Privacy Policy

Last updated: 20 March 2026

This Privacy Policy explains how CourtFlow collects, uses, stores and discloses personal information. CourtFlow is operated by OReillyIT, based in Victoria, Australia.

We are committed to handling personal information responsibly and transparently. Where applicable, we aim to handle personal information consistently with Australian privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Who we are

Business name: OReillyIT
Product: CourtFlow
Location: Victoria, Australia

CourtFlow is an online club management platform designed to help clubs manage players, sessions, attendance, and ad hoc charges and payments.

2. What personal information we collect

Depending on how you use CourtFlow, we may collect personal information such as:

  • Your name
  • Your email address
  • Your Google account profile information made available during sign-in
  • Authentication identifiers supplied by an OAuth provider
  • Club membership and player profile details
  • Session registrations, attendance records and participation history
  • Payment-related records, transaction references and charge history
  • Technical information such as IP address, browser type, device information and log data
  • Any information you provide when contacting us for support

We do not intentionally collect sensitive information unless it is necessary for the operation of the service and provided by you or your club.

3. How we collect personal information

We may collect personal information in a number of ways, including when:

  • You sign in to CourtFlow using Google or another OAuth login provider
  • You create or update your player profile
  • You join a club, register for a session, or record attendance
  • You make or receive a payment through the platform
  • You use the website and interact with its features
  • You contact us with an enquiry, request or support issue
  • A club administrator enters or updates information relating to your participation

4. Why we collect, use and hold personal information

We collect, use and hold personal information for purposes including:

  • Providing and operating CourtFlow
  • Authenticating users and securing access to the platform
  • Managing clubs, players, sessions, attendance and related records
  • Processing charges, payments and transaction history
  • Communicating with users about their accounts, sessions or support requests
  • Improving the performance, usability and security of the website
  • Maintaining system logs, backups and audit trails
  • Complying with legal, accounting and regulatory obligations

5. OAuth login and third-party sign-in

CourtFlow currently allows users to sign in using third-party OAuth providers, including Google. When you choose to sign in this way, we may receive information from that provider such as your name, email address, unique provider ID, and basic profile details made available by that provider.

We use this information to authenticate you, create or link your CourtFlow account, and provide access to the relevant parts of the platform.

Your use of a third-party login provider is also subject to that provider’s own privacy policy and terms. We are not responsible for the privacy practices of third-party identity providers.

6. Payments

CourtFlow uses Stripe as its payment gateway. When payments are made through CourtFlow, payment information may be collected and processed by Stripe on our behalf.

We do not store full payment card details on our own systems. We may retain limited payment-related information such as payment status, amount, date, and transaction references for operational, accounting, support, dispute resolution and legal purposes.

Your payment information is also subject to Stripe’s own privacy policy and terms, and we are not responsible for the privacy practices of Stripe.

7. Cookies, analytics and technical data

CourtFlow may use cookies, authentication tokens, session storage and similar technologies to keep users signed in, maintain secure sessions, remember preferences, and help us understand how the website is used.

We may also collect technical information such as IP address, browser type, referring pages, access times, device identifiers and error logs for security, diagnostics and service improvement.

8. Disclosure of personal information

We may disclose personal information to:

  • The relevant club or its authorised administrators
  • Service providers who help us operate CourtFlow, such as hosting, authentication, analytics, email or payment providers
  • Professional advisers such as accountants, lawyers or IT consultants where reasonably required
  • Government, regulatory or law enforcement authorities where required or authorised by law
  • Another party in connection with a business restructure, sale, transfer or acquisition of assets, if applicable

We do not sell personal information to third parties.

9. Overseas disclosure

Some of our technology providers or infrastructure providers may store or process data outside Australia. This can include providers used for hosting, authentication, communications, backups, analytics or payment services.

By using CourtFlow, you acknowledge that some personal information may be processed by third-party providers in other countries where those providers operate.

10. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps may include authentication controls, access restrictions, encrypted connections, secure hosting practices, logging, backups and software updates.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Data retention

We retain personal information for as long as reasonably necessary to operate CourtFlow, provide services to clubs and users, maintain records, resolve disputes, enforce our terms, and comply with legal, accounting and tax obligations.

When personal information is no longer reasonably required, we will take reasonable steps to destroy it or de-identify it, unless we are required or permitted by law to retain it.

12. Access and correction

You may request access to personal information we hold about you, and you may request correction of information that is inaccurate, out-of-date, incomplete, irrelevant or misleading.

In some cases, we may need to verify your identity before providing access or making corrections. We may also decline a request where permitted or required by law.

13. Complaints

If you have a privacy complaint or concern, please contact us using the details below. We will consider your complaint and respond within a reasonable time.

If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner (OAIC).

14. Children

CourtFlow is intended for club and player management. Where accounts or player records relate to children, the relevant club, parent, guardian or authorised adult should ensure information provided is appropriate and lawful.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to CourtFlow, legal obligations, or our data handling practices. The updated version will be published on this page with a revised "Last updated" date.

16. Contact us

If you have any questions, requests or complaints about this Privacy Policy or how personal information is handled, please contact:

OReillyIT
Victoria, Australia
Email: info@oreillyit.com