Privacy Policy

Advance Football School ("AFS", "we", "us") is committed to protecting the privacy of parents, second parents/guardians, children, coaches, and site visitors. This policy explains what we collect, why, and how it's protected.

What we collect

• Parent account details: first name, last name, email address, phone number.
• Second parent/guardian details (optional): first name, last name, email, phone.
• Child profile details: first name, last name, date of birth (used to derive age band), and optional medical/allergy notes.
• Booking, attendance, and payment history.
• Coach applicant details: name, email, and the CV file itself.
• Contact form submissions.

Why we collect it

To create and manage accounts, process bookings and payments, run sessions safely (including medical/allergy information available to coaches on the day), communicate essential updates by email, and process coach applications.

Sign-in codes

AFS uses passwordless sign-in: a one-time 6-digit code sent to your email, valid for 10 minutes and usable once. We never ask for or store a password.

Children's data

Child data is treated as the most sensitive information we hold. It is collected minimally, medical/allergy notes are encrypted at rest, and access is limited to staff roles who need it to run sessions safely, plus the parent account that owns the profile.

Who we share data with

• Stripe — processes card payments; AFS never sees or stores card details.
• Brevo — sends transactional emails (booking confirmations, reminders, receipts).
• Supabase — hosts our database and secure file storage (coach CVs).
• Cloudflare — hosts the website and provides privacy-friendly, cookieless analytics.

Your rights

You can export your data or request account deletion at any time from your dashboard. Inactive accounts are anonymised after 24 months. Contact help@afs.football for any other data protection request.

Marketing emails

We only send marketing emails if you tick the opt-in box at account creation, and every marketing email includes one-click unsubscribe. Transactional emails (bookings, receipts, reminders) are always sent, as they're necessary to deliver the service.