Privacy Policy

1. Personal Data We Collect

We may collect and process the following personal data:

• Full name
• Email address
• Phone number
• Date of birth (where required for camps or events)
• Registration, booking, or inquiry information
• Participant details such as tennis level, medical conditions, allergies and emergency contacts (provided by a parent or guardian for children)
• Payment-related information (processed securely via third-party providers — we never see or store full card numbers)
• Technical data such as IP address, browser type, device information, and website usage

2. Legal Basis for Processing (GDPR)

We process personal data based on one or more of the following legal grounds:

• Your consent
• Performance of a contract, or steps taken at your request prior to entering a contract
• Compliance with legal obligations
• Our legitimate interests, such as improving our services and communications

3. How We Use Personal Data

We use personal data to:

• Process registrations and bookings
• Communicate important information about events, camps, or services
• Keep participants safe and respond to medical or emergency situations
• Respond to inquiries and provide customer support
• Improve website functionality and user experience
• Comply with legal and regulatory requirements

4. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share personal data only with:

• Trusted service providers (e.g. payment processors, database hosting, and email platforms)
• Event or camp partners, coaches and staff where necessary to deliver services and run the camp safely
• Legal or regulatory authorities where required by law

Our sub-processors

• Supabase — database, authentication and secure hosting (hosted in Singapore, region ap-southeast-1)
• Stripe — payment processing (when card payments are enabled)
• Resend — sending booking confirmations and notifications
• Vercel — website hosting and content delivery
• Sentry — error monitoring (configured to minimise personal data)

All third parties are required to protect your personal data and use it only for authorized purposes.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by applicable laws.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. However, no online system is completely secure.

7. Cookies

Our website may use cookies and similar technologies to keep you signed in, enhance user experience, and analyze website traffic. You may disable cookies through your browser settings, though this may affect website functionality.

8. Your Rights (PDPA & GDPR)

You have the right to:

• Access your personal data
• Request correction or updating of your data
• Request deletion or anonymization
• Withdraw consent at any time
• Object to or restrict processing
• Request data portability (GDPR)

To exercise your rights, please contact us using the details below.

For marketing communications specifically, you can opt out at any time using the unsubscribe link in any marketing email, or from “Email preferences” in your account settings. This does not affect essential service emails about your own bookings (booking confirmations and payment details).

9. International Data Transfers

If personal data is transferred outside Thailand or the European Union, we ensure appropriate safeguards are in place in accordance with PDPA and GDPR requirements.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

11. Contact Information

RPN Active

Website: www.rpnactive.com

Email: info@rpnactive.com