Privacy Policy

1. What data we collect

We collect data about players (including minors), their parents or legal guardians, coaches, and staff:

• Identity & contact: name, date of birth, email, phone, address.
• Account data: Google account email and profile information when you sign in with Google.
• Player data: age group, registration and enrollment records, attendance, and, where relevant, health and medical information necessary for safe participation.
• Documents: photos, identity and registration documents you upload.
• Media: photos and videos, subject to separate consent.
• Payment records: invoices and payment status (we do not store full card details).

2. How we use your data

• To register and manage players in the Academy and with the Cyprus Football Association (CFA).
• To communicate with parents and guardians about training, camps, payments, and events.
• To manage attendance, teams, and training programmes.
• To comply with legal, safeguarding, and regulatory obligations.

3. Google Sign-In

When you log in with Google, we receive your email address and basic profile information solely to create and authenticate your account. We request only the openid and emailscopes. We do not access your Gmail, Drive, contacts, or other Google data.

4. Legal basis for processing

We process personal data on the basis of: consent; performance of a contract (enrollment); compliance with legal obligations; and our legitimate interests in running the Academy safely. For special-category data (e.g. health) and for data about minors, we rely on explicit consent from a parent or legal guardian.

5. Children's data

The Academy works with minors. All registration, media, and health data relating to a child is processed only with the consent of a parent or legal guardian, who may withdraw consent at any time.

6. Sharing your data

We share data only where necessary with: the Cyprus Football Association (for player registration); our service providers (including Base44 as our application platform and Google for authentication); and public authorities where legally required. We do not sell personal data.

7. Data retention

We keep personal data only for as long as necessary for the purposes described above and to meet legal and regulatory requirements, after which it is securely deleted.

8. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, or object to processing of your data, and the right to data portability. You may withdraw consent at any time. To exercise these rights, contact us at fckrasava.academy@gmail.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page.