2026