Privacy Policy

1. Scope

This Privacy Policy applies to all Users of Zeetius for Academies, including Academies, administrators, coaches, players, parents/guardians, and franchisees, regardless of their geographical location.

We comply with Indian data protection laws and, where applicable, international frameworks such as the General Data Protection Regulation (GDPR) for EU residents and the Children’s Online Privacy Protection Act (COPPA) for children under 13 in the United States.

2. Information We Collect

We may collect the following categories of information:

• Personal Information: Name, email address, phone number, address, date of birth, and identity details.
• Account Information: Login credentials, Academy details, subscription plan, and transaction records.
• Player & Training Information: Performance data, schedules, attendance, and progress tracking.
• Biometric/Health Data: Metrics such as height, weight, medical conditions, or other health-related inputs (collected only with explicit consent).
• Financial Information: Payment details (processed securely via third-party gateways).
• Technical Data: Device information, IP address, browser type, operating system, and usage statistics.
• Cookies & Tracking Data: Data collected through cookies, analytics tools, and similar technologies.

3. Legal Basis for Processing (GDPR)

For Users in the European Union, we rely on the following legal bases under GDPR:

• Consent: For biometric/health data, cookies, and marketing communications.
• Contractual Necessity: To deliver subscription services.
• Legal Obligation: Compliance with legal and regulatory requirements.
• Legitimate Interests: Improving services, ensuring platform security, and preventing fraud.

4. Compliance with Indian Laws

We comply with the following Indian laws and regulations:

• Information Technology Act, 2000.
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• Digital Personal Data Protection Act, 2023 (DPDP Act).

Under the DPDP Act, Users have the following rights:

• Right to access personal data.
• Right to correction and updating.
• Right to erasure of personal data.
• Right to nominate a representative in the event of incapacity.

5. Children’s Privacy (COPPA & Indian Standards)

• The Platform is not directed at children under 13 without parental consent.
• Users under 18 years must have parental or guardian consent for account creation and data sharing.
• Parents/guardians can review and request deletion of their child’s data by contacting us.

6. How We Use Information

• Provide and manage the Platform’s services.
• Facilitate player registration, training, and event management.
• Enable communication between Academies, coaches, and players.
• Process payments and manage financial records.
• Customize user experience and improve functionality.
• Comply with legal obligations.
• Prevent fraud, misuse, or unauthorised access.

7. Sharing of Information

We do not sell personal data. We may share information with:

• Authorised Users: Within the subscribed Academy (e.g., coaches, admins, parents).
• Service Providers: Payment processors, cloud hosting, analytics, and IT support.
• Legal & Regulatory Authorities: Where disclosure is required by applicable law.
• Business Transfers: In the event of merger, acquisition, or restructuring.

8. Cookies & Tracking

• We use cookies and similar technologies for authentication, analytics, and personalisation.
• Users can manage cookie preferences through browser settings or provided opt-out tools.
• Where required by law (e.g., GDPR), Users will be prompted for consent.

9. Biometric & Health Data

• Collected only with explicit consent from the User (or parent/guardian for minors).
• Used solely for training, performance tracking, and health management purposes.
• Processed and stored with enhanced security measures in compliance with DPDP Act and GDPR.

10. Data Retention

• We retain personal data only as long as necessary to provide services or comply with legal obligations.
• Data may be anonymised or securely deleted once retention is no longer required.

11. Data Security

• We implement industry-standard security measures including encryption, firewalls, and access controls.
• While we strive to protect data, no transmission over the Internet is 100% secure. Users share information at their own risk.

12. International Data Transfers

For Users outside India, personal data may be transferred to and processed in India or other jurisdictions where our servers or service providers are located. We ensure such transfers comply with applicable data protection laws through adequate safeguards.