Duelz Labs LLP Privacy Policy
Last Updated: 10th September, 2025
1. Introduction
Duelz Labs LLP ("Duelz Labs," "we," "our," or "us") is committed to protecting the privacy and security of all users of our platform, including football communities, players, coaches, and especially young players in our academies. This Privacy Policy describes how we collect, use, store, share, and protect personal information when you use our website, mobile application, and related services (collectively, the "Platform").
We understand the sensitive nature of handling data, particularly when it involves minors participating in our football academies. This Privacy Policy reflects our commitment to transparency, data minimization, and compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 ("DPDPA"), Information Technology Act, 2000, and related rules and regulations.
Important: By accessing or using our Platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue using our services immediately.
2. Information We Collect
2.1 Personal Data You Provide Directly
We collect personal information that you voluntarily provide when:
- Creating an account or registering for our services
- Registering for football academies, tournaments, or community events
- Making payments through our platform
- Contacting our customer support
- Participating in surveys, contests, or promotional activities
- Uploading content, photos, or videos to the Platform
This information may include:
- Identity Information: Name, date of birth, gender, nationality, photographs
- Contact Information: Email address, phone number, postal address
- Account Information: Username, password, account preferences
- Payment Information: Bank account details, UPI information, payment card details (processed securely through Razorpay)
- Sports Data: Player statistics, match performance, training progress, fitness metrics
- Educational Information: School details, academic performance (for academy players)
- Health Information: Medical certificates, fitness assessments, injury reports
- Communication Data: Messages, feedback, support requests
2.2 Information Collected Automatically
When you use our Platform, we automatically collect certain information:
- Technical Data: IP address, device type, operating system, browser type and version
- Usage Data: Pages visited, time spent on the Platform, features used, search queries
- Location Data: Approximate geographic location based on IP address or GPS (with permission)
- Performance Data: App crashes, performance metrics, error reports
- Cookie Data: Information stored through cookies and similar tracking technologies
2.3 Information from Third Parties
We may receive information about you from:
- Social Media Platforms: If you choose to link your social media accounts
- Payment Processors: Transaction confirmations and payment status from Razorpay
- Community Managers: Information shared by authorized community representatives
- Public Sources: Publicly available sports statistics and tournament results
3. Special Protection for Children's Data
3.1 Definition of Children
Under this Privacy Policy and in compliance with Indian law, we define "children" as individuals who have not completed eighteen (18) years of age. We recognize that many participants in our football academies are children, and we take special measures to protect their data.
3.2 Parental/Guardian Consent
- Mandatory Consent: We obtain explicit, verifiable consent from parents or legal guardians before collecting, processing, or storing any personal data of children
- Consent Verification: We implement age verification mechanisms and require documentary proof of guardian consent
- Limited Collection: We collect only essential information necessary for academy participation, training, and safety purposes
- No Behavioral Tracking: We do not engage in behavioral monitoring, profiling, or targeted advertising directed at children
3.3 Children's Data Protection Measures
- Restricted Access: Children's data is accessible only to authorized personnel on a need-to-know basis
- Enhanced Security: Additional encryption and security measures for all children's personal data
- Regular Audits: Periodic reviews of children's data processing activities
- Guardian Rights: Parents/guardians can access, modify, or request deletion of their child's data at any time
- Safe Communication: All communications with children are monitored and appropriate
3.4 Prohibited Activities for Children's Data
We strictly prohibit:
- Selling or sharing children's data with third parties for marketing purposes
- Using children's data for targeted advertising or commercial exploitation
- Profiling children based on their online behavior
- Collecting unnecessary personal information from children
- Processing children's data for purposes incompatible with academy operations
4. How We Use Your Information
4.1 Primary Purposes
We process your personal data for the following purposes:
- Service Delivery: Providing access to our platform, managing registrations, facilitating payments
- Academy Operations: Managing football training programs, tracking player progress, organizing events
- Communication: Sending important updates, notifications, and service-related communications
- Safety and Security: Ensuring participant safety, preventing fraud, maintaining platform security
- Legal Compliance: Meeting regulatory requirements and legal obligations
- Performance Analytics: Improving our services and platform functionality
4.2 Legitimate Interests
We may process your data based on legitimate interests, including:
- Platform security and fraud prevention
- Business continuity and service improvement
- Statistical analysis and research (using anonymized data)
- Legal compliance and dispute resolution
5. Data Sharing and Disclosure
5.1 Limited Sharing Principles
We follow strict data minimization principles and share personal information only when necessary:
With Community Managers:
- Basic contact and performance information for service delivery
- Shared under strict confidentiality agreements
- Limited to information necessary for community operations
With Service Providers:
- Razorpay: For secure payment processing
- Cloud Storage Providers: For secure data storage with encryption
- Communication Services: For sending notifications and updates
- All third parties bound by data protection agreements
With Authorities:
- When required by law, court orders, or regulatory authorities
- For child protection and safety concerns
- To investigate potential legal violations
5.2 Data Not Shared
We never sell, rent, or trade your personal information to third parties for marketing purposes. Children's data is never shared without explicit parental consent and legal justification.
