Privacy Policy
This Privacy Policy explains how Kiko Sports Coaching Ltd, trading as Kiko Soccer Schools, Kiko Football Club and Kiko Sports Coaching (“we”, “us”, “The Kiko Group”), collects, uses and protects personal data when you visit our website, register for our services, or otherwise interact with us online. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy should be read alongside our internal Data Protection Policy, which sets out how we handle personal data more broadly across the organisation.
What Information We Collect
Depending on how you interact with our website, we may collect:
Contact details you provide, such as name, email address, phone number and postal address.
Registration information for you or your child, including date of birth, medical information, emergency contacts, and authorised collectors.
Payment information, processed securely by our payment provider (we do not store full card details ourselves).
Technical information about your visit, such as your IP address, browser type, and pages viewed, collected via cookies and similar technologies.
Any information you send us directly, for example through a contact form or by email.
How We Use Your Information
To process registrations, bookings and payments.
To communicate with you about sessions, fees, cancellations, and matters relating to your child's participation.
To ensure the safety and welfare of participants, including safeguarding and medical/emergency purposes.
To improve our website and understand how it is used.
To take and use photographs or video of your child for coaching or promotional purposes — you are automatically opted in to this when you register, and can opt out at any time by emailing us directly, in line with our Terms and Conditions.
To send you marketing communications, but only where you have consented to receive them, and you may withdraw this consent at any time.
To comply with our legal and regulatory obligations, including safeguarding record-keeping requirements.
Our Legal Basis for Processing
Consent — for example, for marketing communications.
Legitimate interests — for example, coaching and promotional photography/video (offered on an opt-out basis, as set out in our Terms and Conditions), and improving our services.
Contract — to provide the services you have registered or booked for.
Legal obligation — for example, safeguarding record-keeping.
Vital interests — for example, in a medical emergency.
Legitimate interests — for example, improving our services and website security.
Children's Information
Where we collect information about a child (for example, at registration), this is provided by, and with the consent of, their parent or carer. We only collect the information we need to deliver our services safely, and we take extra care to protect children's personal data, in line with our Safeguarding Policy and Data Protection Policy.
Cookies
Our website may use cookies and similar technologies to help it function properly, to remember your preferences, and to understand how visitors use our site. You can control or disable cookies through your browser settings; please note that some parts of our website may not function correctly if you do so.
Sharing Your Information
We do not sell your personal data. We only share it where necessary and always securely, including with:
Payment processors, to handle transactions.
IT and software providers who support our registration, communication and record-keeping systems, and who are required to protect your data.
Safeguarding authorities (e.g. the LADO, Children's Social Care, or the Police), where required to protect a child's welfare.
The Disclosure and Barring Service and relevant sporting bodies, for safer recruitment purposes.
Professional advisers, regulators, or authorities where we are legally required to do so.
International Transfers
Where any of our service providers store or process data outside the UK, we ensure appropriate safeguards are in place, in line with UK GDPR requirements.
Data Retention
We retain personal data only for as long as necessary for the purposes it was collected, in line with the retention periods set out in our Data Protection Policy, after which it is securely deleted or destroyed.
Your Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (the right to be forgotten), where applicable.
Object to, or restrict, certain processing.
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.
To exercise any of these rights, please contact us using the details below.
Changes to This Policy
We may update this Privacy Policy from time to time, for example to reflect changes in the law or in how we use your data. The current version will always be available on our website.