Privacy policy

What we collect, and why

If you create an account: your name, email address and a securely hashed password — plus, for organisers, the organiser and event details you choose to publish. If you send an enquiry about an event: the name, email, optional phone number, team name, age group and message you enter. We also keep a salted, one-way hash of the network address an enquiry came from — used only to limit spam and abuse, never displayed, and not reversible to your address.

Asking a coach for a session

If you ask a coach for a session from their page: your name, email address, the session, date and time you ask for, the player's age group if you give it, where you would like the session, and any message you write. We record when you confirmed you are the parent or guardian, or an adult player. We do not ask for or store the player's name. Your request goes to that coach so they can accept or decline it and reply to you; our administrators can see it for support. We also keep a salted, one-way hash of the network address the request came from, used only to limit spam and abuse, never displayed, and not reversible to your address.

Messaging a coach

If you message a coach from their page, or a coach replies to you: the messages you each write, when they were sent and read, and your account name and email address as the coach sees them. Before your first message we ask you to confirm you are aged 18 or over, and we record when you did. We do not ask for or store a child's name, and the form asks you not to include one. Messages stay on the site: the email that tells you there is a message carries a link and never the text. Conversations are kept, and our administrators and safeguarding contacts can read one if either person reports it or a concern is raised. We also keep a salted, one-way hash of the network address each message came from, used only to limit spam and abuse, never displayed, and not reversible to your address.

Your account preferences

If you save a postcode, travel distance or the age groups you're interested in, we use them only to show and email you relevant tournaments. They describe your interests, not your child — we don't ask for or store children's names, dates of birth or profiles. Preferences are never shown publicly, never shared, and you can edit or delete them at any time on your account page.

Who sees your details

An enquiry goes to the organiser of that event so they can reply to you, and is visible to our administrators for moderation and support — no one else. We don't sell personal data, and we don't share it with other organisers or advertisers.

Children's information

The platform does not create public profiles of children and is not designed for children to use. Public pages show team and club names only — no players' names, photographs or other personal details of children — and we don't ask organisers to provide any.

If you report a concern

What we collect: whatever you choose to put in the form — the category, your message, and, if you fill them in, your name, your email address and which listing or page your concern is about. Contact details are optional, because a concern about a child has to be reportable by somebody who would rather not be identified. If you started from a listing page, we also record which one. And we keep a salted, one-way hash of the network address the report came from, used only to limit abuse of the form: it is never displayed and cannot be turned back into your address.

Why we can hold it: protecting children is a legitimate interest, and it is why this route exists at all. Where a report suggests somebody is at immediate risk, we may also rely on protecting a person's vital interests. Where a report contains sensitive information about someone's health, or an allegation of a criminal offence, we handle it under the safeguarding provisions of UK data protection law, which allow it where it is necessary to protect a child.

Who sees it: a small, named group — our administrators, our Welfare Officer, and one safeguarding adviser outside FindMeFootball, described below. Nobody else. Your report is not published, and it is never sent to the club, organiser or person it is about. When one arrives we email that group, and that email contains nothing you wrote: not your message, not the listing or page you typed in, not your name. It says a report has come in, in which category, which of our listings it concerns if you started from one, whether you gave your name, and where to read it.

How they read it: your words stay in our system, and there are two ways in. An administrator signs in. Everyone else gets a personal link, sent with the alert — it opens that one report and no other, works for a limited time, can be withdrawn by us at any point, and records who opened it and when. We do this instead of putting your report in an email, because an email cannot be taken back.

One of those people is outside FindMeFootball, and it is worth being plain about what that means. While we are getting established, a named safeguarding adviser at a separate organisation holds one of those links, so that a report is not left unread if the other two are unavailable. They can open your report and read it in full, including your name and email address if you gave them. They cannot see any other report, and we can withdraw their access at any time. This is internal cover only, and we will say so here when it ends.

Who else we may tell: where a concern needs it, we pass it to the police, a local authority's children's services, the NSPCC, the club's County FA, or the local authority's Designated Officer. We will do that without asking you first where a child may be at risk — that is the point of the route, and we would rather tell you plainly here than surprise you later. Your details are never given to the person you are reporting.

How long we keep it: safeguarding records are kept longer than ordinary enquiries, because a single report can matter years later as part of a pattern nobody could see at the time. We keep them for 7 years from the date of the report, then delete them, unless they are part of an ongoing matter or we are required to keep them longer.

Your rights: you can ask what we hold about you, and ask us to correct it — email hello@findmefootball.com. We may not be able to delete a safeguarding record on request, and we would rather be straight about that than promise otherwise: a record about a child's welfare may need to be kept even when the person who made it would prefer it gone. Where we refuse, we will explain why. You can complain to the Information Commissioner's Office at any time.

Finding clubs near you

If you browse clubs without entering a postcode, we order them by distance from the rough area your network address suggests — usually a town or city, and sometimes wrong. We use it only to decide that order, and we say on the page which area we guessed so you can correct it. It is never stored, never attached to your account, and never used for advertising. Enter a postcode at any time to search from where you actually are.

Cookies

We use an essential session cookie to keep you signed in. We don't run advertising or cross-site tracking cookies.

Page views

We count page views on event listings anonymously, to show organisers how their listing is doing — no cookies, no personal data, just a daily number of views per event page. We also keep anonymous daily tallies of feature usage (searches, schedule follows) with the same rule: no record of who did what. We can't tell who viewed a page or link anything back to a person.

Email alerts

If you set up a tournament alert we store your email address and the filters you chose. A postcode, if you give one, is used only to match nearby tournaments — it is never shown publicly, never shared and never used for advertising. Alerts only start after you confirm your address, every email has a one-click unsubscribe, and unsubscribing stops them immediately.

How long we keep things

Account and event data stays while your account is active. Enquiries stay while the organiser needs them to manage their event. If you'd like something corrected or deleted, ask — see below.

Your choices

To access, correct or delete personal data we hold about you, email hello@findmefootball.com and we'll deal with it promptly. Safeguarding reports are the one exception — see "If you report a concern" above.