Privacy notice

Who is responsible for your information

GK+ Development Centre(“the centre”) is the data controller for the personal information in this platform: it decides what is collected and why. The platform is operated on the centre’s behalf by its technology provider, who acts as a data processor and only handles information on the centre’s written instructions.

What we collect

• Name, email address, and an optional phone number.
• Which team a player or coach belongs to, a player’s squad (jersey) number, and the age group a player trains in (e.g. U13). That is an age band only, never a date of birth.
• Replies to training invitations (coming / not coming) and any optional note added to a reply.
• Attendance records and any optional note added to them.
• Coaches’ written feedback on a player’s development (technical, tactical and physical notes, and targets to work on), kept private to the player and their coaches.
• Training videos uploaded to a player’s account for analysis, and the coach’s analysed result, each kept private to that player (visible only to the player, their coach(es), and centre admins).
• A parent or guardian’s name, phone and relationship, held as contact details on their young keeper’s member account.
• When you apply to join, the details you give to start a member account: the goalkeeper’s name and a sign-in email (and optional phone), an optional parent/guardian contact and age group, and any note you add, collected with your consent. (Historical register-interest enquiries submitted before this, including any advert/campaign attribution recorded at the time, are kept read-only and deleted within twelve months.)
• If you take out a membership: whether it is active, when the next payment is due, the amount, and the type of payment method and its last few digits (for example “card ···· 4242”). Your card details are entered on Stripe’s own pages and never reach us and we never see or store your card number, its expiry date or its security code. Stripe is the centre’s payment provider and holds the full payment record; the centre’s coaches cannot see any family’s payment information.

We do not collect dates of birth, home addresses, card numbers, expiry dates or security codes, or any medical, dietary, or other special-category information. (As above, where you pay for a membership we do see the type of payment method and its last few digits, never the full number.) Please do not put such details into notes (see below).

Why we use it

Solely to run the centre’s training operations (organising sessions, taking attendance, managing teams, and sharing each player’s training footage privately with that player and their coaches) and, where a family takes out a membership, to collect that fee and show its status. We do not use it to advertise to you, to build a profile of you, or to track you across other sites, and we never sell it.

Where your information is held

Data is stored with Supabase (database and sign-in) in the AWS eu-west-3 region in Paris, France, and the application is served by Vercel. Both providers act under data-processing agreements, and the storage region is covered by the UK’s adequacy arrangements, so your information stays protected to UK standards.

Payments are the one exception. Where a family takes out a membership, that payment is processed by Stripe(Stripe Payments Europe, Ltd., Ireland, part of a group with companies in the United States) under the centre’s own agreement with them, on Stripe’s infrastructure rather than ours. Their transfer terms cover any access from outside the UK and EU. What we hold here is only the status of the membership, never card details.

How long we keep it

The current intended retention periods are:

• Attendance records and development notes: the current season plus two years.
• Training footage: twelve months, unless specifically flagged to keep longer.
• Dormant accounts: two seasons of inactivity, then removed.
• Applications and enquiries: an application you make becomes part of your member account (kept for the periods above); any earlier register-interest enquiry is kept up to 12 months, then deleted.
• Payment records, where a membership has been paid for: up to six years, held by the centre’s payment provider because UK tax law requires businesses to keep their records. These are kept even if you ask us to delete your account (the law allows us to keep them), and they are not used for anything else. The membership status shown inside the platform is deleted with your account.

Your rights

You can ask the centre for a copy of your information, ask for mistakes to be corrected, or ask for your information to be deleted. To make a request, contact the centre at hello@gkplus.co.uk.

If you are unhappy with how your information is handled you can complain to the Information Commissioner’s Office (the UK data regulator) at ico.org.uk.

Cookies

This platform sets only the strictly-necessary cookies that keep you signed in. They are essential for the service to work, so under the privacy rules (PECR) we do not need, and do not show, a cookie banner. We use no tracking, analytics, or advertising cookies or scripts of any kind, ever.

Automated decisions

We do not make any decisions about you by automated means, and we do not profile you.

Training videos and consent

Training footage is private to the individual player. A clip is uploaded to the player’s account for analysis (by the player, or by the parent who looks after their account), and the player’s coach returns the analysed result. Each video is visible only to that player, the player’s coach(es), and centre admins, and never to other players or the wider team. The centre records whether it holds a signed media-consent form for each player; the paper consent form the centre collects is the authoritative record. Consent is never given through this platform, and a child can never self-consent here.

Contact

For any privacy question or request, contact the centre at hello@gkplus.co.uk.