Pitchbooking

Pitch booking Facility Management

Pitch booking Facility Management is a booking and payments solution for sports facilities bookings. Our online booking platform allows the public to find book and pay for sports facilities in an intuitive fashion, whilst our Manager Platform & CRM gives facilities owners the tools to better manage their bookings.

Features

• Online Booking, Payment and Calendar Management Software
• Customer Relationship Mangement (CRM) and Direct Messaging
• Sport Facility Allocations & Schedule Management
• Usage statistics across pitches, halls, courts, pavilions and more
• Scheduling, Availability, Closures and Priority Access
• Invoicing - BACS, Direct Debit, Card, Google / Apple Pay
• Accounting and Payment Reconciliation Integrations including cost code functionality
• Smart Remote Access for Facilities - Automated Locks & Lights
• Recurring Payments, Block Bookings and Online Payment Links
• Booking Forms, customisable booking flows and email / sms notifications

Benefits

• Allow Residents to book and pay for facility hire
• Real time availability of facilities to book with customisable pricing
• Integrates with existing Finance Systems and Processes
• Invoicing, payment links, automatic financial reconciliation and reporting as standard
• Enable automatically recurring weekly and monthly payments
• 24/7 access to information for residents and administrators
• Increase utilisation of Council Sport Facilities
• Reporting insights of booking revenue and volume at a glance
• Enabling remote access via smart locks and lights
• Increase physical activity of Council Residents

£25 to £100 a unit

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at fearghal@pitchbooking.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

578712559994936

Contact

Fearghal Campbell
+447599098224
fearghal@pitchbooking.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: N/a
• System requirements: N/a

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Response time is typically < 5 mins during standard working hours for any major issue.; ; Response time at weekends is same day response.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), 7 days a week
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: We have tested web chat with assistive technology such as screen readers and screen magnifiers to ensure accessibility
• Onsite support: Onsite support
• Support levels: We provide in person support for initial onboarding and training if required.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide each new user of our software with a dedicated Account Manager to oversee onboarding, setup and initial training.; ; After which we provide full documentation and video tutorials of how to use our platform for all platform functionality.; ; On top of this we have a customer service contact who can answer any remaining concerns or questions, as well as additional and ongoing training.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Full extraction of data can be performed at any time directly from the software, with options to extract this data in csv or pdf format.
• End-of-contract process: At end of contract, users can download all their historical data that has been stored on our platform at no additional cost.; ; At the end of contract, there are no termination fees associated.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile version of the software is optimised for mobile devices and uses different design patterns & user interfaces to enable this
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: Yes
• What users can and can't do using the API: Our platform operates off a REST API that can be accessed by purchasers if required for deeper integrations. Typically, most purchasers use our SaaS platform without the requirement or need for further API integration
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Our platform is customisable in a variety of different ways, including but not limited to:; ; Booking availability; Facility setup; Pricing; Access Restrictions; User Interface; Design Considerations

Scaling

• Independence of resources: Our cloud platform automatically scales in response to peak demands, ensuring a great experience for all customers regardless of when they are book.; ; Our autoscaling setup makes it effortless to meet demand by horizontally scaling our web dynos based on what’s most important to your end users: responsiveness.; ; To measure responsiveness, our setup uses our 95th percentile (p95) response time, an industry-standard metric for assessing user experience. The p95 response time is the number of milliseconds that only 5% of our platform's response times exceed.

Analytics

• Service usage metrics: Yes
• Metrics types: Wide ranging usage and service metrics based on our API calls.
• Reporting types:
  • API access
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Managers can export all their bookings, payments and customer data via a simple download button on the manager dashboard. This can be done at any time, and includes the ability to filter the data that is exported.
• Data export formats:
  • CSV
  • Other
• Other data export formats: PDF
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Service Level agreement is available on request
• Approach to resilience: Our datacentre setup is available on request
• Outage reporting: We provide outage reporting via both the Manager Dashboard, as well as email alerts for our customers.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: We restrict access to management interfaces and support channels through a combination of strong authentication mechanisms, role-based access control (RBAC), and least privilege principles. Access is granted based on job function, with a clear separation of duties ensuring that individuals only have the necessary permissions to perform their roles
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Self Assessment SAQ D
• PCI DSS accreditation date: Self Assessment for Attestation of Compliance
• What the PCI DSS doesn’t cover: N/a
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our detailed policies are available upon request

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Our configuration and change management processes are robust, utilising version control for component tracking. Changes undergo rigorous assessment via automated and manual reviews to identify potential security impacts, ensuring compliance with industry best practices. This systematic approach guarantees the integrity and security of our services throughout their lifecycle.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process is proactive, involving continuous monitoring and assessment of potential threats to our services. ; ; We swiftly deploy patches, often within hours of identification, ensuring minimal exposure to vulnerabilities. Information on potential threats is sourced from industry bodies and official software library updates.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Our protective monitoring processes are designed for early detection of potential compromises. Upon identifying a potential compromise, we initiate a predefined incident response protocol, which includes immediate isolation of affected systems and thorough investigation. Our response to incidents is swift, aiming to mitigate impacts within hours of detection, ensuring the security and integrity of our services are maintained at the highest level.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Our incident management processes are structured around pre-defined protocols for common events, ensuring efficient and consistent responses. Users can report incidents through multiple channels, including a dedicated support email and online chat functionality, facilitating ease of access and swift communication. ; ; Following an incident, we provide detailed reports to the affected users, including an analysis of the incident, actions taken to resolve it, and measures implemented to prevent recurrence. This approach ensures transparency and continuous improvement of our incident management practices.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Covid-19 recovery
  • Wellbeing

  Covid-19 recovery

  Our G-Cloud service supports Covid-19 recovery by enabling remote work, reducing the need for physical interaction and promoting business continuity during pandemics.

  Wellbeing

  We enable and improve local residents access to community sports facilities.

Pricing

• Price: £25 to £100 a unit
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Full functionality available for a limited time period.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at fearghal@pitchbooking.com. Tell them what format you need. It will help if you say what assistive technology you use.