How we handle your data.

RinkHQ is operated as a sole-trader product. The data controller is the named operator of this RinkHQ instance — email privacy@rinkhq.com for any data request.

• Coaches: name, email, phone, handle, bio, location, home rink, bank details (so parents can pay you), EIHA licence, DBS expiry, payment history.
• Parents: name, email, phone, payment history, booking notes.
• Skaters (children): name, date of birth, age group, position, club, medical notes (with severity), emergency contact, photo consent toggle, profile photo if uploaded.
• System: bookings, reviews, IP address (request logs only), session cookies for authentication.

To run the booking flow: surface lessons, take registrations, record payments, send reminders, hand the right medical info to the right coach at the right time. We don’t profile, advertise, or sell.

• Coachescan see the data of any parent + skater who has booked with them. They can’t see other coaches’ rosters.
• Parents can only see their own data + their bookings.
• The public sees only what a coach has explicitly published — their profile, their session list, and reviews they have approved for publication.

Row-level security policies in the database enforce these separations — they aren’t just UI conventions.

Player records are entered by the parent and only ever accessed by the coach the parent has booked with. Photo consent is off by default — coaches can’t share imagery of a skater unless the parent has opted in.

We send transactional emails (booking confirmations, reminders, payment nudges, refund notices, review requests) via Resend. We don’t send marketing email and don’t share email addresses with third parties.

Postgres database hosted by Supabase (EU region) and static assets on Vercel’s edge network. Backups run inside Supabase. We don’t export data outside the platform.

Access, rectification, erasure, restriction, portability, objection. Email privacy@rinkhq.com from the address on your account and we’ll respond within 30 days. You can also complain to the ICO at ico.org.uk.

We’ll update this page (and bump the date at the top) when anything material changes. Significant changes get an email to active accounts.