This is a translation provided for convenience. The Spanish version is the binding one: in the event of any discrepancy between the two, the Spanish version prevails.
This policy describes how PANAMILA LABS S.A. ("Panamila Labs", "we"), a company incorporated in the Republic of Panama, handles personal data in connection with MilaCourt, its platform for padel clubs, and with this website (milacourt.com).
1. Who is responsible for your data
Two situations need to be told apart, because they change who decides about the data:
- On this website. When you request a demo or write to us, Panamila Labs is the controller of that data.
- Inside the MilaCourt platform. Each club is responsible for its players', members' and staff's data. Panamila Labs acts as a service provider that handles that data on the club's behalf and following its instructions. If you're a player and want to exercise your rights over that data, your first point of contact is your club; we assist them.
2. What data we collect
2.1. On this website
- Contact details you give us when requesting a demo: name, email, phone, club name, country, number of courts, the booking system you use, and whatever you write in the message.
- Minimal technical data associated with the visit, such as IP address and browser type, processed by our infrastructure provider to serve the site and protect it from abuse.
This site uses no advertising or cross-site tracking cookies, and does not sell or share data with advertisers.
2.2. Browsing measurement
We measure how the site is used in two layers, and only the second one needs your permission.
- Anonymous audience statistics. We count visits, which page you arrived from and how long the page took to load. These use no cookies, store nothing in your browser, and cannot identify you or follow you to other sites. They are processed with Cloudflare Web Analytics.
- Your path through the site. Only if you accept. We record which pages you see, in what order, which buttons you click and which link or campaign brought you here. To join those actions together we store a random identifier in your browser that lasts across visits. It carries neither your name nor your email, and we do not match it against anything you write in the demo form.
The first time you arrive we ask you about the second layer. If you decline, no identifier is stored and no action is recorded; the site works exactly the same. You can change your mind at any time by clearing this site's data in your browser, and we will ask again.
This is audience measurement, not profiling: we make no automated decisions about you and build no advertising profiles.
2.3. Inside the MilaCourt platform
On the club's instructions, the platform may handle: identification and contact details of players and staff; participation in matches, tournaments and classes; sporting results; court bookings and occupancy; food, drink and shop orders; membership and payment status; and technical logs of system use.
3. What we use it for
- Responding to your demo request and communicating with you.
- Providing, operating and supporting the platform for the contracting club.
- Displaying the live scoreboard, tournaments and club information on screens and in the player portal.
- Billing, preventing fraud and meeting legal obligations.
- Improving the security, stability and performance of the service.
We do not use a club's player data to sell our own products to those players, nor do we cross-reference it between different clubs.
4. Our basis for handling it
We handle data with your consent (for example, when you submit the demo form), to perform the contract with the club, to meet legal obligations, and on our legitimate interest in operating and securing the service.
5. Google API data
MilaCourt uses two Google services, and it's worth telling them apart because their scope is different.
5.1. Gmail: sending email
MilaCourt sends its transactional email —the player's access code, club notices and notifications— through the Gmail API, from an account belonging to Panamila Labs.
This means we do not access anyone's mailbox. We do not read, search, modify or store mailbox content belonging to players, clubs or anyone else: the authorisation over our own account is used exclusively to send the messages the platform generates.
5.2. Google Calendar: schedule syncing
When the club or a member of its staff expressly authorises it, MilaCourt keeps a two-way mirror between the platform's schedule and their Google calendar. Only the calendars that person authorises are accessed, and only while the authorisation remains in force.
5.3. Limited Use
MilaCourt's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Specifically, with respect to all data obtained from Google APIs:
- We use it solely to provide and improve user-facing features within MilaCourt: sending the email the platform generates, and schedule syncing.
- We do not transfer it to third parties, except as necessary to provide those features, to comply with a legal obligation, or with your express consent.
- We do not use or transfer it for advertising purposes, including personalised or interest-based advertising.
- We do not allow humans to read it, unless you give us express consent for specific cases, it is necessary for security purposes (for example, investigating abuse), to comply with the law, or the data is aggregated and anonymised and used for internal operations.
- We do not use it to train generalised or third-party artificial intelligence models.
You can revoke MilaCourt's access to your Google account at any time from your Google Account permissions page, or from the integrations settings inside MilaCourt. Once revoked we stop syncing and delete the stored calendar data, except what we are required by law to keep.
6. Who we share it with
We do not sell personal data. We share it only with providers who help us deliver the service, contractually bound to protect it and to use it only for what we engaged them to do:
- Infrastructure, hosting and protection of the site and the platform.
- Sending transactional email, such as the player's access code.
- Systems the club chooses to integrate with, such as its booking platform, its calendar or its point of sale.
We may also disclose it when a competent authority requires it under applicable law.
7. International transfers
Our providers may process data on servers located outside Panama. In those cases we require contractual guarantees of protection equivalent to those in this policy.
8. How long we keep it
- Demo requests: up to 24 months from the last contact, unless you ask us to delete them sooner.
- Platform data: for as long as the club's contract remains in force. On termination it is deleted or anonymised within a reasonable period, except what we must keep for legal or accounting obligations, or to defend a claim.
9. Your rights
You can ask us to access your data, correct it, delete it, restrict or object to its processing, obtain a portable copy, and withdraw your consent where the processing is based on it. Write to us at info@panamila.com and we'll respond. If your data sits inside a club's platform, we'll handle the request together with that club.
10. Security
We apply reasonable technical and organisational measures to protect the data: encryption in transit, role-based access control, isolation of each club's data, and activity logs. No system is infallible, but we work to reduce the risk and we respond to incidents.
11. Minors
Clubs may register minors for classes or tournaments. In that case, the club is responsible for having the authorisation of the mother, father or guardian. This website is not directed at minors.
12. Changes to this policy
If we change it, we'll publish the new version here with its update date. If the change is significant, we'll notify clubs through the contact details we hold.
13. Contact
PANAMILA LABS S.A. — Panama
info@panamila.com