Version v1.6-2026-10-03 · Last updated 3 October 2026
Padel Genie is operated by Breakfast Enterprises Ltd, a company registered in England and Wales under company number 11414686, with its registered office at Flat 17, Scholars House, 36 Glengall Road, London NW6 7GF. VAT registration number GB 308 967 466. ICO registration reference ZC247570.
We are the data controller for the personal data described in this policy. In this policy, "we", "us" and "our" mean Breakfast Enterprises Ltd trading as Padel Genie, and "the Platform" means padelgenie.io, map.padelgenie.io, and any subdomain, application or interface we operate under the Padel Genie name.
For anything about privacy or your personal data, email hello@padelgenie.io or write to us at the address above. We are not required to appoint a Data Protection Officer and have not appointed one. Privacy enquiries are handled by a named person at that address.
This policy covers three different groups of people, who have very different relationships with us. Read the part that applies to you.
Part A. You use the Platform without an account. You are browsing the court and venue map or the public pages.
Part B. You have an account or a subscription. You have registered, or you or your organisation pays for access.
Part C. Your details appear in Padel Genie and you never signed up. You are named in a planning application, listed on a club or supplier website, or otherwise appear in our business records because of your professional role. If you received an email from someone who found your details through us, this is the part you want, and section 12 tells you how to get your details removed. The full detail, including exactly where each kind of information came from, is at map.padelgenie.io/privacy/contacts.
Sections 13 onwards apply to everyone.
Technical and usage data. When you visit the Platform we collect your IP address, approximate location derived from it, device and browser type, pages viewed, searches and filters used, referring site, and time and duration of visit. We use this to operate and secure the Platform, to prevent abuse and automated scraping, and to understand how the Platform is used so we can improve it.
Our lawful basis is our legitimate interests in running a secure, working service and in improving it. We have balanced this against your interests and consider it proportionate, because the data is minimal, is not used to build a profile of you as an individual, and is not sold or shared for anyone else's purposes.
Location, if you allow it. If you use "near me" search, your browser asks for your location. We use it to sort results by distance and do not store it. You can refuse, and the Platform still works, you just enter a place name instead.
Cookies and similar technologies. See section 17.
We do not sell your personal data. We do not share it with advertising networks, data brokers or social platforms. We do not use it to build advertising profiles. We do not track you across other websites.
Account data. Your name, email address, password (stored only as a cryptographic hash, never in readable form), organisation name, job title where you give it, and your account settings and preferences. If you sign in with Google, we receive your name, email address and profile image from Google, and we do not receive or see your Google password.
Subscription and billing data. Your plan, billing dates, invoices, billing address and VAT number where applicable, and the last four digits and expiry of your payment card. Your full card details go directly to Stripe and never reach our systems.
Usage data. Which reports, venues, applications, layers and records you view, your searches and filters, your saved areas and alert settings, and which Deal Book fields you have unlocked. We keep an unlock record so we do not charge you twice for the same field and so we can restore your unlocks if you resubscribe.
Account activity summary. For each account we keep a daily count of a small set of actions: that you visited the Platform that day, and how many catchment analyses you ran, planning applications you opened, Club X-Ray pages you opened, planning constraints checks you made, Deal Book contacts you revealed, files you exported and items you saved. We record the day and the number only. We do not record which place, venue, application or person an action was about, the pages you viewed, your IP address or your device. We use these counts, together with your sign-in times and the records your account already holds (saved items, unlocks, exports and the emails we have sent you), to see whether an account is being used, to support you, to follow up with you during a trial or a subscription, and to understand which features are used. Our lawful basis is our legitimate interests in supporting our customers and improving our product. We keep the counts for 90 days. Switching analytics off (section 17) also stops the daily counts for your account and does not reduce your access to anything. Your sign-in times and the other records listed here are part of running your account and are kept as set out in section 18.
