Privacy
Version 1.0 · Last updated 27 September 2026
This website collects nothing. There is no analytics, no tracking pixel, no advertising tag and no third-party font, video or script. Every file this page loads comes from yorally.com. Nothing is written to your device, so there is no cookie banner to dismiss.
The enquiry form
The form on the home page does not submit to a server. Pressing Send enquiry opens your own email app with the details filled in — you send the message yourself, to info@yorally.com. Nothing is stored by this website at any point, because nothing is transmitted to it.
What happens to the email. It arrives in our sales inbox, which is hosted by our email provider. We use it to answer you and to set up a club if you go ahead. We keep enquiries for 24 months from the last contact, then delete them. If you become a customer, the enquiry becomes part of the customer record and is kept for as long as that account exists, plus the retention below. To have an enquiry deleted sooner, email support@yorally.com and we will action it.
The platform is a different matter
Everything above is about this marketing site. The YoRally app — the member portal, the club admin portal and the API — does process personal data, because a booking system cannot work without knowing who booked.
Who controls your data — this matters
YoRally is used by sports clubs to run their bookings and memberships. Your club decides what member information is collected and why. Your club is the data controller; YoRally acts as a data processor on your club's instructions, under a data processing agreement.
In plain terms: if you want your information corrected or deleted, ask your club. They will instruct us and we will act on it. We cannot make those decisions on your club's behalf.
There is a narrow set of things we decide ourselves, and for those we are the controller:
- your sign-in credentials and account security;
- protecting the platform against abuse, fraud and technical attack;
- the business relationship with the club itself — billing contacts, the contract.
What the platform holds
| Category | Examples | Why |
|---|---|---|
| Account | Name, email, phone, postal address where your club records one, profile photo if you upload one, membership type, status and dates, the sports your membership covers | To identify you to your club and let you sign in |
| Bookings | Courts, times, who played, invitations sent and received, watches, cancellations | To run the booking system and show your club its court usage |
| Money | Memberships, invoices, token balance and purchases, payment status | To bill and to keep the club's accounts |
| Competitions | Ladder and league entries, results, standings, event registrations | Only if your club runs competitions |
| Technical | Sign-in events, records of administrative actions in the club portal, server logs, error reports | Security, fraud prevention and keeping the service working |
What we never hold
We do not store your card details. Payments are processed by Stripe, which handles card data directly.
We do not store your IP address. Our firewall sees it while it decides whether a request is abusive — it limits how many requests one address may make — but it is not written to our database, and we do not keep web access logs.
We do not sell personal data, and we do not use it to train machine-learning models or to advertise to you.
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Running your club membership and bookings | Performance of a contract between you and your club |
| Sending booking confirmations, reminders and cancellations | Performance of a contract |
| Invoicing, payment and financial records | Legal obligation (tax law) and contract |
| Keeping the platform secure and preventing abuse | Legitimate interests |
| Keeping records of administrative actions | Legitimate interests — clubs need to trace who changed what |
| Optional marketing about YoRally | Consent — and only if you ask for it |
What other members can see about you
This is decided in the server, not in the app, so no setting can leak it by accident. Every booking is reduced to what the person asking is entitled to before it leaves us:
- Your own booking — you see all of it.
- A game you are playing in — you see the slot, the sport, the court, check-in state, and the names and avatars of the host and the other players, because that is the point of a shared game. You never see their payment, wallet, pricing or contact details, and you are not given their account identifier.
- Anybody else's booking — you see an occupied slot and nothing about the person. The club calendar shows when a court is taken, not who has it.
Your name does appear where you take part in something social — an invitation you send or receive, an event you register for, a ladder you join, and the members list your club shows. Your email address and phone number are never shown to another member.
You can control whether you appear in your club's quick-invite list from your profile.
Children
We do not hold information about children. YoRally stores no names, no dates of birth and no contact details for anyone under 18, and children have no accounts and never sign in.
A club that runs family memberships decides for itself who a membership covers. Where a club keeps a record of that, it keeps it in its own files, as its own controller — it is not held in YoRally.
Safeguarding of children at the club — vetting, supervision, a designated liaison person — is the club's own responsibility under the Children First Act 2015 and its governing body's rules. It is not something YoRally can do on a club's behalf.
Who else processes your data
All of these are bound by contract to process data only on our instructions.
| Provider | Where your data is processed |
|---|---|
| Amazon Web Services | Ireland (eu-west-1) |
| MongoDB Atlas | Ireland (AWS eu-west-1) |
| Stripe | European Union |
| SendGrid (Twilio) | European Union |
| Sentry | European Union |
| UptimeRobot | Receives no personal data |
| Open-Meteo | Receives no personal data |
| OpenStreetMap Nominatim | Receives no personal data |
We will tell clubs before we add a new provider.
International transfers
All personal data is processed within the EEA. Every provider above that handles personal data does so in Ireland or elsewhere in the European Union. No international transfer mechanism is required, because no personal data leaves the EEA.
If that ever changes — if we adopt a provider that processes personal data outside the EEA — we will name the provider and the transfer mechanism here before it begins, and tell club administrators.
How long the platform keeps it
- Account and booking history — for as long as you are a member of the club, then deleted or anonymised as your club instructs. These records do not expire on their own; removing them is an action your club takes.
- Invoices and payment records — kept for seven years to meet Irish statutory retention. This overrides a deletion request: we cannot erase an invoice before that period ends.
- Records of administrative actions — kept for as long as the club's account exists. They exist to show who changed what, so they outlive the change they describe.
- Notifications — kept for as long as the club's account exists.
- Scheduled-job history — deleted automatically after 180 days.
- Server and security logs — 90 days, with a security-event archive kept for one year.
- Error reports — 30 days, then deleted by Sentry.
Security
Data is encrypted in transit and at rest. Access to member information is restricted to your club's own administrators and to the small number of YoRally staff who need it to run the service. Administrative actions are logged.
Our software is tested automatically on every change for faults that could expose one member's information to another. Those checks run both before a change is merged and again before it is deployed, so a change cannot reach the service by going around them.
No system is perfectly secure. If a breach affects your information, we will notify your club, and the Data Protection Commission where the law requires it.
Your rights
Under the GDPR you may ask to see the information we hold about you, have inaccurate information corrected, have it deleted where we are not required to keep it, restrict or object to how it is used, receive it in a portable format, and withdraw consent where we relied on consent.
Because your club is the controller, please contact your club first. If you cannot reach them, or they do not respond, write to support@yorally.com and we will help. For this website, and for anything YoRally holds as controller — an enquiry, a support conversation, a customer account — use the same address. We will respond within one month.
You can complain to the Data Protection Commission (dataprotection.ie), Ireland's supervisory authority, at any time.
Changes
We will post changes here and update the version and date at the top. If a change materially affects how we use your information, we will tell club administrators by email before it takes effect.