6. Data Security and Protection
6.1 Technical Safeguards
We implement industry-standard security measures:
- Encryption: Data encrypted both in transit and at rest using AES-256 encryption
- Access Controls: Multi-factor authentication and role-based access controls
- Network Security: Firewalls, intrusion detection, and secure network protocols
- Regular Updates: Continuous security patches and system updates
- Monitoring: 24/7 security monitoring and incident response capabilities
6.2 Organizational Safeguards
- Staff Training: Regular data protection training for all employees
- Background Checks: Comprehensive screening for personnel handling sensitive data
- Incident Response: Established procedures for data breach response and notification
- Data Minimization: Regular review and deletion of unnecessary data
7. Your Rights and Controls
7.1 Individual Rights
You have the following rights regarding your personal data:
- Access: Request copies of your personal data
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (right to be forgotten)
- Portability: Request transfer of your data in a portable format
- Restriction: Request limitation of data processing
- Objection: Object to certain types of data processing
- Withdraw Consent: Withdraw consent for data processing at any time
7.2 Exercising Your Rights
To exercise your rights:
- Contact us at: [email protected]
- Use the privacy controls in your account settings
- Submit requests through our support portal
- For children's data: Parents/guardians must make requests on behalf of minors
We will respond to all requests within 30 days as required by applicable law.
8. Data Retention
8.1 Retention Periods
- Account Data: Retained while your account is active
- Children's Academy Data: Duration of academy participation plus 2 years for safety and legal requirements
- Payment Data: As required by financial regulations (typically 7 years)
- Communication Data: 3 years or as required by law
- Marketing Data: Until consent is withdrawn
8.2 Deletion Process
We automatically delete data when retention periods expire. You may request earlier deletion subject to legal and safety requirements.
9. International Data Transfers
We primarily store and process data within India. Any international transfers are conducted with appropriate safeguards:
- Adequate data protection agreements
- Standard contractual clauses
- Compliance with cross-border transfer requirements under DPDPA
10. Compliance with Indian Laws
10.1 Legal Framework Compliance
We comply with all applicable Indian laws and regulations, including:
- Digital Personal Data Protection Act, 2023 (DPDPA)
- Information Technology Act, 2000
- Information Technology (Reasonable Security Practices) Rules, 2011
- Consumer Protection Act, 2019
- Indian Contract Act, 1872
- Child protection laws and regulations
10.2 Regulatory Cooperation
We cooperate fully with Indian regulatory authorities and maintain transparent communication with the Data Protection Board of India and other relevant bodies.
11. Cookies and Tracking Technologies
11.1 Types of Cookies
We use the following types of cookies:
- Essential Cookies: Necessary for platform functionality
- Performance Cookies: Help us analyze platform usage and improve services
- Functionality Cookies: Remember your preferences and settings
- Analytics Cookies: Provide insights into user behavior (anonymized)
11.2 Cookie Management
You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.
12. Marketing Communications
12.1 Consent-Based Marketing
- All marketing communications require explicit opt-in consent
- Children never receive marketing communications
- Easy unsubscribe options provided in all marketing messages
- Separate consent for different types of communications
13. Data Breach Response
13.1 Incident Management
In the event of a data breach:
- Immediate containment and assessment procedures
- Notification to authorities within 72 hours as required by DPDPA
- User notification for high-risk breaches
- Comprehensive incident investigation and remediation
14. Changes to This Privacy Policy
14.1 Policy Updates
We may update this Privacy Policy periodically to reflect:
- Changes in applicable laws and regulations
- New features or services
- Enhanced security measures
- Feedback from users and regulators
14.2 Notification of Changes
- Significant changes will be notified via email and platform notifications
- Continued use of the Platform constitutes acceptance of updated terms
- For children's data, we will obtain fresh parental consent when required
15. Contact Information
15.1 Privacy Inquiries
For any privacy-related questions, concerns, or requests:
- Email: [email protected]
- Phone: +91 90548 90616
- Address: 303- Maurya Atria, Nr. Shraddha Petrol Pump, Jodhpur Char Rasta, Satellite Police Station, Ahmedabad - 380015
- Data Protection Officer: Vraj Desai (+91 90548 90616)
15.2 Complaint Resolution
If you believe your privacy rights have been violated:
- Contact our privacy team first for resolution
- File complaints with the Data Protection Board of India
- Seek legal remedies as available under applicable law
16. Effective Date
This Privacy Policy is effective as of 10th September, 2025 and applies to all information collected from that date forward.
Contact Information
Duelz Labs LLP
- Email: [email protected]
- Phone: +91 90548 90616
- Address: 303- Maurya Atria, Nr. Shraddha Petrol Pump, Jodhpur Char Rasta, Satellite Police Station, Ahmedabad - 380015
- Data Protection Officer: Vraj Desai (+91 90548 90616)
CLUB DUELZ