1. Scope and review status
This page is a working privacy policy for GripRank and is published so organisers, athletes, and families can review the current data-handling intent. Any statement marked [TO CONFIRM — Winson/legal] requires owner or legal sign-off before this policy is treated as final.
This policy is intended to cover public visitors, organiser accounts, judge or staff accounts, athlete registration flows, and leaderboard or event pages served by GripRank.
2. Information we collect
GripRank may collect the following categories of information:
- Account data such as name, email address, authentication identifiers, and role or organisation membership.
- Athlete registration data such as athlete name, date of birth, gender category, team or gym, emergency or guardian details, and competition selections.
- For minors, organiser-submitted registration details including minors' names and dates of birth, plus guardian-provided contact information where required for an event.
- Competition operations data such as scores, rankings, attendance, judging records, start lists, and published results.
- Support or contact submissions you send to GripRank.
- Technical and usage data from website analytics, performance, and error monitoring tools.
3. How we use information
GripRank uses information to operate and improve the service, including to:
- Create and manage accounts, permissions, and access to organiser or athlete features.
- Process athlete registration, generate start lists, run competitions, and publish results.
- Support age-based categories or eligibility checks that may rely on date of birth.
- Process payments and reconcile purchases or registration fees through Stripe.
- Measure site usage, reliability, and performance through analytics tools including Umami and Vercel Analytics/Speed Insights.
- Respond to enquiries, troubleshoot issues, and protect the platform against abuse or misuse.
4. Payments and service providers
GripRank expects to use Stripe for payment processing. GripRank does not intend to store full card numbers on its own servers when Stripe-hosted or Stripe-secured flows are used. Exact payment data flows, billing records retained by GripRank, and Stripe product configuration are [TO CONFIRM — Winson/legal].
GripRank also uses or plans to use service providers for hosting, analytics, authentication, communications, and operational support. Named providers currently visible in the application include Stripe, Umami, and Vercel. The final processor/subprocessor list and contract posture are [TO CONFIRM — Winson/legal].
5. Sharing and disclosure
GripRank may share personal information only as needed to operate the service, for example:
- With event organisers, judges, and authorised staff who need registration or scoring data to run a competition.
- With payment, hosting, analytics, authentication, and support vendors acting on GripRank's behalf.
- With the public where event results, rankings, athlete names, or team names are intentionally published as part of competition operations.
- When required by law, legal process, or to protect rights, safety, and platform integrity.
Whether minors' personal data is displayed publicly by default, and which fields are restricted or redacted, is [TO CONFIRM — Winson/legal].
6. Retention
GripRank expects to retain account records, competition history, registration records, payment references, and support communications for as long as needed to operate events, maintain reporting history, resolve disputes, and meet legal obligations.
Specific retention periods, deletion schedules, backup windows, and whether organisers can self-delete data are [TO CONFIRM — Winson/legal].
7. Your choices and requests
Depending on your location and relationship to a competition, you may be able to request access, correction, or deletion of certain personal data, or ask questions about how your information is used.
The exact request workflow, identity-verification steps, and response timelines are [TO CONFIRM — Winson/legal].
8. Security and children
GripRank aims to use reasonable technical and organisational safeguards to protect account, registration, scoring, and payment-related records. GripRank also recognises that athlete registration may include children's or minors' information for legitimate competition administration purposes.
The legal basis for processing minors' data, required parent or guardian consents, and any age-gating or regional compliance language are [TO CONFIRM — Winson/legal].
9. Contact
Privacy questions or requests can currently be directed through the contact page or by email to contact@griprank.com.
The official legal entity name, mailing address, and privacy contact details are [TO CONFIRM — Winson/legal].