Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, store, and protect personal data when you use the Wushu Precision platform and services for organising, managing, scoring, and displaying sports competitions (the "Services"). We are committed to protecting your privacy and complying with all applicable data protection laws, including the UK GDPR, EU GDPR (where applicable), and the Data Protection Act 2018.

By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data controller

The data controller responsible for your personal data is:

Wushu Precision
[Company address — to be confirmed]
[Contact email — to be confirmed]

If you have any questions about this Privacy Policy or how your data is handled, you can contact us at the email above.

3. Personal data we collect

3.1 Data you provide directly

• Name and date of birth.
• Email address.
• Account login credentials.
• Gender and nationality.
• Club / team affiliation.
• Competition data you create or manage.
• Participant information you input, upload, or import.
• Scores, results, rankings, and performance data.
• Communications you send to us.

3.2 Data collected automatically

• IP address.
• Device information.
• Browser type and version.
• Usage data (e.g., pages visited, features used).
• Log files and diagnostic data.

3.3 Data provided by third parties

If you upload or import data about other individuals (e.g., athletes, team members), you confirm that you have lawful authority to do so.

4. How we use your personal data

We process personal data only where we have a lawful basis under UK/EU data protection law. We use your data for the following purposes:

4.1 To provide and operate the Platform

• Creating and managing user accounts.
• Running, scoring, and administering competitions.
• Displaying results, rankings, and statistics.
• Facilitating communication between organisers and participants.

4.2 To improve and secure the Platform

• Monitoring usage patterns.
• Debugging, testing, and enhancing functionality.
• Preventing fraud, misuse, or security breaches.

4.3 To comply with legal obligations

• Responding to lawful requests from authorities.
• Maintaining accurate records.
• Ensuring compliance with data protection law.

4.4 With your consent

Where required, we may process data based on your explicit consent (e.g., marketing communications, optional photography/media capture). You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

5. Lawful bases for processing

We rely on the following lawful bases under the UK GDPR and EU GDPR:

• Contractual necessity — to provide the Services you request.
• Legitimate interests — to operate, secure, and improve the Platform.
• Legal obligation — to comply with applicable laws.
• Consent — where explicitly required (e.g. photography of minors, marketing).

Our legitimate interests include ensuring the integrity of competition results, maintaining platform security, and improving user experience.

6. Data visibility and publication

You acknowledge that:

• Competition results, rankings, and performance data may be publicly displayed or shared with participants.
• Organisers may have access to participant data necessary for running competitions.
• Some information may remain visible after account deletion where required to preserve competition history.

We minimise personal data displayed publicly wherever possible.

7. Sharing your personal data

We may share your data with:

• Service providers who support platform operations (e.g., hosting, analytics, email delivery).
• Competition organisers where necessary for event administration.
• Legal authorities where required by law.
• Third parties in the event of a business transfer (e.g., merger or acquisition).

We never sell your personal data. All third-party processors are bound by strict contractual obligations to protect your data.

8. International data transfers

If we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

• UK/EU adequacy decisions.
• Standard Contractual Clauses (SCCs).
• Additional technical and organisational protections.

9. Data retention

We retain personal data only for as long as necessary to:

• Provide the Services.
• Maintain accurate competition records.
• Comply with legal obligations.
• Resolve disputes.

Competition results may be retained indefinitely where necessary for historical accuracy. Consent records (the timestamps at which you accepted each document) are retained for as long as your account exists, plus a reasonable period afterwards, to demonstrate lawful processing.

10. Your rights

Under UK GDPR and EU GDPR, you have the following rights:

• Right of access — request a copy of your personal data.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data (subject to exceptions for competition records).
• Right to restrict processing.
• Right to object to certain processing.
• Right to data portability.
• Right to withdraw consent at any time.

To exercise your rights, contact us at [Contact email — to be confirmed].

11. Security measures

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption in transit and at rest.
• Role-based access controls and server-side authorisation.
• Secure hosting environments (Firebase).
• Regular security review of the platform's rules and access patterns.

However, no system is completely secure, and we cannot guarantee absolute protection.

12. Children's data

The Platform is not intended for direct use by children under the age of 18. Where a participant is under 18, registration must be carried out by a parent, legal guardian, or authorised coach who has the necessary consents. Only data necessary for safe and lawful participation will be collected for minors.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via the Platform or email, and will trigger a fresh consent request the next time you sign in. Continued use of the Services constitutes acceptance of the updated policy.

14. Contact us

If you have questions, concerns, or complaints about this Privacy Policy or your personal data, contact:

Wushu Precision
[Contact email — to be confirmed]

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local EU supervisory authority.