Privacy notice

This explains what we do with personal data. It covers two different relationships, and the difference matters for who is responsible for what.

Who is responsible for what

For your club’s own records — your players, their guardians, your officials — the club is the controller and we are the processor. The club decides what to collect and why; we hold and process it on the club’s instructions in order to run the service.

For the account of the person signing in — name, email, sign-in and security records, billing — we are the controller.

Where we are the controller, that is Digital Nature Ltd, registered office 10 Glenholme Road, Farsley, Pudsey, England, LS28 5BY. Contact: [email protected].

What we hold

• Account details — name, email address, password (hashed, never readable), and multi-factor settings where used.
• Club records — clubs, teams, squad membership, roles and permissions.
• Player records — name, and whatever else the club chooses to record, including a date of birth where the club holds one.
• Guardian links — where a player is reached through a guardian, the relationship between the two and the guardian’s contact details.
• Football activity — fixtures, availability answers, results, and match events such as goals and cards.
• Bookings — who has hired a pitch, when, and whether it is paid.
• Operational records — sign-in activity and an audit log of significant actions, kept so a club can see who changed what.

A note on age: where a date of birth is held it is used to display an age group. It is not used to decide what anyone is allowed to do. Whether a player is reached through a guardian is a relationship the club records, not something we infer from a birthday.

Why we hold it, and on what basis

• To provide the service — performance of our contract with the club, and the club’s legitimate interest in running itself.
• To send service messages — fixture changes, availability requests, booking confirmations. These are part of the service rather than marketing.
• To keep the service secure — our legitimate interest in preventing unauthorised access.
• To take payment for paid add-ons — performance of contract, and our legal obligation to keep tax records.

Who we share it with

We do not sell personal data and we do not share it with other clubs. We use a small number of providers to run the service — hosting, email delivery, and payment processing for our own subscription charges. Each acts on our instructions.

Payments your club takes for pitch hire settle to the club’s own payment account. That data is handled by the club and its payment provider, not by us.

Where it is held

In the United Kingdom or the European Economic Area. Where a provider processes data elsewhere, an approved transfer mechanism is in place.

How long we keep it

Club records are kept while the club uses lekkin, and deleted on request or within a reasonable period after the club stops. Records we must keep for tax are kept for six years. Audit and sign-in records are kept for as long as they are useful for security, and no longer.

Rights

Anyone whose data is held has the right to ask for a copy, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to receive it in a portable form.

If the data is your club’s record of you — as a player, a guardian or an official — ask the club first, because the club decides what it holds. Ask us if you cannot reach them, or if it concerns your sign-in account, and we will help.

You can also complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

This website sets no cookies and runs no analytics or advertising scripts. The apps you sign in to set one cookie, which keeps you signed in. It is strictly necessary and is not used to track you anywhere.

Changes

If we change this notice materially we will tell affected clubs before it takes effect.