Privacy Policy

1. Who we are

Gainline is a digital rugby player profile and management platform operated by NectaTechnologists. We provide tools that allow rugby players to create and share professional digital CVs, and allow agents and organisations to manage player books.

If you have any questions about this policy or how we handle your data, please contact us at privacy@gainline.pro.

2. What data we collect

We collect different types of data depending on how you use Gainline:

Account data — when you register, we collect your email address and a password (stored securely and never in plain text).

Player profile data — if you create a player profile, we collect:

• Full name, date of birth, nationality
• Physical attributes — height and weight
• Rugby positions (primary and secondary)
• School or educational institution attended
• Personal biography and playing summary
• Playing history and statistics
• Accolades and achievements

Documents — if you upload documents to your profile (such as passports, national ID cards, medical certificates, or contracts), we store these securely on your behalf.

Media — if you upload photos or videos, these are stored and may be displayed as part of your public CV.

Usage data — we collect information about how you use the platform, including pages visited, features used, and when your profile is viewed or saved by others.

Technical data — we collect your IP address, browser type, and device information for security and platform performance purposes.

3. How we use your data

We use your personal data for the following purposes:

• To provide and operate the Gainline platform
• To create and display your shareable rugby CV
• To allow agents and organisations to view your profile (subject to your visibility settings)
• To send you service-related communications such as account confirmations and security alerts
• To improve the platform and understand how it is used
• To comply with legal obligations

We do not use your data for automated decision-making or profiling in ways that produce legal or similarly significant effects on you.

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance — processing necessary to provide the Gainline service you have signed up for
• Legitimate interests — operating and improving the platform, detecting fraud, and ensuring security
• Consent — where you have explicitly agreed to specific processing, such as making your profile publicly visible
• Legal obligation — where we are required to process data to comply with applicable law

5. Profile visibility and sharing

Your player profile visibility is set to Public by default, meaning anyone with your CV link can view your profile information. You can control this through your profile settings.

When you share your CV link — via email, WhatsApp, social media, or any other method — you are choosing to make that information available to the recipient. Gainline is not responsible for how recipients use or share information they have accessed through your public CV link.

Agents and organisations using Gainline may view your profile as part of their player management activities. By creating a public profile, you consent to this visibility.

6. Sensitive data

Some data you may provide — such as medical certificates, nationality information, or physical attributes — may be considered sensitive under applicable data protection law. We collect this data only because you have chosen to include it in your rugby profile, and we treat it with the highest level of care.

By uploading sensitive documents or information, you explicitly consent to us storing and displaying this data as part of your profile, subject to your visibility settings.

7. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Profile view and activity logs are retained for up to 12 months.

8. Data sharing and third parties

We do not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers — we use Supabase for database and authentication services, and Vercel for hosting. These providers process data on our behalf under appropriate data processing agreements.
• Legal requirements — we may disclose your data if required by law, court order, or regulatory authority.
• Business transfers — if Gainline is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you in advance.

9. International data transfers

Gainline operates globally and your data may be processed in countries outside your own. Where data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

10. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — the right to request a copy of the data we hold about you
• Rectification — the right to correct inaccurate or incomplete data
• Erasure — the right to request deletion of your personal data
• Restriction — the right to request that we limit how we use your data
• Portability — the right to receive your data in a structured, machine-readable format
• Objection — the right to object to processing based on legitimate interests
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at privacy@gainline.pro. We will respond within 30 days.

11. Cookies and advertising

Essential cookies — Gainline uses essential cookies to operate the platform, specifically for authentication, session management, and remembering your cookie choice. These are required for the platform to function and are not subject to the consent banner.

Advertising cookies (Meta Pixel) — with your consent, given via the cookie banner shown on your first visit, we load the Meta Pixel, a tracking technology provided by Meta (Facebook/Instagram). It is used to measure the performance of our advertising campaigns and to understand when someone who clicked one of our ads goes on to create a Gainline account. It is not loaded, and no data is sent to Meta, until you accept.

The Meta Pixel may collect: pages you visit on gainline.pro, the fact that you completed registration (and whether as a player or coach), your IP address and browser information, and identifiers from the ad click that brought you here (such as an “fbclid” parameter). Meta’s own use of this data is governed by its own privacy policy.

Campaign attribution — regardless of your cookie choice, when you arrive via a tagged link (for example from one of our ads) we record, against your account at signup, which campaign and source referred you (UTM parameters and, where present, the Meta click identifier), your referring page, and the page you landed on. This is first-party data used only for our own reporting on which campaigns bring players and coaches to Gainline, and is never sold or shared with third parties beyond what is described above.

You can change your cookie choice at any time using the “Cookie settings” link in the site footer. Rejecting cookies means the Meta Pixel will not load and no advertising cookie will be stored; it does not affect your ability to log in or use the platform.

12. Children and age requirements

Gainline requires users to be at least 16 years of age to create an account. If you are between 13 and 16, you must have verifiable parental or guardian consent before using Gainline.

If we become aware that a user under 13 has created an account without parental consent, we will delete the account and associated data immediately. If you believe a child has registered without consent, please contact us at privacy@gainline.pro.

13. Security

We take the security of your data seriously. We use industry-standard measures including encrypted data transmission (HTTPS), secure authentication via Supabase, row-level security policies on our database, and access controls that limit who can view your data.

No system is completely secure. If you believe your account has been compromised, please contact us immediately at privacy@gainline.pro.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by displaying a notice on the platform. The date at the top of this page indicates when the policy was last updated.

Continued use of Gainline after changes are posted constitutes your acceptance of the updated policy.