Privacy Policy

Last updated: 5/9/2026

1. Data controller

Kordin Tennis School, Malta, is the data controller for personal data collected through this platform.

2. Data we collect

We collect the following personal data:

• Name, date of birth, email address, and phone number
• Guardian names and contact details (for minors)
• ID card numbers (for tax rebate purposes only, where provided)
• Medical conditions disclosed voluntarily for coaching safety
• Attendance and session records
• Payment information (processed via Stripe — we do not store card details)

3. Legal basis for processing (GDPR)

We process your data on the following legal bases:

• Contract performance: To manage your enrolment and provide coaching services
• Legitimate interest: For attendance tracking and safety management
• Consent: For marketing communications (where opted in)
• Legal obligation: For tax and compliance purposes

4. How we use your data

Your data is used to process applications, manage placements, record attendance, generate reports, and communicate about your membership. We do not sell data to third parties.

5. Data retention

We retain personal data for as long as necessary to fulfil the purposes above, or as required by Maltese and EU law. Student records are retained for up to 7 years after the last active term.

6. Your rights (GDPR)

You have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us at info@kordintennnis.mt. You may also lodge a complaint with the Information and Data Protection Commissioner of Malta.

7. Data security

Data is stored securely with Supabase (EU region) and transmitted over encrypted HTTPS connections. Access is restricted by role-based permissions.

8. Cookies

We use essential cookies only, required for authentication. No tracking or advertising cookies are used.

9. Contact

For privacy enquiries: info@kordintennnis.mt