Teamz Privacy Policy

Draft for review. Items in [square brackets] must be filled in before launch. This is a working draft written for a small private club and is not legal advice.

Effective date: [date]

1. Who we are

Teamz is a private group that organises weekly 5-a-side football. This app is used only to arrange our games. The organisers of Teamz are the data controller for the personal data described here.

Contact: [organiser name], [contact email]

2. What we collect

• Identity and contact details: your name, email address and, if you provide it, mobile number.
• Playing preferences: the days you prefer to play.
• Availability: dates you tell us you are unavailable and the general reason (injured or on holiday), and the reason you give when you decline or cancel a game.
• Participation history: the games you were invited to, how and when you responded, and the games you played. We use this to work out the order in which players are invited.
• Login and technical data: login sessions, your password if you choose to set one (kept only in a scrambled form that we cannot read), the date and time you accepted this policy, a record of messages we sent you, and, if you turn on notifications on your device, the details needed to deliver them. Server logs record IP addresses.
• Contact form messages: the name, email address and message you send us.

If you sign in with Google, Google tells us your email address and name so we can match you to your account. We receive nothing else from Google.

We do not collect payment details.

3. Injury information

If you tell us you are injured, that is information about your health, which the law treats as a special category of personal data. We record only that you are unavailable through injury and the date you expect to return. We do not ask for, and you should not enter, any medical detail. We process this only with your explicit consent, which you give by accepting this policy and by choosing to enter it. You can always mark yourself unavailable without giving injury as the reason.

4. Why we use it and our legal basis

We use your data only to run our games: to invite you, to manage squads and standby lists, to send you confirmations and cancellations, and to keep the invitation order fair.

Our legal basis is your consent under Article 6(1)(a) of the GDPR, and your explicit consent under Article 9(2)(a) for injury information. You give consent the first time you use the app. If you do not consent, your account is deleted.

You can withdraw consent at any time by deleting your account in the app or by contacting us. Withdrawal does not affect anything done before you withdrew.

5. Who can see your data

• Other players who are logged in can see your name and your status for each game (for example invited, accepted, declined or on standby). They cannot see your email address, mobile number, decline reasons or absence details.
• Admins (organisers) can see all of the above, including contact details, absence dates and reasons, and your ranking.

This is a closed system. We do not sell your data, share it with anyone outside the group, or use it for advertising.

6. Service providers

We use the following providers to run the app. They process data only on our behalf.

• Hosting: [hosting provider], with servers in [country].
• Google, only if you choose to sign in with Google.
• Notification services run by your browser or device maker (for example Apple, Google or Mozilla), only if you turn on push notifications.
• Text messages: [SMS provider], if we introduce text notifications. We will update this policy before doing so.

[If any provider stores data outside the European Economic Area, state the country and the safeguard relied on, such as an adequacy decision or standard contractual clauses.]

7. How long we keep it

• Your account data is kept while you are a member of the panel.
• When your account is deleted, by you or by an admin, your name, contact details, preferences and absence records are erased. Records of past games are kept but no longer identify you.
• If you were added by an organiser and do not accept this policy within 30 days, your details are deleted.
• Contact form messages are deleted after [12 months].
• Records of messages sent and server logs are deleted after [12 months].
• Backups are overwritten within [30 days].

8. Cookies

We use one strictly necessary cookie to keep you logged in. We do not use analytics, advertising or tracking cookies, so no cookie consent banner is shown.

9. Security

The app is served only over an encrypted connection. Login is by one-time email link or Google. A password is optional; if you set one, it is kept only in a scrambled form that we cannot read. Login links are stored in a protected form and expire. Access to contact details is limited to admins.

10. Your rights

Under data protection law you have the right to:

• see the personal data we hold about you and receive a copy;
• have inaccurate data corrected (most of it you can edit yourself in the app);
• have your data erased;
• restrict how we use your data;
• receive your data in a portable format;
• withdraw your consent at any time.

To use any of these rights, contact us at [contact email]. We will reply within one month.

11. Complaints

If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Data Protection Commission:

Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland www.dataprotection.ie

12. Age

Teamz is for adults. The app is not intended for anyone under 18.

13. Changes to this policy

If we change this policy in a way that affects how your data is used, we will tell you by email and ask you to accept the new version in the app.