Privacy Policy

1. Introduction

Welcome to TurfLet ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

By using TurfLet, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Name: For user identification and booking confirmations
• Email Address: For account creation, notifications, and customer support
• Phone Number: Optional, for booking confirmations and order delivery
• Physical Address: Optional, required for product delivery
• Payment Information: Processed securely through PCI-DSS compliant payment gateways

2.2 Location Data

• Approximate Location: Used to find nearby turf fields
• Precise Location: Optional, for navigation to turf fields

2.3 Usage Data

• App interactions and search history
• Booking and purchase history
• Device information and IP address
• Crash reports and performance data

2.4 User-Generated Content

• Profile pictures and photos
• Reviews and ratings
• Messages and team communications

3. How We Use Your Information

• To provide and maintain our services
• To process bookings and transactions
• To send booking confirmations and notifications
• To provide customer support
• To improve our app and user experience
• To personalize content and recommendations
• To detect and prevent fraud
• To comply with legal obligations

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with:

• Payment Processors: SSLCommerz, Stripe (for payment processing)
• Analytics Services: Firebase Analytics (for app improvement)
• Cloud Storage: Supabase (for data storage)

4.2 Legal Requirements

We may disclose your information if required by law or to protect our rights and safety.

4.3 What We Don't Do

• We do not sell your personal data to third parties
• We do not share data for advertising purposes
• We do not use your data for purposes other than stated

5. Data Security

We implement industry-standard security measures:

• Data encrypted in transit (HTTPS/TLS)
• Data encrypted at rest
• Secure authentication and password hashing
• Regular security audits
• PCI-DSS compliant payment processing
• Access controls and monitoring

6. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a common format
• Objection: Object to certain data processing
• Restriction: Limit how we use your data

To exercise these rights, contact us at [email protected]

7. Data Retention

• Active Accounts: Data retained while account is active
• Deleted Accounts: Data removed within 30 days of deletion request
• Transaction Records: Retained for 7 years (legal requirement)
• Anonymized Data: May be retained for analytics

8. Children's Privacy

TurfLet is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. International Data Transfers

Your data may be transferred to and stored in servers located outside Bangladesh. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and preferences
• Analyze app usage and performance
• Personalize content and recommendations

See our Cookie Policy for more details.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or app notification. Continued use of TurfLet after changes constitutes acceptance of the updated policy.

12. Contact Us

13. Compliance

This Privacy Policy complies with:

• General Data Protection Regulation (GDPR)
• Bangladesh Data Protection Act
• Google Play Store Data Safety requirements
• Industry best practices for data protection