Communications. Emails and messages you send us, notes from calls and demonstrations, and your responses to our emails.
| What we use it for | Lawful basis |
|---|---|
| Creating and running your account, giving you the access you paid for | Performance of our contract with you |
| Taking payment, issuing invoices, handling failed payments and refunds | Performance of our contract with you |
| Keeping accounting and tax records | Legal obligation |
| Service emails, alerts and digests you have configured | Performance of our contract with you |
| Security, fraud prevention, enforcing our terms, checking Seat and usage compliance | Our legitimate interests in protecting the Platform, our data and our other customers |
| Understanding how the Platform is used and improving it | Our legitimate interests in improving our product |
| Marketing our other features and services to you, including the What's new email, the free Sunday headline numbers and occasional market updates | Our legitimate interests, and the soft opt-in under PECR for account holders, including free accounts. You can opt out when you sign up, at any time in your email settings, in any email we send, or by emailing us. |
| Handling a legal claim or regulatory enquiry | Our legitimate interests in defending our position, and legal obligation |
Our terms allow one named person per Seat. To enforce that, and to detect scraping and bulk extraction, we look at access logs, session locations, request volumes, and unlock and export patterns. This is monitoring of account activity, not of you as a person, and we do not use it for any purpose other than security, billing accuracy and enforcing our terms. Our lawful basis is our legitimate interests in protecting a paid data product from misuse.
We do not make decisions about you that are based solely on automated processing and that produce legal effects or similarly significant effects on you. The scores and estimates on the Platform relate to venues, sites and locations, not to individual people.
If your name, job title, business email address or business telephone number appears in Padel Genie, it is because of your professional role in the padel, property, planning or construction sector. Typically that means one of the following.
We collect this from public registers, published websites, web searches and those business data services, not from you. Some email addresses we worked out ourselves, from your name and the pattern your employer uses for its addresses. We did not receive any of it from a club, employer or booking platform.
We may hold your name, job title or role, employer or organisation, business email address, business telephone number, professional profile link, and where the information came from.
We make this available to subscribers of our business product so they can contact the right person at a business about padel court development, supply, investment or operation. Subscribers unlock individual fields and pay per field, and can download what they have unlocked. During early access we approve every subscriber by hand before they can see any of it.
We hold this information in a professional capacity only. We do not hold your date of birth or anything about your personal life, and we do not knowingly hold information about anyone under 18. We do not offer anyone a personal email address or personal mobile number: where an address we hold looks personal, we mark it and never offer it. If you applied for planning permission as a private individual, the site address on your application may be your home. We do not collect special category data such as health, ethnicity, religion, political opinions, trade union membership, sexual orientation or biometric data, and we do not infer it.
Our lawful basis is legitimate interests under Article 6(1)(f) of the UK GDPR. The interests are ours and our subscribers', in being able to identify and reach the right professional contact at a business operating in this sector.
The fact that information is publicly available does not by itself give us a lawful basis, and we do not rely on that. We have carried out and documented a legitimate interests assessment weighing our interests against your rights. The factors that matter in it are that the data relates to your professional role and not your private life, that it is limited to business contact details, that it is used for business-to-business communication of a kind you would reasonably expect to receive in that role, and that you can object at any time and we will act on it.
You have an absolute right to object to processing based on legitimate interests where it is for direct marketing, and we will stop. For other processing under legitimate interests you can object and we will stop unless we can show compelling grounds that override your rights, which in practice we rarely will.
Email hello@padelgenie.io with the email address or telephone number you want removed. You can also use our removal form without emailing us: https://map.padelgenie.io/privacy/contacts/object. If you are named on a planning application, you can also use our removal form without emailing us: https://map.padelgenie.io/privacy/planning/object. You do not need an account and you do not need to explain why. If we do not hold an email address for you, or you are not sure which one we hold, email us with your name and the company you work for and we will remove you by hand.
We will suppress the record and confirm within five working days, and in any event within one month as the law requires. Suppression means the record stops being visible and unlockable in the Platform.
Two honest points about what happens next. First, we keep a minimal suppression record containing only the identifiers you asked us to remove, indefinitely. That is the only way to stop the same details being picked up again from the same public source at the next refresh, and keeping it is both permitted and necessary to honour your request. Second, we cannot recall your details from a subscriber who unlocked them before you objected. Our terms require subscribers to stop using a record when we tell them to, and we will tell them, but once someone has your business email address in their own system they are an independent data controller responsible for their own compliance, and you can exercise your rights directly against them.
Subscribers who unlock your details become independent controllers of them. Our terms require them to establish their own lawful basis, to comply with the UK GDPR and with the Privacy and Electronic Communications Regulations 2003 when they contact you, to give you the information the law requires when they first make contact, and to handle any objection or opt-out you send them themselves and promptly. We are not responsible for what a subscriber does with your details after they unlock them, but we do enforce our terms, and we will end a subscriber's access for misuse.
Beyond what you give us directly, we compile information from public planning registers and local authority portals, land and property registers, public geospatial and environmental datasets, official statistics, mapping and open data projects, booking platforms, club and operator websites, public company registers and business directories, and third party data services. Most of this is about places, buildings and companies rather than people. Where it concerns a person, Part C applies.
We do not sell personal data about people who use the Platform. The one thing we do make available for payment is the business contact details described in Part C, which subscribers unlock field by field. Otherwise we share personal data only with the service providers we need to run the Platform, each of which processes it on our instructions under their standard terms or data processing agreement.
| Provider | What they do | Where |
|---|---|---|
| Cloudflare | Hosting, database, file storage, content delivery, security and bot protection | UK and global edge network |
| Stripe Payments Europe Ltd | Payment processing, subscription billing, invoices | Ireland, with group processing in the United States |
| Resend | Sending transactional email, alerts and digests | United States |
| Federated sign in, where you choose to sign in with Google | United States | |
| PostHog | Product analytics and session recording, understanding how visitors use padelgenie.io and the app so we can improve them. It receives the pages you view and what you do on them, your device and browser details, and an approximate location worked out from your IP address. It does not receive your name or email address. When you are signed in it receives an account identifier | European Union |
| TravelTime Technologies Ltd | Working out drive-time catchments for a location you choose. It receives the map point, the mode of travel, the travel time and a departure time only, never your name or email address | United Kingdom |
| Bouncer, ZeroBounce and DeBounce | Checking whether a business email address held under Part C accepts mail | Bouncer: Poland. ZeroBounce and DeBounce: United States |
| Brave Search | Web searches for the business contacts held under Part C | United States |
Analytics. PostHog is our only analytics provider, and we use its EU region. Our analytics data is stored in the European Union and stays there.
We also share personal data where we are required to by law, by a court or by a regulator, where it is necessary to establish, exercise or defend a legal claim, and with professional advisers under a duty of confidence. If our business or its assets are sold or reorganised, personal data may transfer to the buyer, and we will tell you if that happens.
We keep this list current. If you want to know who we use before you subscribe, ask us.
Some of our providers process data outside the UK, mainly in the United States and the European Economic Area. Where we transfer personal data outside the UK we rely on UK adequacy regulations where they apply, and otherwise on the International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses, together with a transfer risk assessment. You can ask us for details of the safeguards in place for any specific provider.
We use a small number of technologies that store or read information on your device.
Strictly necessary. Sign-in and session management, and security and bot protection. These do not require your consent because the Platform cannot work without them.
Analytics. We run first-party product analytics, using PostHog in its EU region, to understand how the Platform is used, which pages and features people use, and where things break. It records the pages you view and what you click, and keeps its identifier in a cookie and in browser storage on our own domain. The cookie and the local storage entry both have a name beginning "ph_" and hold a random identifier for your browser, not your name or email address. The cookie is set on padelgenie.io, so padelgenie.io and map.padelgenie.io share it, and it lasts for up to a year. PostHog also records sessions on padelgenie.io and map.padelgenie.io, meaning a replay of what a page showed and how you moved around it. What you type into a form is masked in those recordings, and contact details shown in the Deal Book are hidden from recordings. When you are signed in, that activity is linked to an account identifier only. We do not attach your email address, your name or your plan to it.
