Privacy Policy

1.1 Information Provided Directly by You

We may collect and process the following types of personal data that you voluntarily provide:

1. Account Registration Data: Your full name, email address, phone number, date of birth, profile image, and password.
2. User Profile Data: Biographical details, interests, location, professional information, and other user-submitted content.
3. Activity Participation Data: Event registration and hosting information, reviews, RSVPs, chat messages, bookings, MyFlow session participation, and other engagement metrics.
4. Transactional Data: Payment information including billing address, payment method, transaction reference, history of purchases and bookings, MyFlow session purchases, package access, and subscription records.
5. Verification Data: In cases where identity verification is required, including for hosts, organizers, MyFlow users, or access to recorded sessions, we may request a government-issued ID or conduct facial verification processes, subject to explicit consent where required by law.
6. Video and Session Data: If you use MyFlow or participate in an eligible recorded session at a partner venue, we may process video recordings, clips, still images, session time, venue, court or activity area, booking reference, player association, and related metadata needed to identify and deliver the correct recording.
7. Biometric Data: Where MyFlow uses facial verification or similar technology to confirm that the right user receives access to a recording, we may process facial images or derived biometric templates only as needed for verification, access control, fraud prevention, and service security, and only where we have an appropriate lawful basis.

1.2 Information Collected Automatically

Upon your interaction with the Services, we may collect the following categories of information automatically through cookies, web beacons, and similar technologies:

1. Device Information: IP address, browser type and version, device identifiers, operating system, and platform.
2. Usage Data: Dates and times of platform access, page views, navigation paths, interactions with platform content, video playback activity, download or sharing actions, and clickstream data.
3. Location Data: Subject to your prior consent, we may access your geolocation through GPS and other device-based technologies. We may also process venue or facility location data connected with an activity, booking, or MyFlow recording.
4. Camera and Venue System Data: MyFlow cameras and venue systems may generate technical logs, camera identifiers, recording status, timestamps, session matching signals, and service quality data.

1.3 Information from Third Parties

We may receive information about you from third parties, including:

1. Social Media Platforms: If you choose to link your account with social media platforms, we may receive personal data from those platforms.
2. Payment Processors: We may receive transaction data from third-party payment processors to facilitate your purchases.
3. Partner Venues: We may receive booking, attendance, facility, session, and verification information from partner venues that offer Cliqbox or MyFlow services.
4. Analytics Providers: We may use third-party analytics services to collect and analyze usage data.
5. Marketing Partners: We may receive information from partners to improve our marketing efforts.
6. Publicly Available Sources: We may collect information from publicly available sources to enhance our services.

1. Consent (Article 6(1)(a) GDPR): We process certain data, including marketing preferences, cookies, optional location data, and certain facial verification or biometric data, only with your affirmative and informed consent where consent is required.
2. Contractual Necessity (Article 6(1)(b) GDPR): We process personal data necessary to fulfill our contractual obligations, including account maintenance, event facilitation, MyFlow video delivery, booking access, and payment processing.
3. Legal Obligation (Article 6(1)(c) GDPR): We process data when legally mandated by regulatory frameworks applicable to our operations.
4. Legitimate Interest (Article 6(1)(f) GDPR): We may process data to ensure service integrity, prevent fraud, operate venue recording infrastructure, improve user experience, maintain service quality, and facilitate product development, provided these interests do not override your fundamental rights.

1. Account Management: To create, maintain, and manage your account, including authentication and security.
2. Service Delivery: Enable users to join or host activities, interact within communities, access MyFlow recordings, and receive session videos from eligible partner venues.
3. Payment Processing: Facilitate secure and efficient payment processing for bookings, MyFlow sessions, packages, and subscriptions.
4. Communication: To send you important updates, notifications, and customer support communications.
5. Personalization: To tailor the platform experience to your preferences and interests.
6. Identification: Verify user identities, confirm legitimate access to MyFlow recordings, and support trust and safety purposes.
7. MyFlow Recording Delivery: Capture, process, associate, store, and deliver eligible session recordings, highlights, playback files, and related metadata to the correct user or authorized account.
8. Venue Operations: Support partner venues with camera setup, recording availability, session matching, service diagnostics, and customer support for MyFlow-enabled activities.
9. Analytics: To analyze usage patterns, improve our services, and conduct research and development.
10. Marketing: To send you promotional materials, newsletters, and other marketing communications, subject to your consent.
11. Compliance: To comply with legal obligations, resolve disputes, and enforce our terms and policies.
12. Fraud Prevention: To detect, prevent, and mitigate fraudulent activities and security breaches.
13. User Engagement: To facilitate interactions between users, including messaging, reviews, and feedback.
14. Research and Development: To conduct research and development activities to enhance our products and services.
15. Platform Compliance: Enforce our Terms of Service and protect the security and integrity of our platform.
16. Legal Compliance: To comply with applicable laws, regulations, and legal requests.

1. Third-Party Processors: Vendors or service providers who process data on our behalf, including hosting, customer support, analytics, and payment processors, all of whom are contractually obligated to safeguard your data.
2. Other Users: Profile and activity data may be visible to other users in accordance with your privacy settings.
3. Activity Hosts: When you join or express interest in an activity, relevant data is shared with the activity organizer.
4. Partner Venues: When you book, attend, purchase, or access a MyFlow-enabled session, relevant booking, access, support, and service status data may be shared with the venue operating the activity or recording area.
5. Video and Infrastructure Providers: We may share data with cloud hosting, video processing, storage, streaming, verification, and content delivery providers that help us operate MyFlow and deliver recordings securely.
6. Authorized Session Participants: Where a recording relates to a shared activity, clips or session media may be visible to users who are authorized to access the same session, subject to product settings, venue rules, and applicable law.
7. Legal or Regulatory Authorities: We may disclose your data to public authorities if required to comply with applicable legal obligations or protect the rights, property, or safety of Cliqbox or its users.
8. Business Transitions: In the context of a merger, acquisition, restructuring, or asset transfer, your data may be transferred as part of the transaction.

1. We ensure that such transfers comply with applicable legal requirements.
2. For data transfers to countries outside the EEA, we implement Standard Contractual Clauses (SCCs) or rely on adequacy decisions where applicable.
3. We maintain technical and organizational safeguards to ensure data security and privacy integrity.
4. MyFlow recordings, verification data, and related technical data may be processed using trusted service providers in other jurisdictions, subject to the safeguards described above.

Under the GDPR (EU/EEA/UK Residents)

1. Right to Access: Request access to your personal data and obtain a copy of it.
2. Right to Rectification: Request correction of inaccurate or incomplete data.
3. Right to Erasure: Request deletion of your personal data under certain conditions.
4. Right to Restrict Processing: Request restriction of processing under certain conditions.
5. Right to Data Portability: Request transfer of your personal data in a structured, commonly used, and machine-readable format.
6. Right to Object: Object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
7. Right to Withdraw Consent: Withdraw consent where we rely on consent, including for optional location data or facial verification features, without affecting processing already carried out before withdrawal.
8. Right to lodge a complaint with a data protection authority.

Under the CCPA (California Residents)

1. Right to Know: Request disclosure of the categories and specific pieces of personal data we collect about you.
2. Right to Delete: Request deletion of your personal data, subject to certain exceptions.
3. Right to Opt-Out: Opt out of the sale of your personal data.
4. Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights.

Under African Regulations (NDPR, POPIA)

1. Right to access.
2. Right to correction.
3. Right to deletion.
4. Right to data portability.