Privacy Policy

Effective Date: 15th June 2025 · Last Updated: 15th June 2025

KurdSport (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal data you provide when using our platform, accessible at https://www.kurdsport.pro (the “Website”). This Privacy Policy explains how we collect, use, store, and share your personal information and outlines your rights.

By using KurdSport, you agree to this Privacy Policy. If you do not agree, please do not use the platform.

1. Who We Are

KurdSport is an online platform designed to streamline the reservation of sports fields across the Kurdistan Region. Our platform connects players with verified field owners via a secure, user-centric interface.

2. What Data We Collect

A. User Account Information

Full name
Username
Email address
Password (hashed and encrypted)
IP address (logged for security and fraud prevention)
User type (Regular User or Field Owner)
Subscription payment status and related metadata

B. Booking and Usage Data

Reservation history
Field preferences and booking timestamps
Clickstream and session data (for usability optimization)
Login times, device/browser info

C. Payment and Billing Information

Payment status (via FIB)
Subscription transaction reference (no card or account numbers are stored)
Associated metadata (order ID, timestamp, confirmation status)

D. Owner-Specific Data

Field name, address, coordinates
Pricing and availability settings
Uploaded images
Status (active/inactive)

E. Technical Data

Device type
Operating system
Browser type/version
Referrer URL
Access time and location (approximate, IP-based)

F. Security Data

reCAPTCHA challenge results
CSRF tokens
Email verification tokens (time-bound)
Logs of failed/suspicious login attempts

3. How We Use Your Data

To create and maintain your account
To verify your identity and prevent fraud
To process payments securely through FIB
To enable bookings and show availability
To display field information with maps
To contact you with reservation updates, verification emails, or platform changes
To fulfill legal obligations
To analyze traffic and improve user experience

We do not use your data for profiling, automated decision-making, or third-party advertising.

We do not process or store any financial transactions between players and field owners beyond the initial subscription fee paid by owners to KurdSport. All payments for field reservations (if any) are handled independently between users and field owners, outside the KurdSport platform. We do not mediate, record, or guarantee the outcome of such cash or private transactions.

4. Legal Bases for Processing (GDPR Compliance)

Consent: You explicitly agree by registering and confirming email.
Contractual necessity: We need your data to provide booking and owner features.
Legal obligation: To comply with financial and cybersecurity regulations.
Legitimate interest: To ensure platform security, optimize performance, and maintain system integrity.

5. Data Sharing and Disclosure

We do not sell or rent your data.

With service providers bound by strict confidentiality and data protection terms.
With law enforcement if legally required (warrant, subpoena, court order).
With infrastructure providers only for operational needs under GDPR-compliant agreements.

6. Data Retention

User data: Retained as long as the account is active or legally necessary.
Reservation logs: Stored up to 2 years for recordkeeping and customer support.
Payment metadata: Stored for accounting compliance (min. 5 years in some jurisdictions).
Inactive accounts: Deleted or anonymized after 12 months of inactivity (excluding verified owners).

7. Your Rights (Under GDPR and Similar Laws)

Access your data
Correct inaccuracies
Request deletion (“right to be forgotten”)
Restrict or object to processing
Withdraw consent at any time
Lodge a complaint with a data protection authority

To exercise these rights, email: sulaimanastreshe@outlook.com or call +964 7515411074. (We may verify your identity before fulfilling any requests.)

8. Data Security

HTTPS encryption across all pages
Passwords hashed with a secure algorithm
reCAPTCHA on registration to prevent bots
Email verification prior to activation
Secure FIB payment redirection and callback handling
Regular security audits and updates
CSRF protection on all form submissions

9. International Data Transfers

We host data within the region or in GDPR-compliant jurisdictions. By using KurdSport, you consent to the transfer of your data to secure servers, including those in the EU or United States, depending on infrastructure.

10. Cookies and Tracking

Session cookies (for login state)
CSRF tokens (for secure form handling)
reCAPTCHA cookies (bot detection)

We do not use third-party advertising cookies or trackers. You may disable cookies in your browser settings, but this may affect site functionality.

11. Third-Party Links

Our site may link to external services (e.g., OpenStreetMap, FIB payment gateway). We are not responsible for their privacy practices. Review their policies before engaging with them.

12. Children’s Privacy

KurdSport is not intended for users under 16 years of age. We do not knowingly collect personal data from minors. If you believe a child has registered, contact us immediately for deletion.

13. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. You will be notified via email or site banner. Continued use after changes implies consent.

14. Contact Us

Email: sulaimanastreshe@outlook.com
Phone: +964 7515411074

15. Reservation Payments Disclaimer

KurdSport functions solely as a reservation and field listing platform. We do not process or facilitate payments between players and field owners for the use of sports fields. Any such payments, whether in cash or otherwise, are strictly private agreements between the two parties.

Does not guarantee payment terms, amounts, or timing
Is not responsible for refund disputes or service quality
Has no obligation to intervene in user-owner financial conflicts

Users and field owners are advised to clearly communicate and confirm all financial terms before a reservation is finalized. Use of KurdSport implies full acceptance of this disclaimer.