(§) Legal

Privacy Policy

What personal data East Hoops collects, why, who we share it with and the rights you have under Sri Lanka’s Personal Data Protection Act.

Last updated

The short version

  • 01

    We collect only what we need to run the academy: your profile, fee payments and attendance.

  • 02

    Children’s data is handled with a parent or guardian’s involvement and extra care.

  • 03

    We never sell your data or use it for advertising.

  • 04

    Ask us any time to see, fix or delete your data.

01Who we are

East Hoops is a basketball academy at Webber Stadium, Batticaloa, Sri Lanka. We decide how your personal data is used, which makes us the controller under the Personal Data Protection Act, No. 9 of 2022 (PDPA).

02What we collect

DataWhere it comes from
Name, email address and profile photoYour Google account when you sign in
Phone, date of birth, age group, program, guardian name and phoneYou, in your portal profile
Admission number, membership status and monthly feeThe academy, when your application is reviewed
Payment month, amount, method, note and slip imageYou, when you record a payment
Attendance recordsCoaches, during sessions
Sign-in timesRecorded automatically when you sign in
Photos and video from sessions and eventsAcademy staff
Analytics data such as pages viewed, device and approximate locationGoogle Analytics, only if you accept analytics cookies

Visitors who do not sign in only add to an anonymous daily count of page, device type and where the visit came from. It holds nothing that identifies you.

03Why we use it

PurposeLegal basis under the PDPA
Reviewing applications and running your membershipPerforming our agreement with you
Tracking fees, checking payment slips and keeping accountsAgreement and legal obligations
Contacting you or your guardian about training, changes or emergenciesAgreement and vital interests
Keeping the portal secure and preventing misuseLegitimate interests
Sharing photos and news of academy lifeLegitimate interests, and you can object at any time
Measuring website use with Google AnalyticsYour consent, which you can withdraw

04Children’s data

Many of our players are under 18. A parent or guardian must agree before a child’s profile is completed and can exercise every right on this page on the child’s behalf.

We collect only what is needed for training, safety and fees. Players’ personal details are never published. In gallery photos and news we use first names at most, and we remove any image a parent asks us to.

05Who we share it with

Your data is seen only by authorised academy staff. We use trusted service providers who process it on our instructions:

ProviderWhat they do
Google FirebaseSign-in, database and, with consent, Google Analytics
CloudinaryStores payment slips, gallery photos and news images
VercelHosts and delivers the website
SetaByteBuilds and maintains the website under a confidentiality duty

We share data with others only when the law requires it, for example with authorities, or to protect someone’s safety. We never sell personal data and never use it for advertising.

06Data stored outside Sri Lanka

Our providers may store data on servers outside Sri Lanka. We use providers with strong security and contracts that protect your data, as the PDPA requires.

07How long we keep it

  • Profile and attendance: while you are a member and for two years after you leave, so you can rejoin easily.
  • Payment records and slips: as long as tax and accounting law requires.
  • Analytics: no longer than 14 months, in line with our Google Analytics settings.
  • Photos and news: while relevant, or until you ask us to remove them.

When data is no longer needed we delete or anonymise it.

08Keeping it safe

Data travels over encrypted connections. Access is limited by role: players see only their own records, and staff see only what their job needs. Uploads require a signed-in account. No system is perfect, so if a breach ever puts you at risk, we will tell you and the authorities as the law requires.

09Your rights

Under the PDPA you can:

  • Ask for a copy of the data we hold about you.
  • Correct or complete anything that is wrong. Most profile details can be edited in the portal.
  • Ask us to delete your data, unless the law requires us to keep it.
  • Object to or limit how we use it, including photos.
  • Withdraw consent at any time, for example by changing your cookie settings.

We reply within 21 working days. If you are not happy with our answer, you can complain to the Data Protection Authority of Sri Lanka.

10Changes to this policy

We will update this page when our practices change and show the new date at the top. Important changes will be announced in the portal.

11Contact us

East Hoops is the controller of the personal data described on this page. Reach us at:

  • Phone or WhatsApp: 076 602 3212 or 076 017 4011
  • Instagram: @easthoops_
  • In person: Webber Stadium, Batticaloa, Sri Lanka, during training hours