
Legal
Last updated: June 2026
This Privacy Policy governs the manner in which The Drop ("The Drop," "we," "us," or "our") collects, uses, maintains, and discloses information collected from users ("you," "your," or "User") of The Drop platform, accessible at enterthedrop.com. The Drop is a pickleball session management platform that enables players to register for sessions, join clubs, and track their play history.
By creating an account and using The Drop, you acknowledge that you have read and agree to the practices described in this Privacy Policy.
1
2
a. Information you provide directly
b. Information collected automatically
c. Information received from Google (Google OAuth sign-in only)
If you choose to sign in with Google, Google shares your name, email address, and profile picture with us. We do not request or receive any other information from Google, including contacts or location. You may revoke this access at any time through your Google account settings.
d. Information provided by Club Administrators
Club Admins may create a temporary guest or placeholder profile on your behalf to manage session rosters, waitlists, and club records before you have registered directly. This information typically includes your name and contact details. This data is held securely and may be fully claimed, corrected, or deleted by you at any time by contacting us at info@enterthedrop.com.
3
We do not use your information for unsolicited marketing or advertising without your prior consent. We do not sell your Personal Information to any third party.
4
If you register for a session run by a club, the Club Admin for that club can view your name, contact details, skill level, registration status, and payment records for sessions within their club. Club Admins cannot access your information in relation to other clubs or platform-wide data.
5
We use the following third-party services to operate the Platform. Each acts as a data processor on our behalf and is contractually bound to handle your data only as directed by us:
| Service | Purpose | Data shared |
|---|---|---|
| Google OAuth | Sign-in authentication | Name, email, profile picture (only if you use Google sign-in) |
| Resend | Transactional email delivery | Your name and email address, included in emails we send you |
| UploadThing | Profile and club image storage | Image files you upload |
| DigitalOcean | Platform hosting and database | All Platform data, stored on servers in New York, USA |
We do not use Google Analytics, advertising networks, or any behavioural tracking tools.
6
From time to time, we may share certain Personal Information with trusted Business Partners whose services complement or integrate with the Platform. Examples may include sport rating platforms, tournament operators, event organisers, or other organisations relevant to the pickleball community.
When we share your data with a Business Partner, we will:
We will not share your Personal Information with a Business Partner for their independent marketing purposes without your express prior consent. Where we rely on consent, you may withdraw it at any time by contacting us at info@enterthedrop.com.
Sport rating and tournament platforms
Where you have linked your DUPR ID to your Account, we may share your play data with sport rating systems to facilitate automated rating submissions or tournament registration at your request. This sharing is a utility driven by your own action in linking your account; it is not background data brokering.
What will never be shared
Your payment records, date of birth, and session authentication credentials will not be shared with Business Partners under any circumstances.
7
We use a single first-party cookie to maintain your signed-in session. It contains an encrypted token (not your Personal Information in readable form) and is deleted when you sign out or after 30 days of inactivity.
We do not use advertising cookies, analytics cookies, or any third-party tracking cookies. Because we set only strictly necessary cookies, no cookie consent banner is required under T&T or EU law. If this changes, this Policy will be updated and you will be notified.
8
Under the T&T Data Protection Act 2011
Under the EU/UK General Data Protection Regulation (GDPR)
If you are located in the European Economic Area or United Kingdom, you additionally have the right to:
To exercise any of these rights, contact us at info@enterthedrop.com. We will respond within 30 days (or within the shorter period required by applicable law). Where we deny a request, we will explain why and, where applicable, how you may appeal.
9
You may request deletion of your Account by contacting us at info@enterthedrop.com. Upon a verified deletion request, we will permanently remove your profile, registration history, and associated Personal Information from the Platform. Anonymised aggregate data (such as session attendance counts) may be retained for operational records but will not be linked to your identity.
10
We retain your Personal Information for as long as your Account is active or as needed to provide you with the Platform's services. Session and payment records may be retained for up to seven (7) years for financial record-keeping purposes. Where you request deletion, Personal Information will be removed or irreversibly anonymised within a reasonable period, except where retention is required by law.
11
We implement commercially reasonable security measures including encrypted session tokens, HTTPS transmission, and access controls. However, no internet transmission is completely secure and we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and the relevant authority in accordance with applicable law.
12
The Platform is not directed at children under 16. We do not knowingly collect Personal Information from children under 16 without verified parental consent. If you believe a child under 16 has registered without consent, please contact us at info@enterthedrop.com and we will promptly remove the account.
13
The Drop operates from Trinidad and Tobago. Your data is stored on servers hosted by DigitalOcean in New York, USA. If you access the Platform from the European Economic Area or United Kingdom, your data is transferred to and processed in the United States, a jurisdiction outside the EEA/UK. We take steps to ensure such transfers are subject to appropriate safeguards consistent with GDPR Article 46, including where applicable the use of Standard Contractual Clauses with our processors.
14
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
15
For any questions, concerns, or requests regarding this Privacy Policy or your Personal Information: