Privacy Policy

1. What Data We Collect

• Account Information: Name, email address, phone number, and optional profile avatar.
• Club Membership Data: Role (Admin, Coach, Member, Follower), squad/group affiliations, and event attendance responses (RSVP status).
• Communications: Group chat messages sent within your designated club teams and squads. Messages are strictly private to authorized group members, guardians, and club administrators. We do not content-scan or sell messaging data.
• Device Data: Web Push API notification subscription tokens and endpoints to deliver club alerts you have opted into.
• No Tracking: We do not collect advertising data, behavioral profiles, or third-party marketing identifiers.

2. Legal Basis for Processing (GDPR Article 6)

We process your personal information under the following legal bases:

• Article 6(1)(b) — Performance of a Contract: Processing necessary to provide club membership services, schedule fixtures and training, communicate match logistics, and manage group squads.
• Article 6(1)(c) — Legal Obligation: Fulfilling child protection and youth safeguarding duties, including audit trails of youth communications and parental visibility over minor interactions.
• Article 6(1)(a) — Consent: Delivering push notifications to your mobile or desktop device, and optional club features where consent is explicitly provided.

3. How We Use Your Data

• Delivering club announcements, event management, and team fixtures.
• Facilitating secure, role-based group messaging within squads.
• Sending match alerts and emergency club push notifications you have opted into.
• Maintaining safeguarding audit logs as required by statutory child protection standards.

4. Data Retention

• Active Account Data: Stored and maintained for the duration of your active club membership.
• Messages: Retained to maintain group communication context. Upon account deletion, messages authored by you are automatically and permanently anonymised ([deleted]) to protect thread continuity while erasing your personal identifiers.
• Safeguarding Audit Logs: Retained for a minimum of 7 years to comply with statutory legal obligations and sports governing body safeguarding directives.
• Push Subscriptions: Automatically deleted upon account deletion, device unsubscription, or notification opt-out.

5. Your Rights Under GDPR

Under European data protection law, you possess explicit rights regarding your personal information:

• Right of Access (Data Export): Obtain a full, structured copy of your profile, memberships, event responses, and active messages.
• Right to Erasure (Right to Be Forgotten): Permanently delete your user account and personal data across club records.
• Right to Rectification: Correct any inaccurate or incomplete personal information in your profile.
• Right to Data Portability: Receive your data in a portable JSON format.
• Right to Object: Object to processing based on legitimate interests or revoke optional consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a formal complaint with the supervisory authority: the Data Protection Commission (DPC), Ireland (www.dataprotection.ie).

6. How to Exercise Your Rights

You can exercise self-service GDPR actions directly within your account settings:

7. Data Controller

For member information, your respective sports club (tenant) acts as the Data Controller responsible for determining membership and squad data. Club Connect acts as the Data Processor providing the secure SaaS infrastructure.

Club admin contact details are available in your club dashboard. For platform technical inquiries, contact privacy@clubconnect.ie.

8. Cookies & Local Storage

Club Connect uses strictly essential cookies only for session authentication and security token validation (Supabase Auth). We do not use third-party analytics, tracking beacons, or marketing cookies. You may control cookie preferences through your browser settings.