Privacy policy

Last updated 2026-08-18

We coach young players, so we take their data seriously. This says plainly what we collect, why, who else sees it, and how to get it removed.

Who is responsible

Proballers Coaching, Koirasaarentie 37 A, 00590 Helsinki. For anything about your data, contact proballerscoaching@gmail.com.

We have not appointed a data protection officer — we are small enough that the law does not require one. Requests go to the address above and we answer within a month.

What we collect

Only what booking and invoicing a session actually requires:

• Account — name, email, password (stored only as a salted hash — we never see it), phone number and home area.
• Bookings and billing — the times you booked, the coach, the city, your billing name and address, invoices and payment records.
• Messages — the coach–customer chat, and any wishes you write on a booking.
• Reviews — the star rating and text you leave, which appear publicly on the coach’s page.
• Usage — page views, where you arrived from, and when the account was last active.

We do not collect location data, do not track you across other sites, and do not buy or sell data.

Health information

People sometimes write injuries or health conditions in the “wishes for the coach” field so the coach can take them into account. That counts as special-category data under the GDPR.

We process it only with your explicit consent — which you give by choosing to type it into that field. Only the coach concerned and the site administrators can see it. It is not included in the Google Sheets export and is not shared with anyone else. You can ask us to delete it at any time, and you are equally welcome to leave the field empty and tell the coach in person.

Children and young people

We coach young players, so this matters to us. In Finland someone aged 13 or over can consent for themselves; for anyone younger, a parent or guardian consents on their behalf.

When an account is created we ask you to confirm that you are 13 or older, or that your parent or guardian has agreed to the account. If a child under 13 has created an account without a guardian’s agreement, tell us and we will delete the account and its data.

A guardian can always ask to see, correct or delete their child’s data, exactly as they could their own.

Filming during sessions

A coach may film parts of a session so they can be watched through with the player. Video is personal data. It is used only for coaching, seen by that coach, and published nowhere.

To publish a photo or video — on social media or on this site — we always ask separately, and we ask in person at the session: the player, and a guardian where the player is under 18. Permission is not given by registering or by booking, and nothing is published before it is given. Consent is voluntary: saying no changes nothing about the coaching. You can withdraw permission at any time, and we then remove the material from the channels we control.

You can refuse filming altogether — just tell the coach.

Why we process it

• Performing our agreement — making the booking, telling the coach, invoicing and receipts.
• Legal obligation — accounting law requires invoices and booking records to be kept.
• Legitimate interest — keeping the service working, preventing abuse, and counting visitors.
• Consent — health information (above) and public reviews.

Who else sees it

We do not sell data. We use these providers, who process data on our behalf:

• Render — hosting for the server and database.
• Brevo (Sendinblue) — sending email (invoices, receipts, reminders).
• Google Sheets — exporting bookings, invoices and the customer list into our own bookkeeping. The export includes name, email, phone number and booking details.
• Vipps MobilePay — processing your payment when you pay by MobilePay.

A coach sees the name, booking details and wishes for their own sessions — not billing or payment details.

Data is stored within the EU. Google may also process data outside the EU; those transfers rely on the European Commission’s standard contractual clauses.

How long we keep it

• Invoices and booking records: 6 years from the end of the financial year, as accounting law requires. We cannot delete these earlier on request.
• Account, messages and notes: deleted after 24 months of inactivity — or as soon as you ask.
• Visitor statistics: at most 24 months, after which only counts remain.
• Abandoned signups: deleted within a day.

Cookies

We use two cookies, both our own. There are no advertising or tracking cookies:

• pbf_session — keeps you logged in. Removed when you log out.
• pbf_vid — a random identifier used to count visitors and where they arrived from. Lasts a year. It contains nothing about who you are and is shared with nobody.

Because neither cookie follows you to other sites and nothing is passed on, we do not ask for separate consent. You can block cookies in your browser settings; logging in will not work if you do.

Your rights

You can see, correct and delete your data, restrict or object to processing, receive your data in a portable form, and withdraw any consent you gave.

You can delete your account yourself from My bookings. Deleting clears your name, email, phone, address, messages and notes straight away. Invoices remain in the accounts without your personal details, because the law requires us to keep them.

For anything else write to proballerscoaching@gmail.com. If you are unhappy with how we handled it, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Security

The site is served over HTTPS. Passwords are stored only as bcrypt hashes. Customer data is reachable only by administrators, and by coaches for their own sessions. If a breach affects you we will tell you and the authorities within the time the law allows.

Changes

This policy was last updated on 2026-08-18. If we change it substantially we will say so on the site or by email.