Privacy Policy

Touch & Pass Fan App — Last updated: June 2026

Last updated: 22 June 2026

1. Who We Are

This Privacy Policy applies to the Touch & Pass mobile application ("the App"), a free fan-facing app operated by One Sport Technologies Ltd, a company registered in England and Wales. Our website is pitch-side.co.uk.

Touch & Pass allows rugby supporters to follow their clubs with live scores, match events, lineups and player stats. It is the fan companion to the Pitchside Admin club management platform.

If you have any questions about this policy or how we handle your data, please contact us at kevin@pitch-side.co.uk.

2. What Data We Collect

We collect and process the following categories of personal data:

Account Data

When you create a Touch & Pass account, we collect your email address and a user ID generated by our authentication system. You do not need to provide your real name to use the App. Account data is used solely to maintain your preferences and keep your session secure.

Preferences and Favourites

To personalise your experience, we store your selected favourite teams and clubs. This allows us to show you relevant fixtures, results and live match updates when you open the App.

Push Notification Tokens

If you opt in to push notifications, we collect a device push notification token (provided by your device's operating system via Expo). This token is used solely to send you match alerts and score updates for the teams you follow. You can withdraw consent and disable notifications at any time through your device settings.

Match and Club Data (Read-Only)

Touch & Pass displays match data, player information and statistics entered by clubs using the Pitchside Admin app. As a fan, you have read-only access to this data — you cannot create, edit or delete club or player records. This data includes player names, match events and team lineups as provided by the relevant club.

Usage Data

We may collect technical information about how you use the App, including device type, operating system version, app version and general usage patterns. This is used solely to improve the service and diagnose technical issues.

3. How We Use Your Data

We use the data we collect for the following purposes:

  • Providing the service: To authenticate users, display live and historical match data, and personalise your experience based on your favourite teams.
  • Push notifications: With your consent, to send you match alerts and live score updates for the teams you follow.
  • Improving the platform: Aggregated, anonymised usage data helps us understand how the App is used and where improvements can be made.
  • Customer support: To respond to any queries or technical issues you raise with us.

We will never use your data for advertising purposes or sell it to third parties.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases for processing your personal data:

  • Performance of a contract (Article 6(1)(b)): Processing your account data and preferences is necessary to provide the Touch & Pass service you have signed up for.
  • Consent (Article 6(1)(a)): Push notification tokens are collected and used only with your explicit consent, which you can withdraw at any time through your device's notification settings.
  • Legitimate interests (Article 6(1)(f)): We process technical and usage data to maintain the security and reliability of the platform and to improve our product. We have assessed that these interests are not overridden by your rights and freedoms.

5. Data Sharing

We do not sell, rent or trade your personal data. We share data only with the following trusted sub-processors, under appropriate data processing agreements:

  • Supabase: Our database and authentication infrastructure provider. Your account data and preferences are stored in Supabase-hosted databases. Supabase operates under GDPR-compliant data processing agreements.
  • Expo / EAS (Expo Application Services): Used to build and deliver the app to users and to manage push notification tokens.

Match and player data displayed in Touch & Pass is provided by clubs using the Pitchside Admin app. We are not responsible for the accuracy or completeness of data entered by third-party clubs. If you believe personal data has been published incorrectly, please contact us at kevin@pitch-side.co.uk.

We will disclose your information to law enforcement or regulatory authorities if required to do so by law.

6. Data Retention

We retain your account and preferences data for as long as your account remains active. If you delete your account, we will remove your personal data within 30 days of the deletion request, unless we are required to retain it longer by law.

Push notification tokens are deleted promptly if you withdraw consent or if the token becomes invalid (for example, following a device reset or app reinstall).

You may request deletion of your account and data at any time by contacting kevin@pitch-side.co.uk.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to erasure: You can request that we delete your personal data, subject to legal obligations.
  • Right to data portability: You can request your data in a structured, machine-readable format.
  • Right to restriction: You can ask us to restrict processing of your data in certain circumstances.
  • Right to object: You can object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent (such as push notifications), you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at kevin@pitch-side.co.uk. We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Touch & Pass is a native mobile application and does not use browser cookies. Our website (pitch-side.co.uk) uses only functional, strictly necessary cookies required for the site to operate. We do not use advertising or tracking cookies.

9. Children

Touch & Pass is intended for use by fans aged 13 and over. The App is not directed at children under 13, and users must be at least 13 years old to create an account.

Match data displayed in the App may include the names of players who are minors, as this information is entered by clubs using Pitchside Admin. Clubs are responsible for ensuring they have obtained appropriate consent from players or their parents or guardians before publishing such data.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will notify you of significant changes by posting a notice within the App. The date at the top of this page indicates when the policy was last updated. Continued use of the App after any changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how we handle your data, please contact us: