Privacy Policy

Last updated: 24 July 2026

Introduction

This Privacy Policy explains how Bali Racquet Society (“BRS,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our website, booking platform, and related communications (together, the “Service”). BRS operates a racket-sports club and booking system in Bali, Indonesia, and this policy applies to anyone who creates an account, books a court or session, or otherwise interacts with us through the Service, WhatsApp, or email.

This is not a marketplace connecting independent third-party venues — BRS is a single operator, and the courts, sessions, and facilities you book belong to and are run by BRS directly.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

Information We Collect

We collect information in three ways: what you give us directly, what our systems generate automatically, and what we receive from third parties who help us operate the Service.

Information you provide directly:

  • Full name
  • Email address and/or phone number (used to sign in and receive booking communications)
  • WhatsApp number, where you choose to verify or communicate via WhatsApp
  • Booking details — sport, court, date, time, add-ons, and any notes you provide
  • Messages you send us for support, booking changes, or general enquiries
  • Payment-related references and order metadata generated when you check out (see “How We Share Your Information” — we do not store your full card or bank details)

Information Collected Automatically

  • Device and browser information, IP address, and general session metadata associated with your sign-in sessions
  • Log and diagnostic data generated by our systems as you use the Service, for security and reliability purposes
  • A small number of functional cookies necessary to keep you signed in, hold a court reservation while you complete checkout, and remember basic interface preferences

Information From Third Parties

  • Delivery and status information from WhatsApp (Meta) when we send you a verification code or service message
  • Payment status and transaction confirmations from our payment processor
  • Confirmation that an email we sent was delivered, opened, or bounced, from our email delivery provider

How We Use Your Information

We use the information we collect for the following purposes:

  • To create and manage your account — verifying your identity, signing you in, and maintaining your booking history
  • To process bookings — holding a court reservation, confirming a session, and sending confirmations, reminders, or changes related to that booking
  • To process payments — coordinating with our payment processor to collect payment and reconcile your booking
  • To communicate with you — sending one-time verification codes, booking confirmations, reminders, cancellation notices, and responding to support enquiries, over WhatsApp and/or email
  • To maintain account security and prevent fraud — detecting suspicious sign-in activity, verifying that requests to change account details (such as your email) genuinely come from you, and protecting the Service and other users from misuse
  • To operate and improve the Service — troubleshooting issues, understanding how features are used, and maintaining the reliability of our booking and scheduling systems
  • To meet legitimate business and administrative needs — maintaining accurate records of bookings, payments, and communications for accounting, dispute resolution, and customer support purposes
  • To comply with applicable law — where we are required to retain or disclose information by a legal or regulatory obligation

WhatsApp and Email Communications

BRS uses WhatsApp (via the Meta / WhatsApp Business Platform) and email as core communication channels for account verification and service-related messages. Specifically:

  • One-time verification codes — when you sign in, we may send a one-time passcode to your email address or WhatsApp number to verify it's really you. These codes are single-use, time-limited, and never shared with anyone other than you.
  • Sign-in links — we may also email you a one-time sign-in link as an alternative to typing a code.
  • Booking-related messages — we send booking confirmations, cancellation notices, and related transactional messages by email. Some of these message types are also planned for WhatsApp delivery as our WhatsApp messaging capability expands, subject to Meta's messaging policies.
  • Support and account communications — if you contact us for support, or if we need to verify a change to your account (such as an email or phone update), we may reach you by WhatsApp or email to confirm the request.

The Nature of These Messages

These are service-related, transactional communications — they are necessary for your account and bookings to function, and are not optional marketing messages. If we ever introduce promotional or marketing messages by WhatsApp or email, we will provide a clear way to opt out of those specifically, separate from transactional messages.

Message content you send us — for support, booking questions, or account requests — is retained as part of our customer support records for the period described under “Data Retention” below.

How We Share Your Information

We do not sell your personal information. We share information only with service providers who help us operate the Service, and only to the extent necessary for them to perform their function:

  • Meta / WhatsApp Business Platform — to deliver verification codes and service messages you receive over WhatsApp
  • Payment processing providers — to process your booking payments and confirm transaction status (BRS does not receive or store your full card number or bank credentials)
  • Hosting and infrastructure providers — who host our website, application, and database
  • Email delivery providers — to send verification, booking, and account-related emails
  • Analytics or monitoring providers, where used — to help us understand Service performance and reliability

Other Disclosures

We may also disclose information where required to do so by law, to protect the rights, safety, or property of BRS, our users, or the public, or in connection with a business transaction such as a merger or transfer of assets (in which case we will take reasonable steps to ensure your information continues to be protected).

Data Retention

We retain your information for as long as your account is active, and for a reasonable period afterward to meet our accounting, legal, tax, and dispute-resolution obligations. Booking and payment records are generally retained longer than routine account data because businesses are commonly required to keep financial and transaction records for a minimum period under local law.

When information is no longer needed for these purposes, we take reasonable steps to delete or anonymize it, except where we are required to retain it by law.

Cookies and Similar Technologies

BRS uses a small number of cookies that are necessary for the Service to function — for example, to keep you signed in, to hold your court reservation while you complete checkout, and to remember basic interface preferences. We do not currently use third-party advertising cookies or cross-site tracking technologies.

If we introduce analytics or additional tracking in the future, we will update this policy and provide appropriate notice and choices, consistent with applicable law.

Security

We take reasonable technical and organizational measures to protect your information, including encrypted connections, access controls, and monitoring for suspicious account activity. We use verification steps (such as one-time codes) to help confirm that requests to sign in or change account details genuinely come from you.

No method of storing or transmitting information is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately using the details below.

International Data Transfers

BRS operates in Indonesia, and our service providers may process information in other countries. Where your information is transferred outside the country in which you are located, we take reasonable steps to ensure it continues to receive an appropriate level of protection, consistent with applicable data protection law. This policy does not constitute legal advice on cross-border transfer requirements in any specific jurisdiction.

Your Choices and Rights

Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of the information we hold about you, and to object to or restrict certain uses of it. You can:

  • Update your name, email, or phone number directly within your account
  • Contact us using the details below to request access to, correction of, or deletion of your information
  • Ask us questions about how your information is used

How We Respond

We will respond to legitimate requests within a reasonable timeframe. We may need to verify your identity before fulfilling a request, and some information may need to be retained where required by law (for example, financial records).

Children's Privacy

The Service is intended for use by adults capable of entering into a booking arrangement. We do not knowingly collect personal information directly from children. If a booking or account involves a minor (for example, a young player registered for a coaching session), the responsible parent or guardian must create and manage the account, provide any required information, and agree to this policy on the minor's behalf. If we become aware that a child has independently created an account without appropriate parental involvement, we will take reasonable steps to remove that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our Service, or applicable law. We will update the “Last Updated” date above when we do, and where changes are material, we will provide additional notice (such as an email or in-app notice).

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: