Last updated March 23rd 2026 · 42 min read
FindPlay, Inc.EIN: 36-5170181
Version: 1.2 Effective Date: [INSERT DATE] Last Updated: [INSERT DATE] Supersedes: Privacy Policy v1.1
FindPlay, Inc. (EIN: 36-5170181) United States www.findplay.com | privacy@findplay.com
This Privacy Policy explains how FindPlay, Inc. ("FindPlay," "we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you use the FindPlay platform ("Platform"), including our website at www.findplay.com, mobile applications, APIs, and related services. It also explains how we generate and commercialise aggregate data intelligence, the consent rights and controls available to you through the FindPlay Privacy Centre, your broader privacy rights, and how to exercise them.
Please read this policy carefully. By using the Platform, you agree to the practices described here.
This Privacy Policy applies to all users of the FindPlay Platform, including:
Active People and Players who discover and book activities through the Platform
Play Providers (coaches, instructors, clubs, venues, event organisers, and all other providers) who list and deliver Services
Visitors who browse the Platform without registering
Affiliates, game officials, staff, volunteers, and all other user categories defined in our Terms of Service
If you are using FindPlay through a Micro-Marketplace operated by a third-party Marketplace Operator, this Privacy Policy applies to FindPlay's processing of your data. The Marketplace Operator's own privacy policy may also apply to how they handle your information. We encourage you to review their policy as well.
If you are under 18, please review Section 7 (Children's Privacy) before using the Platform.
We collect information in three ways: directly from you, automatically through your use of the Platform, and from third parties.
Account registrationWhen you create an account, we collect your name, email address, password, date of birth, gender identity (optional), profile photo (optional), and the account type and role you select.
Profile informationDepending on your role, you may provide additional information including your location, sport and fitness interests, skill levels, coaching qualifications, certifications, accreditations, professional biography, business name, ABN or EIN (for providers), and links to external profiles or websites.
Listings and ServicesPlay Providers who create Listings submit information about their Services including descriptions, pricing, location, availability, photos, videos, cancellation policies, and any prerequisites or requirements for participants.
Bookings and transactionsWhen you make or receive a booking, we collect information about the Service, the parties involved, the price, and the transaction details. Payment card and bank account details are collected and processed directly by our payment processor, Stripe. We do not store your full payment card details.
CommunicationsWe collect the content of messages, booking requests, reviews, ratings, support interactions, and any other communications you send through the Platform or to our team.
Verification documentsWhere you submit verification materials — such as government-issued identification, coaching qualifications, Working With Children Checks, insurance certificates, or business registration documents — we collect and store that information to verify your identity or credentials.
Health and fitness informationIf you choose to complete health or fitness questionnaires, disclose health conditions relevant to an activity, or connect a wearable device or health platform, we collect the information you provide or authorise. This is always optional and requires your explicit consent. See Section 6 for full details.
Fundraising and financial informationIf you create a fundraising listing or receive payouts through the Platform, we collect the banking and financial information needed to process those payments via Stripe.
Feedback and researchIf you participate in surveys, user research, or provide feedback, we collect your responses.
When you use the Platform, we automatically collect certain technical and usage information.
Device and connection informationThis includes your IP address, device type, operating system, browser type and version, device identifiers, and mobile network information.
Usage dataWe collect information about how you use the Platform, including pages viewed, search queries, filters applied, listings clicked, time spent, booking history, and features used.
Location dataIf you grant permission, we collect your precise location to show you relevant nearby activities, venues, and providers. You can withdraw this permission through your device settings at any time. We also infer approximate location from your IP address.
Cookies and similar technologiesWe use cookies, web beacons, pixels, and similar tracking technologies to operate the Platform, remember your preferences, measure performance, and (where you have consented) deliver personalised content. See our Cookie Policy at [Insert Cookie Policy URL] for full details on what we use and how to manage your preferences. Cookie consent is also manageable through your FindPlay Privacy Centre (Section 14).
Transaction and activity logsWe maintain logs of transactions, booking events, payment processing steps, and security-relevant events for fraud prevention, dispute resolution, and compliance purposes.
Behavioural and engagement signalsWe collect signals about how users interact with content, search results, recommendations, and platform features. These signals are used to improve personalisation, measure product effectiveness, and generate aggregate platform intelligence. See Section 4 (Derived and Inferred Data) for how these signals are used.
Social login providersIf you create an account or log in using a third-party service (such as Google, Apple, or Facebook), we receive the information that service shares with us, which typically includes your name, email address, and profile photo.
Payment processorsStripe provides us with transaction confirmations, payment status updates, and fraud risk signals. We do not receive your full payment card details from Stripe.
Health and wearable platformsIf you connect Apple Health, Google Health Connect, Garmin Connect, Fitbit, or another supported health platform, we receive the data categories you authorise during the connection process. See Section 6 for details.
Identity verification providersWhere we use third-party identity or credential verification services, we receive a verification outcome and, where applicable, relevant credential details.
Background check providersWhere a Play Provider submits to a background check (such as a Working With Children Check in Australia or a state-level background check in the United States), we receive the outcome of that check from the authorised provider.
Analytics and advertising partnersWe may receive data from analytics and advertising partners to help us understand how users find FindPlay and how our marketing campaigns perform. This data is used in aggregated or pseudonymised form wherever possible.
Other usersOther users may provide information about you — for example, when a Play Provider submits a booking on your behalf, or when a user includes your name in a review or communication.
We use the information we collect for the following purposes.
Creating and managing your account
Processing bookings, payments, payouts, refunds, and cancellations
Matching players with relevant activities, venues, coaches, and providers
Enabling communications between users
Facilitating the creation, management, and promotion of Listings
Displaying your profile and listings to other users
Generating personalised activity recommendations based on your interests, history, and location
Curating discovery feeds tailored to your preferences
Remembering your settings and preferences across sessions
Providing AI-powered smart matching and search ranking
Where personalisation uses your Health Data, it does so only to the extent you have consented under Section 6.
Verifying the identity and credentials of users, particularly Play Providers
Conducting and recording background checks where required
Detecting, investigating, and preventing fraud, abuse, and policy violations
Monitoring for suspicious activity and enforcing our Terms of Service, Community Standards, and Code of Conduct
Resolving disputes between users
Processing transactions through Stripe
Managing payouts to Play Providers
Issuing refunds and credits
Generating invoices, receipts, and tax documentation
Complying with financial reporting and tax obligations
Sending booking confirmations, reminders, and updates
Responding to support requests and enquiries
Sending service-related notifications (e.g. policy updates, security alerts)
Sending marketing and promotional communications where you have opted in or where permitted by applicable law
Distributing newsletters, platform updates, and product announcements
You can manage your communication preferences at any time through your Privacy Centre (Section 14) or by following the unsubscribe instructions in any marketing email. You cannot opt out of transactional communications that are necessary for the operation of your account.
We use data collected through the Platform for internal analysis, product improvement, and the development of aggregate participation intelligence products that may be made available to approved third parties.
Internal uses include:
Measuring Platform performance and usage patterns
Conducting research and analysis to improve our features and services
Testing new features and conducting A/B experiments
Understanding how users discover and engage with content
In addition, FindPlay generates Participation Intelligence Products — aggregate, anonymised datasets and reports derived from platform activity that describe trends, participation patterns, pricing benchmarks, geographic demand, and activity popularity at a population level. These products do not contain personal information and cannot be used to identify any individual user.
Participation Intelligence Products may be licensed or provided to:
Government sport and recreation agencies for evidence-based policy and infrastructure planning
National and state sport governing bodies for participation development and reporting
Insurance providers for product design and actuarial modelling
Brands, sponsors, and marketing partners for sport and fitness market analysis
Academic and public health research institutions
Industry bodies and sporting associations
When your platform activity contributes to these products, it does so only in aggregate and anonymised form. Your identity, contact details, and individual booking history are never included in these products. The creation and commercialisation of Participation Intelligence Products is a core FindPlay business activity. By using the Platform, you agree that your anonymised, aggregated activity data may be used in this way.
Provider Benchmarking ProgramPlay Providers who elect to participate in the FindPlay Provider Benchmarking Program agree to have their anonymised listing, pricing, availability, and booking performance data included in aggregate industry benchmarks. Participation is opt-in and is selected during provider onboarding or through the Privacy Centre (Section 14). Providers who participate gain access to comparative benchmarking reports showing how their listing performs relative to anonymised peers in their category, location, and price tier. FindPlay may also license aggregate benchmarking outputs to approved third parties as part of Participation Intelligence Products.
Complying with applicable laws, regulations, and legal processes
Responding to lawful requests from government authorities, law enforcement, and regulatory bodies
Enforcing our Terms of Service and other agreements
Protecting the rights, property, and safety of FindPlay, our users, and the public
Fulfilling tax reporting and record-keeping obligations
Attributing bookings to affiliate referrals and calculating commissions
Tracking the performance of marketing campaigns
Delivering sponsored listings and promoted content to relevant users
Managing the affiliate program in accordance with our Affiliate Program Agreement
Generating aggregate, anonymised Campaign Intelligence Reports for brand and sponsorship partners (see Section 5.4)
FindPlay generates derived insights from the analysis of user behaviour, platform activity, and engagement signals. These derived insights are proprietary FindPlay data assets.
What derived data isDerived data is information we infer or calculate from your direct interactions with the Platform — rather than information you provide directly. Examples include inferred sport and fitness preferences based on browsing patterns, price sensitivity signals derived from booking behaviour, likelihood of trying new activity categories, participation frequency patterns, and engagement propensity scores.
How derived data is usedDerived data is used to improve personalisation, search ranking, and recommendation quality on the Platform. In aggregate and anonymised form, derived insights contribute to FindPlay's Participation Intelligence Products described in Section 3.6. Derived data is not shared at the individual level with third parties, and is not used to make decisions that produce legal or significant personal effects without human review.
Derived data as a FindPlay assetAggregate derived insights — patterns, trends, and signals drawn from the totality of platform activity — are proprietary FindPlay intellectual property. These assets are distinct from your personal information and from the underlying data that generates them. FindPlay's ownership of aggregate derived insights is not affected by account deletion or the exercise of data subject rights relating to personal information, as aggregate insights cannot be disaggregated to reverse-identify any individual.
We do not sell your personal information. We share it only as described below.
When you use the Platform, certain information is visible to other users as part of normal platform operation.
Play Providers can see the name, profile photo, and booking details of Players who book their Services. Where you communicate with a provider through the Platform, they receive the content of those messages.
Players can see a Play Provider's public profile, including their name, photo, biography, qualifications displayed on their profile, ratings, and reviews. After a booking is confirmed, Players may see additional contact or location details as needed to attend the Service.
All users can see public profile information, reviews, and ratings that you choose to make visible.
We do not share private contact information (such as personal phone numbers or email addresses) between users except where you choose to share it, or where it is strictly necessary for the delivery of a confirmed Service.
We share information with third-party service providers who help us operate the Platform. These providers are contractually bound to use your information only for the purposes we specify and to maintain appropriate security standards. Current categories of service providers include:
Payment processing — Stripe, for all transaction, payout, and payment card processing
Cloud infrastructure and hosting — for Platform operation and data storage
Identity and credential verification — for verifying provider identities and credentials
Background check providers — for conducting checks where required
Analytics providers — for measuring Platform performance and usage
Email and communications providers — for delivering notifications and marketing
Customer support tools — for managing support interactions
Fraud detection and security — for identifying and preventing abuse
FindPlay maintains a Data Partnership Program through which aggregate, anonymised data and intelligence products derived from platform activity are made available to approved partner organisations. The Data Partnership Program operates under binding data use agreements that prohibit partners from attempting to re-identify individuals and restrict use to the approved purposes.
Participation Intelligence partners may include government sport and recreation agencies, insurance providers, academic and public health research institutions, sports governing bodies, and brand and sponsorship partners. These partners receive aggregate data only — never personal information.
National and State Governing Body Participation Reporting is a specific category within the Data Partnership Program and is described separately in Section 5.6.
Insurance Partners may receive aggregate data on activity categories, participation volumes, geographic demand, and risk-relevant activity characteristics to support product design, underwriting, and actuarial modelling. No individual personal information, health data, or identifiable user data is shared with insurance partners except where you have provided separate, explicit written consent.
Brand and Sponsorship Partners may receive aggregate Campaign Intelligence Reports describing the reach, engagement, and conversion performance of sponsored content and partnership activities on the Platform. These reports are fully anonymised and do not contain personal information.
FindPlay will maintain a public register of approved Data Partnership Program categories at [Insert URL]. You may contact privacy@findplay.com at any time to request information about the categories of partners currently active under the Program.
Where brands, sponsors, or marketing partners run campaigns or sponsored listings through the Platform, FindPlay may provide those partners with Campaign Intelligence Reports — aggregate, anonymised reports describing campaign performance, audience engagement patterns, and attribution outcomes.
These reports describe behaviour in aggregate only. They do not include names, contact details, individual booking records, or any other personal information. Campaign Intelligence Reports are a proprietary FindPlay product and a component of our commercial brand partnership offering.
Attribution data used to generate these reports is collected as part of standard Platform operation. By using the Platform, you agree that your anonymised, aggregated engagement signals may contribute to Campaign Intelligence Reports provided to brand partners whose content you have interacted with.
Where you engage with our Affiliate Program, we share booking attribution data with the relevant Affiliate to enable commission calculation. We do not share your personal contact details with Affiliates except where you have explicitly consented. Aggregate, anonymised affiliate program performance data may be included in Participation Intelligence Products.
Purpose and frameworkRecognised national and state sport and fitness governing bodies in Australia are required to report participation data to Sport Australia, the Australian Institute of Sport, and equivalent state sport agencies as a condition of their government funding and accreditation. FindPlay operates as a participation data infrastructure provider that supports this compliance reporting.
This section governs how FindPlay shares data with these bodies and the conditions that apply.
Tier 1 — Aggregate participation data (no individual consent required)FindPlay shares aggregate, de-identified participation data with approved national and state governing bodies for the purpose of sport participation reporting, policy planning, and compliance with Sport Australia requirements. This data describes participation volumes, activity frequencies, geographic distribution, age-group participation rates, and related population-level patterns. It does not identify any individual user and cannot reasonably be used to do so.
Users of the Platform would reasonably expect that their participation in sport and fitness activities — when aggregated with the activity of others — contributes to national sport participation statistics. Sharing of this tier of data is a legitimate purpose under the Australian Privacy Act 1988 (Cth) (APP 6(2)(c): related secondary purpose).
Tier 2 — Federation-linked personal data (explicit consent required)Where a user registers with FindPlay as a member of a specific federation, sport, or club whose governing body is an approved partner, FindPlay may request your explicit consent at the time of registration to share personal-level membership and participation data with that governing body. This consent is separate from account registration and is clearly labelled. You may decline without affecting your ability to use the Platform.
Where you provide this consent:
We will share your name, membership status, and participation records with the specified governing body
You may withdraw consent at any time through the Privacy Centre (Section 14) under Federation Data Sharing
Withdrawal of consent will cease future sharing; it does not require the governing body to delete data already received under the consent
Approved entitiesGoverning bodies eligible for Tier 1 data sharing must be:
Nationally recognised sport or fitness governing bodies accredited by Sport Australia or the Australian Institute of Sport; or
State/territory sport organisations recognised by their relevant state sport agency (e.g. Sport and Recreation Victoria, Sport NSW); or
Government health, recreation, or active transport agencies at a federal, state, or local level
FindPlay maintains a current list of approved governing body partners at [Insert URL]. Entities not on this list do not receive data under this section.
Reciprocal data accessWhere FindPlay enters a data partnership agreement with a national or state governing body, that agreement may include provisions for the governing body to share aggregated membership and participation data with FindPlay. Any such data sharing by the governing body is governed by the governing body's own privacy obligations and our data processing agreement. FindPlay uses such data to enrich platform coverage, improve activity recommendations, and develop more accurate Participation Intelligence Products.
No personal data sharing outside approved entitiesFindPlay does not share personal information with sport governing bodies or government agencies outside the framework described in this section, unless required to do so by law.
We may disclose your information where we believe in good faith that disclosure is necessary to:
Comply with a legal obligation, court order, or lawful request from a government authority or law enforcement agency
Enforce our Terms of Service or other agreements
Protect the rights, property, or safety of FindPlay, our users, or others
Prevent or address fraud, security, or technical issues
Respond to an emergency involving risk to life
Where permitted by law, we will notify you of any such disclosure.
If FindPlay is involved in a merger, acquisition, sale of assets, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.
We will share your information with third parties in other circumstances where you have given us your explicit consent to do so.
We treat your health and fitness data with the highest level of care.
FindPlay offers optional integration with third-party health and fitness platforms and wearable devices, including Apple Health, Google Health Connect, Garmin Connect, Fitbit, and others ("Health Integrations"). These integrations are entirely optional. We only access Health Data when you explicitly connect a Health Integration and grant permission through the Platform.
Health Data we may receive includes activity metrics (steps, distance, calories), workout sessions, heart rate and biometric data, sleep data (where relevant to recovery-focused programs), and other fitness metrics that you authorise.
We do not access health data through these integrations until you have provided explicit, informed consent through the dedicated consent flow. The consent request will clearly describe what data we will access and for what purposes, presented as individual purpose-level toggles rather than a single all-or-nothing permission.
Health Data is used only for the purposes you consent to at the time of connection. You will be asked to select from the following permitted purposes at the time of connection; we will only use your Health Data for those you expressly enable. Each purpose can be independently toggled on or off through the Privacy Centre (Section 14) at any time.
Purpose 1 — PersonalisationGenerating personalised activity and training recommendations based on your health metrics and fitness history.
Purpose 2 — Performance trackingTracking your fitness progress and displaying performance data within your FindPlay profile and dashboard.
Purpose 3 — Coaching analyticsWhere you have chosen to share access with a connected coach or instructor on the Platform, providing that coach with visibility into your relevant metrics. Coaches see only the data you authorise and cannot access Health Data beyond what you explicitly share.
Purpose 4 — Injury prevention insightsAnalysing training load, recovery patterns, and exertion data to surface insights relevant to injury prevention. This is an informational service and does not constitute medical advice.
Purpose 5 — Workout session integrationSyncing Health Data with workout sessions you log on the Platform.
Purpose 6 — Health and sport science research (separate opt-in)Where you separately opt in to FindPlay's Health and Sport Science Research Program, your pseudonymised Health Data (stripped of name, email, and direct identifiers) may be contributed to longitudinal research programs conducted in partnership with approved universities, public health bodies, or sport science institutions. This opt-in is presented separately from standard account and Health Integration consent flows and may be withdrawn at any time through the Privacy Centre (Section 14) without affecting your use of the Platform or other Health Integration purposes.
Approved research partners under this program must hold current ethics approval from a recognised human research ethics committee, agree to FindPlay's research data use agreement, and publish their findings in accessible, public-interest formats. FindPlay will maintain a list of current research partners at [Insert URL].
We do not use Health Data for advertising targeting. We do not use Health Data to make eligibility decisions about you. We do not share Health Data with insurers, employers, or other third parties in identifiable form without your explicit consent.
Health Data is classified as sensitive personal information and receives heightened protections, including:
Encryption at rest and in transit
Access controls limiting which FindPlay staff can access it
Separate processing systems with enhanced logging
Shorter default retention periods than general usage data (see Section 12)
You can revoke access to any Health Integration, or to any individual Health Data purpose, at any time through the Privacy Centre (Section 14) under Active Integrations. Upon revocation of a purpose, we will cease using your Health Data for that purpose. Upon revocation of an integration entirely, we will cease collecting new data from that source.
Previously collected Health Data will be retained in accordance with Section 12 unless you request deletion under Section 13.
FindPlay is available to users aged 13 and over. Play Providers who offer commercial Services through the Platform must be at least 18.
