Privacy Policy

This Privacy Policy explains how Codall (ABN 19 299 372 741), a sole trader business trading as Codall ("we", "us", "our"), collects, uses, stores, and discloses personal information in connection with our websites and applications, including Dutch Masters (dutchmastersfootball.com) and any future Codall products (collectively, "our Products").

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our Products, you agree to the collection and use of information in accordance with this policy.

1. What information we collect

We may collect the following types of personal information depending on which Product you use:

• Account information: name, email address, and password (stored securely via hashed authentication)
• Profile information: sport preferences, team affiliations, or other details you choose to provide
• Usage data: how you interact with our Products, features used, session duration, and error logs
• Device information: browser type, operating system, device identifiers, and IP address
• Payment information: billing name and address; card details are processed by Stripe and are not stored by us

2. How we collect information

We collect personal information:

• Directly from you when you create an account, complete a form, or use our Products
• Automatically through cookies, analytics tools, and application logs when you use our Products
• From third-party services such as Supabase (authentication and database), Stripe (payments), and Vercel/Netlify (hosting)

3. How we use your information

We use personal information to:

• Provide, operate, and improve our Products
• Authenticate your identity and maintain account security
• Process payments and manage subscriptions
• Send transactional emails (password resets, account notices) and, where you have opted in, product updates
• Respond to support requests sent to support@codall.com.au
• Comply with our legal obligations
• Analyse usage patterns to improve product features and performance

We do not sell your personal information to third parties.

4. Disclosure of your information

We may share your personal information with:

• Service providers: Supabase (database and authentication), Stripe (payment processing), Vercel and Netlify (hosting), and other infrastructure providers who process data on our behalf under confidentiality obligations
• Other users: certain Products involve shared data (e.g. leaderboards or group features) where your display name or score may be visible to other participants — this is made clear within each Product
• Legal authorities: where required by Australian law or a valid court order

Our third-party service providers may be located outside Australia. We take reasonable steps to ensure overseas recipients handle information consistently with the APPs.

5. Data storage and security

Your data is stored on Supabase infrastructure hosted in Australia (Sydney, ap-southeast-2) and Singapore, depending on the Product. We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction, including encrypted connections (HTTPS), hashed passwords, and row-level security in our database.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but take the protection of your data seriously.

6. Cookies and tracking

Our Products use session cookies and local storage to maintain authentication state. We may use anonymous analytics (such as Vercel Analytics) to understand usage patterns. We do not use third-party advertising cookies or sell data to advertisers.

7. Your rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or outdated information
• Request deletion of your account and associated data
• Opt out of marketing communications at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any of these rights, contact us at support@codall.com.au. We will respond within 30 days.

8. Children's privacy

Our Products are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. Retention

We retain personal information for as long as your account is active or as needed to provide our Products. You may request deletion of your account and data at any time by contacting support@codall.com.au. Some information may be retained for a limited period for legal or audit purposes.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting a notice within the relevant Product or by email. Continued use of our Products after changes are posted constitutes acceptance of the updated policy.

11. Contact us