The Tennis Mentor

Legal

Privacy Policy

Last updated: 15 July 2026

1. Who we are

This website and the community platform behind it are operated by Mark Jarvis MRJ, trading as Tennis Creators, ul. Fabryczna 14d, 53-609 Wrocław, Poland (NIP 7532455176), referred to as "we", "us" or "our". We are the data controller for the personal data described in this policy under the EU General Data Protection Regulation (EU) 2016/679 and, for visitors in the United Kingdom, the UK GDPR. You can contact us about privacy at mark@tenniscreators.com.

2. The data we collect

  • Account data: your name, email address and password hash when you create an account or join the waitlist.
  • Profile and content: anything you choose to add, such as a profile photo, posts, comments, messages and uploaded videos.
  • Payment data: subscriptions and purchases are processed by Stripe. We never see or store your full card details; we hold records of what was bought, when, and the billing status.
  • Usage data: with your consent, anonymised analytics about how the site is used. See the Cookie Policy for exactly what runs and when.
  • Technical data: server logs (IP address, user agent, timestamps) kept for security and troubleshooting.
  • Consent records: when you make a choice on the cookie banner we record it (an anonymous device id, the version of the cookie list you saw, your exact choices and the time) so we can demonstrate consent as Article 7(1) GDPR requires.
  • AI-assisted features: some coaching features, like lesson report drafts and smart search, send the relevant content to the AI providers named in section 4 to generate their results. The output is always reviewed inside the platform, and the content is not used to train those providers' models.

3. Why we use it, and the lawful basis

Each purpose relies on a lawful basis under Article 6 of the UK and EU GDPR:

  • To provide the service (accounts, community features, coaching content, purchases): performance of a contract, Article 6(1)(b).
  • To keep the service safe (authentication, fraud and abuse prevention, moderation): legitimate interests, Article 6(1)(f). You can object at any time (see section 8).
  • To improve the site (consented analytics): consent, Article 6(1)(a), which you can withdraw at any time via Manage cookies in the footer. Withdrawing is as easy as consenting, as Article 7(3) requires.
  • To send service messages (receipts, security notices, community notifications you control): performance of a contract and legitimate interests.
  • Marketing emails, if any: consent, with an unsubscribe link in every message, as required by the UK Privacy and Electronic Communications Regulations 2003 (PECR) and the EU ePrivacy Directive.
  • To meet legal obligations (tax and accounting records, responding to lawful requests): Article 6(1)(c).

4. Who we share it with

We use a small number of processors to run the service, each bound by a data processing agreement under Article 28 GDPR and each receiving only what it needs:

  • Supabase: database, authentication and file storage.
  • Vercel: hosting and, with your consent, anonymised analytics.
  • Stripe: payment processing.
  • SureContact: the email sign-up form; receives what you submit there (name, email, your answers) so we can contact you.
  • Resend: sending our transactional and notification emails.
  • Anthropic: powers AI coaching features such as lesson report drafts; receives the relevant lesson or video context to generate them. This content is not used to train their models.
  • Voyage AI: turns community content into search indexes so results are relevant. This content is not used to train their models.
  • [FOR LEGAL REVIEW: confirm the list is complete, e.g. video CDN, background jobs]

We do not sell your personal data. We may disclose data where the law requires it.

5. International transfers

Some processors store data outside the UK and the European Economic Area. Where that happens we rely on the safeguards Chapter V of the UK and EU GDPR permits: adequacy decisions and adequacy regulations where they apply, and otherwise the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, with supplementary measures where needed.

6. How long we keep it

  • Account data: kept while your account is active, then deleted or anonymised within 12 months of closure unless we must keep specific records longer.
  • Payment and tax records: kept for 6 years plus the current year, as UK and EU tax law requires.
  • Consent records: kept for as long as the related processing could be challenged, as evidence of your choices.
  • Server logs: rotate on a short schedule, typically within 90 days.

7. Children

Our service is not directed at young children. You must be at least 16 to hold your own account; younger players take part through spaces managed with a parent or guardian, in line with Article 8 GDPR on children's consent.

8. Your rights

Under Articles 15 to 21 of the UK and EU GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing (including any processing based on legitimate interests), and to data portability. Where processing is based on consent you can withdraw it at any time without affecting earlier processing. Contact mark@tenniscreators.com and we will respond within one month, as Article 12(3) requires.

You also have the right to complain to a supervisory authority. Our lead authority is the President of the Personal Data Protection Office (UODO) in Poland (uodo.gov.pl). In the UK you can complain to the Information Commissioner's Office (ico.org.uk), and in the EU to the data protection authority of the country where you live or work.

9. Cookies

Cookies and similar technologies are governed by PECR in the UK and the ePrivacy Directive in the EU, and are covered in our Cookie Policy, which lists every cookie we use, why, and for how long. Nothing non-essential runs before you agree to it.

10. Changes to this policy

If we change this policy in a way that matters, we will update this page and, where the change is significant, tell you directly or re-ask for consent.