We do not knowingly collect personal information from children under 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA) in the United States.
For users aged 13–17, we apply heightened privacy protections as described in this section and as required by applicable law.
Where a minor (aged 13–17) uses the Platform directly, we collect only the information necessary for account operation and safety. We do not serve targeted advertising to users we know to be under 18. We do not use data from users under 18 for profiling purposes that could have a significant effect on them. Minors are not eligible for the Health and Sport Science Research Program opt-in (Section 6.2, Purpose 6) without verifiable parental consent. Consent prompts delivered through the Privacy Centre (Section 14) to minor accounts are restricted to age-appropriate consent categories only.
We do not knowingly allow children under 13 to create accounts. If a parent or guardian wishes to create an account on behalf of a child under 13, they must contact us at privacy@findplay.com. We will require verifiable parental consent before creating any account or collecting any personal information for a child under 13.
If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly.
Parents and guardians are responsible for supervising their children's use of the Platform and assessing the suitability of any Service for their child. Play Providers offering Services to minors must comply with all applicable child protection laws, including Working With Children Check requirements in Australia and applicable state-level clearance requirements in the United States.
If you believe a minor's information has been improperly collected or used, please contact us at privacy@findplay.com. For safety concerns involving a child, contact safety@findplay.com immediately.
We use cookies and similar technologies on the Platform. Our Cookie Policy at [Insert Cookie Policy URL] provides full details on:
The categories of cookies we use (essential, functional, analytics, and marketing)
What each category does and why
How to manage your cookie preferences and opt out of non-essential cookies
The specific third-party tools and services we use
By using the Platform, you consent to the use of essential cookies. For all other cookie categories, we will seek your consent via a cookie consent banner on your first visit. Cookie preferences can be reviewed and updated at any time through the Privacy Centre (Section 14) under Cookie Preferences.
FindPlay is a US-incorporated entity and primarily stores and processes data in the United States. We use cloud infrastructure providers whose servers may be located in the United States and other countries.
For users in Australia, your data may be transferred to and stored in the United States and other countries. FindPlay takes steps to ensure that any such transfer complies with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, including ensuring receiving parties maintain comparable privacy protections.
Where we transfer personal data across international borders, we implement appropriate safeguards including:
Standard contractual clauses or equivalent mechanisms for transfers to countries without an adequacy decision
Data processing agreements with all service providers who receive personal data
Due diligence on third-party data security practices
For users in the European Economic Area or United Kingdom, where GDPR or UK GDPR applies to your data, we rely on approved transfer mechanisms as required by those frameworks.
Where data protection laws require us to identify a legal basis for processing your personal information, we rely on the following.
Contract performance — Processing necessary to fulfil our agreement with you, including creating your account, processing bookings, handling payments, and providing the services you have requested.
Legitimate interests — Processing necessary for our legitimate business interests, where those interests are not overridden by your rights. This includes fraud prevention, platform security, improving our services, generating aggregate Participation Intelligence Products, and certain marketing activities. Where we rely on legitimate interests, we have assessed that our interests do not override the fundamental privacy rights of our users.
Legal obligation — Processing required to comply with applicable laws and regulations, including tax obligations, financial reporting requirements, and responses to lawful legal process.
Related secondary purpose — For the sharing of aggregate, de-identified participation data with approved national and state sport governing bodies (Section 5.6, Tier 1), where sharing is within the reasonable expectations of users who are actively participating in sport and fitness activities and is permitted under APP 6(2)(c) of the Australian Privacy Act 1988 (Cth).
Consent — Processing based on your specific, informed consent, including the collection and use of Health Data from wearable integrations, Health Data purpose-level permissions (Section 6.2), federation-linked personal data sharing (Section 5.6, Tier 2), participation in the Health and Sport Science Research Program (Section 6.2, Purpose 6), participation in the Provider Benchmarking Program (Section 3.6), the use of non-essential cookies, and certain marketing communications. All consent is collected through clearly labelled, purpose-specific flows and is managed through the Privacy Centre (Section 14). You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
We implement technical and organisational security measures to protect your personal information, including:
Encryption of data in transit using TLS
Encryption of sensitive data at rest
Role-based access controls limiting staff access to personal data on a need-to-know basis
Regular security assessments and penetration testing
Incident response procedures
Two-factor authentication options for user accounts
No method of electronic transmission or storage is 100% secure. While we take data security seriously and apply industry-standard practices, we cannot guarantee absolute security. If you become aware of any security concern, please contact us at privacy@findplay.com.
Consent records stored by the Privacy Centre engine are subject to the same security standards as personal data and are retained as a secure audit trail in accordance with Section 12.
In the event of a data breach that is likely to result in harm to affected individuals, we will notify affected users and relevant regulatory authorities in accordance with applicable data breach notification laws, including:
State breach notification laws in the United States (all 50 states)
The Notifiable Data Breaches scheme under the Australian Privacy Act 1988 (Cth)
GDPR breach notification requirements (where applicable)
We will provide notification without unreasonable delay and within the timeframes required by applicable law.
We retain your personal information for as long as necessary to provide the Platform and fulfil the purposes described in this policy, subject to the following principles.
Data Category | Retention Period |
|---|---|
Account and profile information | Duration of account, plus 3 years after closure |
Booking and transaction records | 7 years (financial record-keeping requirements) |
Communications and messages | 3 years from the date of the communication |
Health and fitness data | 2 years from collection, or until consent is withdrawn |
Health and Sport Science Research Program data | Per applicable ethics approval; minimum de-identification at project completion |
Identity and verification documents | 3 years from verification, or as required by law |
Payment information (held by Stripe) | Per Stripe's retention policy |
Usage and analytics data | 2 years (in identifiable form); indefinitely in aggregated, anonymised form |
Derived insights (aggregated) | Indefinitely as proprietary FindPlay data assets; not subject to individual deletion rights |
Background check outcomes | 3 years from the date of the check |
Marketing consent records | Duration of consent, plus 3 years |
Consent engine records (all Privacy Centre consent decisions) | Duration of account, plus 5 years after closure (regulatory audit requirement) |
Federation-linked personal data (Tier 2) | Until consent is withdrawn; thereafter governed by the receiving governing body's retention obligations |
Legal hold data | As required by applicable legal proceedings |
When data is no longer required, we delete or anonymise it in a secure manner. Where deletion is not technically feasible (e.g. backup systems), we isolate the data and prevent further processing until deletion is possible.
You may request deletion of your personal information at any time under Section 13. Some data may be retained after a deletion request where we are required to do so by law, or where it is necessary for legitimate legal purposes. Consent engine records are retained beyond account deletion as a regulatory audit requirement and do not constitute personal information for operational purposes. Aggregate, anonymised derived insights that cannot be disaggregated to identify you are not subject to deletion requests.
Depending on your location, you may have the following rights regarding your personal information. We will respond to all requests within the timeframes required by applicable law, and no later than 45 days from receipt of a verifiable request. Many rights can be exercised directly and immediately through the Privacy Centre (Section 14) without needing to contact us.
Access — You may request a copy of the personal information we hold about you. A summary of your data categories and active consents is available immediately through the Privacy Centre under Data I've Shared and Consent Dashboard.
Correction — You may request that we correct inaccurate or incomplete personal information. You can update most of your information directly through your account settings or profile.
Deletion — You may request that we delete your personal information through the Privacy Centre under Delete My Account, or by contacting privacy@findplay.com. We will action this request unless we are required to retain the data by law or for legitimate legal purposes. Aggregate, anonymised derived insights cannot be the subject of a deletion request as they do not contain personal information.
Portability — You may request a copy of your personal information in a commonly used, machine-readable format directly through the Privacy Centre under Download My Data.
Withdraw consent — Where we process your data based on consent, you may withdraw any individual consent at any time through the Privacy Centre Consent Dashboard without affecting the lawfulness of prior processing. Withdrawal takes effect immediately for future processing.
Opt out of marketing — You may opt out of marketing communications at any time through the Privacy Centre or by using the unsubscribe link in any marketing email.
If you are located in Australia, you have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, including the right to access and correct your personal information and to complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs. Contact details for the OAIC are at www.oaic.gov.au.
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following additional rights:
Right to know — the specific pieces of personal information we have collected about you, the categories of personal information collected, the purposes for collection, and the categories of third parties to whom it has been disclosed. A summary is available immediately through the Privacy Centre.
Right to delete — personal information we have collected from you, subject to certain exceptions. Initiate through the Privacy Centre under Delete My Account.
Right to correct — inaccurate personal information
Right to opt out of sale or sharing — we do not sell your personal information. We do not share your personal information for cross-context behavioural advertising without your consent. Aggregate, anonymised Participation Intelligence Products and Campaign Intelligence Reports do not constitute "sale" or "sharing" of personal information as defined under the CCPA/CPRA, as they do not contain personal information
Right to limit use of sensitive personal information — including health data, precise geolocation, and other sensitive categories defined under CPRA. Managed through the Privacy Centre under Active Integrations and Consent Dashboard.
Right to non-discrimination — we will not discriminate against you for exercising any of your privacy rights
Right to opt out of automated decision-making — where automated systems are used in ways that produce legal or significant effects, you may request human review by contacting privacy@findplay.com
FindPlay will honour Global Privacy Control (GPC) signals where required by applicable California law.
Users in Virginia, Colorado, Connecticut, Texas, and other US states with comprehensive privacy laws may have additional rights, including rights of access, correction, deletion, portability, and opt-out of certain processing activities. To exercise any available rights, use the Privacy Centre or contact privacy@findplay.com.
Many rights can be exercised directly through the Privacy Centre at Account Settings → Privacy, or at [Insert Privacy Centre URL] when logged in.
For requests that cannot be completed through the Privacy Centre, contact us at:
Email: privacy@findplay.com
Platform: Privacy Centre → Submit a Data Request
We may need to verify your identity before processing your request. We will not charge a fee for processing a reasonable request. Where a request is manifestly unfounded or excessive, we may charge a reasonable fee or decline the request, and will explain our reasons.
FindPlay provides a dedicated Privacy Centre accessible from your account, where you can view, manage, and update all privacy-related preferences and consent records in one place. The Privacy Centre is the primary interface for exercising your data rights and managing every consent you have given or declined on FindPlay.
Accessing your Privacy CentreThe Privacy Centre is available at Account Settings → Privacy, or directly at [Insert Privacy Centre URL] when logged in. It is accessible from every page of the Platform via the footer link labelled "Privacy Centre."
The Consent Dashboard provides a complete, timestamped record of every consent decision you have made on FindPlay, including:
The specific purpose you consented to or declined
The date the decision was made and the version of this Privacy Policy in effect at that time
The channel through which consent was given (web, mobile, or in-product prompt)
Your current status for each consent (active or withdrawn)
A one-click control to withdraw any active consent, or to activate any optional consent you previously declined
Every consent record in the Dashboard is maintained by FindPlay as a secure audit log. The Dashboard is the authoritative source of your current consent status across all platform processing activities.
FindPlay may periodically prompt you — through in-app notifications or email — to review new optional consent opportunities as we introduce new features, programs, or data partnerships. Examples include new research program partners, new federation data sharing arrangements, or new provider benchmarking categories.
Consent prompts are always optional. Declining or ignoring a prompt does not affect your access to the Platform or any features you are already using. Prompts are designed to present the purpose, the data involved, and the benefit to you clearly and plainly before asking for a decision.
You can control whether you receive consent prompts in Privacy Centre → Notification Preferences → Privacy Notifications.
Consent prompts are never used to seek retroactive consent for processing that has already occurred. They are used only to invite participation in new optional programs or to renew consents that have lapsed due to policy updates.
A structured summary of the categories of personal information FindPlay holds about you, organised by data type:
Profile and account information
Booking and transaction history
Verification documents submitted
Health and fitness data connected through integrations
Communications and messages
Consent records
This panel does not display a full export of all raw data — use the Download My Data function for that. It provides an at-a-glance view of what categories are held and under what purpose.
A list of all third-party health and wearable integrations you have connected to your FindPlay account, showing:
The name of the integration and date connected
The specific Health Data purposes currently enabled (Purposes 1–6 from Section 6.2), each with an individual toggle
A disconnect button to revoke the integration entirely
Changes to individual purpose toggles take effect immediately and are recorded in the Consent Dashboard.
Where you have consented to personal data sharing with a sport governing body (Section 5.6, Tier 2), this panel shows:
The name of each governing body with active access
The categories of data being shared
The date consent was given and the policy version in effect at that time
An individual withdraw button for each federation's consent
Withdrawing consent for a specific federation ceases future data sharing to that body. It does not require the governing body to delete data already received under the consent.
If you have opted into the FindPlay Health and Sport Science Research Program (Section 6.2, Purpose 6), this panel shows:
The current research partners your pseudonymised data is contributing to
The ethics approval status of each active research partner
The date your opt-in was recorded
A withdraw button to exit the Research Program entirely
Withdrawal removes your data from future research contributions. Data already contributed under your prior consent remains with the research partner in accordance with their ethics approval obligations.
For Play Providers who have opted into the Provider Benchmarking Program (Section 3.6), this panel shows:
Your current participation status (active or inactive)
The categories of listing and performance data included in benchmarking
The date participation was recorded
A toggle to withdraw from the program
Withdrawal from the Benchmarking Program takes effect at the next benchmarking cycle. Aggregate benchmark data already generated prior to withdrawal is not disaggregated and remains in circulation as anonymised industry intelligence.
Displays your current cookie consent status across all categories (essential, functional, analytics, and marketing) with category-level toggles. Changes take effect immediately and are recorded in the Consent Dashboard.
This panel replicates the controls available through the cookie consent banner and the Cookie Policy, consolidated into the Privacy Centre for convenience.
You can request a copy of the personal data FindPlay holds about you in a machine-readable format (JSON or CSV) directly from the Privacy Centre. Requests are fulfilled within 14 days. You will receive a notification when your data export is ready to download.
The export includes account and profile data, booking history, communications, consent records, and health data you have not yet deleted. It does not include aggregate or anonymised data products derived from your activity, as these do not constitute personal information.
You can initiate a full account deletion request from the Privacy Centre. Before deletion is processed, you will be shown a summary of what data will be deleted, what will be retained and why (in accordance with Section 12), and the effect of deletion on any active consents or integrations.
Account deletion is irreversible. Bookings in progress at the time of deletion are handled in accordance with the Cancellation and Refund Policy.
The Platform may contain links to third-party websites, apps, or services that are not operated by FindPlay. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use. FindPlay is not responsible for the privacy practices of third parties.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) or through a prominent notice on the Platform, at least 30 days before the changes take effect. The updated policy will include a new "Last Updated" date.
Where a policy update introduces new optional consent categories, those will be surfaced through the Privacy Centre consent prompt system (Section 14.2) rather than being assumed through continued use of the Platform.
Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated policy for processing that does not require your consent. If you do not agree with the changes, you must stop using the Platform and may close your account through the Privacy Centre.
For any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact us:
FindPlay, Inc.EIN: 36-5170181 Email: privacy@findplay.com General support: support@findplay.com Safety concerns: safety@findplay.com Website: www.findplay.com
For Australian users, you may also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you have concerns about how we handle your personal information.
For California users, you may contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov.
The following processing activities require your specific consent. Each is presented as a separate, clearly labelled consent flow — none are bundled with account registration. All consents are recorded in and manageable from the Privacy Centre Consent Dashboard.
Processing Activity | Where Consent Is Collected | Privacy Centre Location | Can Be Withdrawn |
|---|---|---|---|
Marketing communications | Account registration or subscription form | Consent Dashboard | Yes — immediately |
Non-essential cookies | Cookie consent banner on first visit | Cookie Preferences | Yes — immediately |
Health Integration — all purposes | Health Integration setup flow | Active Integrations | Yes — per integration |
Health Data — Purpose 1 (Personalisation) | Health Integration setup flow | Active Integrations → purpose toggle | Yes — individually |
Health Data — Purpose 2 (Performance tracking) | Health Integration setup flow | Active Integrations → purpose toggle | Yes — individually |
Health Data — Purpose 3 (Coaching analytics) | Health Integration setup flow | Active Integrations → purpose toggle | Yes — individually |
Health Data — Purpose 4 (Injury prevention) | Health Integration setup flow | Active Integrations → purpose toggle | Yes — individually |
Health Data — Purpose 5 (Workout integration) | Health Integration setup flow | Active Integrations → purpose toggle | Yes — individually |
Health Data — Purpose 6 (Research Program) | Separate opt-in flow | Research Program panel |
The following categories of aggregate data products may be made available through the FindPlay Data Partnership Program. All products are anonymised and do not contain personal information.
Eligible partner organisations are assessed and approved by FindPlay on the basis of their organisational type, data governance standards, and the legitimacy of the purpose for which they seek access. Approval is not limited by geography. FindPlay may enter Data Partnership Program agreements with eligible organisations operating in any jurisdiction in which the Platform has users or commercial operations.
Product Category | Eligible Partner Organisation Types | Content |
|---|---|---|
National and Regional Participation Reports | Government sport, recreation, and active transport agencies; national and state/provincial sport governing bodies; peak fitness industry bodies; intergovernmental sport development organisations | Activity volumes, geographic distribution, age-group and demographic participation rates, trend and seasonality data |
Insurance Intelligence Reports | Licensed insurance providers and underwriters; reinsurance companies; actuarial and risk modelling firms operating under regulatory oversight | Activity risk profiles, participation volumes by category, injury-adjacent activity patterns, geographic demand distribution |
Brand Campaign Intelligence | Brands and corporate sponsors active in the sport, fitness, and active lifestyle sector; sports marketing agencies; media measurement and attribution firms | Campaign reach, audience engagement rates, conversion attribution (anonymised), channel effectiveness benchmarks |
Market Intelligence Reports | Sport and fitness industry research firms; government economic development agencies; investment firms with sport and wellness sector mandates; industry associations and peak bodies | Pricing benchmarks, supply and demand patterns, activity popularity trends, geographic market coverage data |
Provider Benchmarking Reports | Participating Play Providers (coaches, instructors, clubs, venues, and event organisers registered on the Platform) | Category, location, and price-tier performance comparisons against anonymised peer providers |
Public Health and Sport Science Research Data | Universities and higher education institutions with active human research ethics approval; government public health agencies; national sport science institutes; non-profit public health research organisations | Anonymised participation trends, physical activity population data, and fitness behaviour patterns for academic and public health research |
Workforce and Employer Wellness Intelligence |
Partner approval criteriaTo be eligible for participation in the Data Partnership Program, an organisation must:
Operate under a recognised legal and regulatory framework in their jurisdiction
Maintain documented data governance policies and security standards consistent with the sensitivity of the data received
Enter into a FindPlay Data Use Agreement that prohibits re-identification of individuals, restricts use to the approved purpose, and requires notification of any data security incidents
Agree to FindPlay's audit rights in relation to their use of Data Partnership Program outputs
FindPlay reserves the right to decline, suspend, or terminate any Data Partnership Program arrangement at its discretion where it determines that participation is inconsistent with user interests or applicable law.
The public register of current approved partner categories is maintained at [Insert URL].
FindPlay, Inc. — Privacy Policy v1.2EIN: 36-5170181Document Classification: Public© [YEAR] FindPlay, Inc. All rights reserved.
Yes — immediately
Federation-linked personal data sharing (Tier 2) | Federation registration flow | Federation Data Sharing panel | Yes — per federation |
Provider Benchmarking Program | Provider onboarding or Privacy Centre | Provider Benchmarking panel | Yes — next cycle |
Corporate employers with active wellness programs; employee benefits consultancies; occupational health research bodies |
Aggregate workforce physical activity participation rates, program effectiveness benchmarks, activity category preferences (anonymised) |
Education Sector Intelligence | School systems and curriculum bodies; university sport and recreation departments; youth sport development organisations | Youth and student participation trends, activity category uptake by age group, access and affordability patterns |