This notice explains what personal data we collect, why, and what we do with it when we decide how it's used. We've tried to keep it short and plain. If anything isn't clear, just email us at hello@twoclear.co.uk.
This summary isn't the full notice (the sections below are), but it's the gist:
twoclear is provided by Paul Berry, trading as Nexlane ("Nexlane", "we", "us"), of 6 Dew Way, Calne, SN11 8HD, United Kingdom.
For the purposes described in this notice, we are the controller of your personal data under the UK GDPR and the Data Protection Act 2018. We applied to register with the Information Commissioner's Office (ICO) on 29 October 2026, and our registration number is pending. We'll add it here once it's issued.
Questions about privacy, or want to use any of your rights? Email hello@twoclear.co.uk. A person reads every message.
This notice covers personal data we handle for our own purposes:
It doesn't cover your club's member data: players' names, ratings, match results, bookings and the like. For that data, your club is the controller and we act as its processor, following the club's instructions. That's set out in our Data Processing Agreement. If you're a club member with a question about your data, please speak to your club first. We'll help them help you.
We sometimes contact pickleball clubs to tell them about twoclear. To do that, we collect business contact details that clubs and national bodies publish so people can get in touch with them, such as:
We also keep a simple record of when we contacted you and anything you told us in reply.
From public sources where clubs list their contact details, including:
We don't buy contact lists, and we don't collect anything that wasn't published for people to get in touch.
Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)). We have a legitimate interest in telling clubs about a product built specifically for pickleball clubs. We think that's something a club contact would reasonably expect, given that they've published their details so people can reach the club. We keep messages relevant and occasional, and we only use the details for club-related contact. We've weighed our interests against yours, and you can ask us for a copy of that assessment.
Where we email someone at a club, we follow the Privacy and Electronic Communications Regulations (PECR) as well. Every message tells you who we are and how to opt out.
You have an absolute right to object to us using your details for this. Just reply to any of our messages or email hello@twoclear.co.uk and say so. We'll stop straight away. You don't need to give a reason.
When you opt out, we add your email address (and, where relevant, phone number or club name) to a suppression list. That list only exists to make sure we never contact you again, including if your details turn up again in a public directory. We keep only the minimum needed to do that: the contact detail, the date and the fact you opted out.
If you don't engage with us, we delete your details 12 months after our last contact with you. If you become a customer or ask us to keep in touch, the relevant sections below apply instead. We keep the suppression list for as long as we contact clubs, because deleting it would defeat its purpose.
When you use the contact form on our website, email us, or ask for a demo or a 30-day free trial, we collect:
To set up a trial, we create an administrator account for your club. That account uses passwordless sign-in: we send a one-time code to your email address, and no passwords are stored.
As the website says, we only use the details you send us to reply. We won't add you to a newsletter or marketing list unless you ask us to.
When your club subscribes, we collect and keep:
Payments are handled entirely by Stripe. Your card details go straight to Stripe and never touch our servers. Stripe tells us things like whether a payment worked, and the last four digits and expiry of your card, so we can manage your subscription. When you use the "Manage subscription" link, Stripe emails you a secure link to its billing portal, where you can update your card, download invoices or cancel.
Our website is hosted by Netlify. Like most websites, Netlify's servers automatically record technical information when you visit, such as your IP address, browser type, the pages you request and the time. This is used to deliver the site, keep it secure and fix problems.
We keep this simple:
Because we only use strictly necessary cookies, we don't show a cookie banner. If we ever add analytics or anything else that isn't strictly necessary, we'll update this notice and ask for your consent first.
Legitimate interests in running a secure, working website. Netlify keeps server logs only for a short period, in line with its own retention policies.
From time to time we may send news about twoclear, such as new features, tips for running your club, or offers. We only send these if you've said yes. Our lawful basis is consent (Article 6(1)(a)).
Every newsletter has an unsubscribe link, and you can also unsubscribe by emailing hello@twoclear.co.uk. Withdrawing your consent doesn't affect anything we sent before you did.
We may use Brevo to send newsletters. If we do, Brevo may record whether an email was delivered, opened or clicked, so we can see what's useful and keep the list healthy.
We keep your details on our newsletter list until you unsubscribe. After that, we add your email address to our suppression list so you don't get newsletters again.
We don't sell your personal data, and we don't share it with anyone for their own marketing.
We use a small number of trusted service providers to run twoclear and our business. They handle personal data on our behalf, under written contracts that require them to protect it:
| Provider | What they do for us | Where the data is held |
|---|---|---|
| Supabase | Database hosting, sign-in and the back-end functions behind our website and checkout | EU (Ireland) |
| Netlify | Hosts our website and the twoclear app, and receives messages sent through our website contact form | United States and global network |
| Brevo | Sends sign-in codes and, if you've opted in, newsletters | EU (France, Germany and Belgium) |
| Microsoft 365 (Microsoft) | Our business email, including our hello@twoclear.co.uk mailbox, and related business tools | UK, EEA and/or United States |
| Google Fonts (Google) | Supplies the fonts on our website (see section 6) | United States and global network |
Stripe processes subscription payments. For payment data, Stripe acts as an independent controller under its own privacy policy, not as our processor.
We may also share personal data:
We're based in the UK, and most of the data we handle is held in the UK or the EU. The UK recognises the EU and EEA as giving an adequate level of protection, so no extra safeguards are needed for those transfers.
Some of our providers (for example Netlify, Microsoft, Google and Stripe) may process data in the United States or other countries outside the UK and EEA. Where that happens, we make sure an appropriate safeguard is in place, such as the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge") where the provider is certified, or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. You can ask us for more detail.
We take security seriously for a small team. For example:
No system is perfectly secure. If something goes wrong that puts your data at risk, we'll act quickly, and we'll tell you and the ICO where the law requires.
Under UK data protection law, you have the right to:
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
To use any of these rights, email hello@twoclear.co.uk. It's free, and we'll reply within one month. We may need to check who you are first. If your request is about your club's member data, we'll pass it to your club (or help them deal with it), as set out in the DPA.
If you're unhappy with how we've handled your data, please tell us first at hello@twoclear.co.uk and we'll do our best to put it right.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):
twoclear is a service for clubs, and this notice is about the adults who run them and get in touch with us. We don't knowingly collect personal data from children for the purposes in this notice.
We'll update this notice when our practices change, and we'll change the "last updated" date at the top. If a change is significant, we'll let our customers know by email.
Questions about this notice or your data? Email hello@twoclear.co.uk.
twoclear is a product of Paul Berry, trading as Nexlane · 6 Dew Way, Calne, SN11 8HD. Privacy notice last updated 29 October 2026.