We do not use analytics to identify who you are personally. We do not use it for advertising or to build an advertising profile, we do not use it to track you across other websites, and we do not share analytics data with any third party for their own purposes.
Since 5 February 2026, first-party analytics used solely to improve a service do not require consent under the Privacy and Electronic Communications Regulations 2003, provided we tell you clearly what we are doing and give you a simple, free way to object. This section is how we tell you.
To switch analytics off, use the "Cookie settings" link in the footer of any page on map.padelgenie.io, or go to map.padelgenie.io/cookies. One switch, which works across padelgenie.io and the app, and it takes effect at once. It is free and does not reduce your access to anything. The same switch stops the daily account activity summary described in section 5.
We remember your choice. Signed out, it is kept in a cookie on this device, which is why switching analytics off writes a cookie rather than removing one. Signed in, it is saved to your account as well, so it follows you to any device you sign in on. You can change it back whenever you like.
You can also object by emailing hello@padelgenie.io, and we will set it for you.
What we do not use. We do not use advertising or retargeting cookies, social media tracking pixels, or third party ad networks.
| Data | How long |
|---|---|
| Account data | While your account is open, then 12 months after it closes |
| Billing, invoices and tax records | 6 years from the end of the financial year they relate to, as company and tax law requires |
| Unlock history | While your account is open, then 24 months, so we can restore your unlocks if you come back |
| Access and security logs | 12 months |
| Analytics | 14 months |
| Account activity summary (daily counts per account) | 90 days |
| Emails and support correspondence | 24 months from the last message |
| Business contact records under Part C | 24 months after we last found you in any source, unless a subscriber has unlocked your details, in which case while they hold that unlock. Sooner if you object or ask us to delete them |
| Suppression records | Indefinitely, limited to the identifiers needed to keep an objection honoured |
We apply these periods by hand until deletion is automated. Where we no longer need personal data we delete it or make it permanently anonymous.
We host on Cloudflare's infrastructure. Data is encrypted in transit. Passwords are stored only as cryptographic hashes using a vetted authentication library, never in readable form, and nobody at Padel Genie can see your password. Access to production systems is restricted and protected by multi-factor authentication. We never see or store full payment card details.
No system is perfectly secure. If a breach occurs that is likely to risk your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours where the law requires, and tell you directly where the risk to you is high.
You have the right to:
Email hello@padelgenie.io to exercise any of these. We will respond within one month, and will tell you if we need longer because the request is complex. There is no charge unless a request is manifestly unfounded or excessive. We may ask you to confirm your identity before we act, so that we do not disclose someone's data to the wrong person.
The Platform is not designed for or directed at children. Accounts are for people aged 18 or over. We do not knowingly collect personal data from children, and we do not knowingly hold business contact details for anyone under 18. If you believe we hold a child's data, tell us and we will delete it.
We may update this policy. Where a change materially affects how we use your personal data, we will tell you by email or by notice on the Platform before it takes effect. The date at the top shows when it was last changed, and we keep previous versions available on request.
If you are unhappy with how we have handled your personal data, tell us first at hello@padelgenie.io and we will try to put it right.
You also have the right to complain to the Information Commissioner's Office at any time, and complaining to us first is not a precondition.
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk
Breakfast Enterprises Ltd trading as Padel Genie
Flat 17, Scholars House, 36 Glengall Road, London NW6 7GF
Company number 11414686. VAT GB 308 967 466.
hello@padelgenie.io
Terms · Privacy · Cookie settings · Object to being listed
Padel Genie is operated by Breakfast Enterprises Limited, a company registered in England and Wales, trading as “Padel Genie”. Questions or complaints? Email James at hello@padelgenie.io.