Privacy Policy
Last updated:
Who we are
Matched X Singles is the name used for our UK padel speed-dating events. This policy explains how information is handled through our website and waitlist. For privacy questions, requests or details of the person or organisation responsible for your information (the data controller), contact hello@matchedxsingles.co.uk.
What we collect
To join the waitlist, the form requires:
- Your first name and email address.
- Your gender and age bracket. If you choose to self-describe your gender, a short description is required.
- Your agreement to receive emails about Matched X Singles events.
Without these details and the email-consent tick, the current form cannot add you to the waitlist. Please do not include health information or other sensitive personal details in free-text answers.
After signup you can optionally give your padel level, nearest town and Instagram handle. You can skip this step without losing your signup. These fields are not a request for your exact address or Instagram password.
We store the consent choice, the wording you agreed to and the date and time, together with a record identifier, creation and update times and the signup source. Submitting an email address already on the list does not replace its details or renew its recorded consent.
If you email us, we also receive your message, your contact details and any information you choose to include.
The contact form requires your name, email address and message. We use these to handle your enquiry and reply to the address you provide. Sending an enquiry does not join the waitlist or subscribe you to event marketing. Please avoid sensitive personal information in your message.
How we use it
- To keep the waitlist and send the event updates you requested, including ticket and venue announcements.
- To help plan events, including age groups, balanced numbers, padel experience and interest in different locations. Optional answers give us extra context; providing an Instagram handle does not authorise public sharing of it.
- To record email consent, administer the list and respond to enquiries and privacy requests.
- To protect the website from spam and repeated requests, and understand website traffic.
Under the UK GDPR, consent is our basis for the event emails you opt into. That tick does not give blanket permission for unrelated uses. The appropriate legal basis for other processing depends on its purpose and circumstances; you can contact us for information about the basis applying to your information. This policy does not describe all processing as consent-based.
Joining the waitlist does not create an event booking or a match. The current website does not automatically allocate tickets or make event-matching decisions about you.
Withdrawing email consent
You can withdraw consent at any time by emailing hello@matchedxsingles.co.uk and asking to stop event emails. Withdrawal does not affect the lawfulness of earlier processing based on consent. You can also object to direct marketing at any time.
Requests are handled by contacting us, not by an automated unsubscribe or deletion feature on this website. Asking to stop emails and asking to delete information are different requests; tell us if you want both.
Technical security information and cookies
The signup service uses your IP address and request times to limit repeated attempts. It also checks a hidden spam-prevention field; that field is not saved in your waitlist record. The rate limit counts attempts over a one-hour window, but this is not a promise that all IP information is deleted after one hour. Inactive entries can remain in the running server’s memory until it restarts. Hosting services may process separate request and error logs.
After signup, the service sets a cookie called matchedx_enrichment for the optional-details step. It contains a random receipt, not your name or email address. It lasts up to 30 minutes and is cleared after a successful optional save. It is restricted to the waitlist API, cannot be read by website JavaScript, and uses Secure and SameSite Strict protections on the public service.
For a new signup, the server temporarily holds a hashed receipt linked to the record and email, with expiry and attempt information, so that browser can save optional details. A repeat signup without existing editing authority receives a neutral receipt that cannot change an existing record. Knowing an email address is not enough to edit someone’s details. Expiry, a server restart or skipping this step does not remove the signup. The cookie is for this short editing session, not advertising.
The contact form has separate spam checks and request limits. The server temporarily keeps keyed hashes of network addresses and submission identifiers, request counts and duplicate-check information in bounded memory; it does not add contact messages to the application database or include their contents in routine application logs. Message content is handled temporarily while sending. Duplicate-check information is not a mailbox retention policy. The contact form does not set a contact cookie.
Who we share it with
Our organisers can access waitlist information through a password-protected administration page and export it to a spreadsheet. Hosting and database services process information to operate the website and store the list. Our hosting processors are Replit / Google Cloud.
We don’t sell your data. The contact form uses Resend as its email service when delivery is enabled. Your name, email address and message are sent through Resend to our organisers’ inbox so we can respond; your email address is used as the reply address. An acceptance notice means the email service accepted the message for sending, not that inbox delivery is guaranteed. If the form cannot confirm sending, you can contact us using the email link instead.
If we later use an email service to send updates, we’ll name it here separately; the contact integration does not subscribe you to a marketing list. Information may also need to be disclosed where required by law or to deal with a safety concern; any disclosure should be limited to what is relevant.
For events, contact details are shared with another participant only on a mutual match, not simply because you join the waitlist. Event-specific information about matching and the details used will be provided before participation. See our Code of Conduct.
Hosting, analytics and external links
The published website uses Replit analytics (i.replit.com). A verified page-view request sends the page URL, page title, website hostname, referring page (when present), screen dimensions and browser language, along with a website identifier. Replit documents traffic reporting for unique visitors, top pages, referrers, devices and browsers.
These browser requests do not establish how Replit subsequently handles IP addresses, identifiers or cookies, or how long it retains analytics information. We cannot give a verified account of that server-side handling here. Contact us for questions about analytics processing. We do not describe this website as analytics-free or cookie-free.
Fonts are served from this website. Instagram, WhatsApp and other external links take you to separate services if you follow them; those services have their own privacy policies.
Storage and international processing
The waitlist is stored in a PostgreSQL database accessed by the hosted service. A UK event location does not mean all information is stored or accessed only in the UK. Hosting, database, backup, support and analytics processing may involve other countries.
We do not currently have a verified country-by-country description of these services or their transfer arrangements to give here. Please contact us for information about locations and any applicable international-transfer safeguards; this policy does not promise UK-only storage or a particular safeguard.
Contact correspondence is processed by the email service and the organisers’ mailbox service as well as the hosted website. We do not claim a particular Resend or mailbox processing region or international-transfer arrangement here.
How long we keep it
The current waitlist has no automatic expiry or scheduled deletion: records remain in the database unless manually removed. There is no fixed retention period stated here. The relevant criteria are whether information is still needed for the event updates and planning for which it was collected, your withdrawal or deletion request, and any need to resolve an enquiry, dispute or legal obligation.
Stopping emails does not itself erase every copy. Consent records, correspondence, exported spreadsheets, hosting logs, backups and analytics may need separate handling. Contact us about deletion or retention of your information; we do not promise immediate deletion from all systems or that the 30-minute cookie lifetime is the waitlist retention period.
Although contact messages are not saved in the application database, sent enquiries and replies may remain with Resend and in the organisers’ mailbox. No fixed provider or mailbox retention period is stated here. Contact us about access, deletion or retention of that correspondence.
Your rights
Depending on the circumstances and the applicable legal basis, UK data-protection law gives you rights to access your personal information, correct it, request deletion, restrict its use, object to processing and obtain or transfer it in a portable form. Some rights have legal exceptions. You can withdraw email consent and object to direct marketing at any time.
Email hello@matchedxsingles.co.uk with your request. We may need enough information to verify that a request concerns your own record; please do not send identity documents unless requested. A repeat signup is not a correction or account-recovery service.
You can raise a concern with us and you have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
The date above identifies the latest wording. This page will need to reflect changes to the services and event information we process; please check it when providing further details or booking.
Related pages: Terms and Code of Conduct.