Privacy Policy

Who we are

Gol Futsal (“we”, “us”, “our”) is a grassroots futsal academy based in Essex, providing coaching for players from U6 through to adult. For the purposes of UK data protection law, Gol Futsal is the “data controller” of the personal data described in this policy — meaning we decide how and why it’s used.

Registered address: Suite 17, Essex House, Station Road, Upminster, Essex, England, RM14 2SJ
Contact: wearegolfutsal@gmail.com

The personal data we collect

We collect personal data when you fill in a form on this website. Specifically:

When you register a player’s interest: the player’s full name, date of birth, school year group, football age group, gender, current club/team, playing standard, professional academy status (if applicable), previous futsal experience; the parent/carer’s name, phone number and email address; medical conditions, requirements and care plan details; how you heard about us; training day availability; and your answer to our photo/social media consent question.

When you order kit: the parent/carer’s name and email address, the player’s name and age group, and the items, sizes and quantities requested.

We do not knowingly collect any personal data through this website beyond what you actively submit in these forms — we do not currently use cookies, analytics, or tracking technology of any kind (see “Cookies & tracking” below).

Special category data: health & medical information

Medical conditions and care plan details are “special category data” under UK GDPR, meaning they need extra protection. We only ask for this information because it’s necessary to keep your child safe during sessions, and we only collect it with your explicit consent when you submit the registration form. This information is shared only with the coaches directly responsible for your child’s session, and is never used for any other purpose.

Our lawful basis for processing your data

We rely on the following lawful bases under UK GDPR:

Consent — for medical/care plan information, and for using photos or footage of your child on our website or social media. You can withdraw consent at any time (see “Your rights” below).

Contract / steps prior to a contract — to register your child, place them in the right group, and process kit orders.

Legitimate interests — to communicate with parents/carers about sessions, fixtures and club updates, in ways you’d reasonably expect from a club you’ve registered interest with.

Legal obligation — where we need to retain or share information for safeguarding purposes, in line with our Safeguarding & Child Protection Policy.

How we use your information

We use the information you provide to: register your child and place them in an appropriate group; contact you about sessions, venues, fixtures and tournaments; process and fulfil kit orders; respond to enquiries; and meet our safeguarding responsibilities. We do not use your data for automated decision-making or profiling, and we do not sell or rent your data to third parties.

Who we share your information with

We share personal data with a small number of trusted service providers who help us run the club, and only to the extent needed for them to provide their service:

Netlify — hosts this website and processes form submissions on our behalf.
Google (Gmail) — our club email is hosted on Google Workspace/Gmail, so submissions sent to our inbox pass through Google’s infrastructure.
Class for Kids — our session booking system, if you go on to book sessions with us.

We do not share your data with any other third party for marketing purposes. We may share safeguarding-relevant information with the relevant authorities (such as the local authority designated officer or the police) where we have a legal or safeguarding duty to do so.

Where your data is stored

Our service providers may store or process data on servers outside the UK. Where this happens, they are required to provide an adequate level of protection through mechanisms such as the UK’s International Data Transfer Agreement or the EU-U.S. Data Privacy Framework and its UK extension.

How long we keep your data

Enquiries you send through this website — registrations of interest and kit orders — arrive in our Netlify form store and our club email inbox. How long we keep them depends on what they are:

Registration enquiries are kept for up to 12 months from the date you send them, or deleted sooner once the player is set up in Class For Kids — whichever comes first.

Medical and care plan details are deleted from our inbox and form store as soon as the player is set up in Class For Kids, which then holds the information their coaches need.

Kit orders are kept for six years, because they are business records we are required to retain for tax purposes.

Once a player is booked onto sessions, their ongoing record is held in Class For Kids, our booking platform, and is kept and deleted under their retention policy rather than this one.

Keeping your data secure

We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss or misuse, including relying on reputable providers (Netlify, Google) who maintain their own industry-standard security measures. Access to medical and safeguarding information is limited to those who need it to keep your child safe.

Children’s privacy

Our forms are intended to be completed by a parent, guardian or carer on behalf of a child, not by the child themselves. Where we collect information about a child, we do so with the consent of their parent/guardian/carer, who has the right to access, correct or request deletion of that information at any time.

Cookies & tracking

This website does not use cookies, analytics, or any advertising/tracking technology. The fonts and images on this site are served from our own site rather than a third-party service, so simply visiting a page does not share your IP address with anyone else. If that changes in future (for example, if we add website analytics), we will update this policy and, where required, ask for your consent via a cookie banner before any non-essential cookies are set.

Your rights

Under UK GDPR, you have the right to: access the personal data we hold about you or your child; have inaccurate data corrected; request erasure of your data; restrict or object to how we use it; request a copy of your data in a portable format; and withdraw consent at any time where we rely on consent (this won’t affect anything we did before you withdrew it). To exercise any of these rights, contact us at wearegolfutsal@gmail.com.

How to complain

We hope we’d never give you reason to, but if you’re unhappy with how we’ve handled your personal data, please contact us first so we can try to put it right. You also have the right to complain directly to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time, for example if we start using new tools or collecting new types of data. The “last updated” date at the top of this page will always reflect the most recent version.

Contact us

Questions about this policy or your data can be sent to wearegolfutsal@gmail.com.