Privacy notice
What data DoJoe handles, why, and for how long.
This text is not final. A real privacy notice and terms of service need the provider’s company details, and a lawyer to go over them. Until then this draft describes what actually happens — but it is not a contract.
Who handles your data
The provider’s company name, registered address, tax number and contact email address go here.
What data we handle
- Account data: username, email address and a hash of the password. These are needed to create the account.
- Club data: the names of clubs, groups and members, along with the times of the visits. You enter these, and they belong to your club.
- Payment data: the transaction reference and amount we receive from the payment provider. We neither store nor see card numbers — those are handled by the payment provider on its own page.
- Technical logs: the server’s error logs, for debugging.
Why we handle it
Account and club data are needed to provide the service (performance of a contract), payment data because of accounting obligations, and the logs on the legitimate interest of running the service.
How long we keep it
Club data until the account is deleted. Billing records for the period accounting law requires. Logs for far less time than that.
Processors
The hosting and database provider, and the payment provider. The precise list, with their registered addresses, goes here.
Your rights
Access, rectification, erasure, restriction, portability and objection. You can ask for any of them at the contact email address, and you may complain to your data protection authority.