Last updated: September 2026
Who we are
Little Legends Football Academy is the data controller for personal information collected through this website and parent portal. You can contact us about privacy at hello@littlelegendsfootballacademy.com.
What we collect
| About | Information |
|---|---|
| Parents / guardians | Name, email address, phone number, home address, emergency contact details, how you heard about us, your consent choices and account login details (passwords are stored securely hashed). |
| Children | Name, date of birth, gender (optional), school (optional), medical conditions, allergies, additional needs and anything you tell us we should know, photo consent, trial attendance and enrolment history. |
| Payments | Amount, date, method and reference. Card payments are processed by Stripe. We never see or store your full card number. |
| Technical | A session cookie needed to keep you logged in, and basic server logs (IP address, date and time) for security. |
How we use it & our lawful basis
- To run the academy (contract): managing accounts, trials, memberships, sessions and payments (including automatic renewal payments), and contacting you about them.
- To keep children safe (legal obligation and vital interests): emergency contacts, safeguarding and first aid.
- Health information about a child is special category data. We process it with your explicit consent, to keep your child safe during sessions, and share it only with the coaches and staff who need it.
- Player development (legitimate interests): coaches may record notes on a child’s progress, which may be used to invite promising players to trial with our partner football club. We will always ask you before sharing your child’s details with the club.
- Photos and news (consent): only where you have opted in. You can withdraw consent at any time.
Who we share it with
We never sell your information. We share it only with:
- Stripe, to process card payments securely;
- our email and web-hosting providers, who store and send information on our behalf;
- emergency services or medical professionals if a child needs urgent care;
- authorities where the law requires it, including for safeguarding.
How long we keep it
We keep your account information while your account is active. If your account is inactive for 2 years, or you ask us to delete it, we will delete or anonymise your personal information, except payment records, which we keep for 6 years for tax and accounting purposes, and safeguarding records, which we keep as required by law and national guidance.
Keeping it secure
Our portal uses encrypted connections (HTTPS), hashed passwords and access controls so that only authorised staff can view children’s information. Parents can only ever see their own family’s records.
Your rights
Under UK data-protection law you have the right to access, correct or delete your information, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use any of these rights, email hello@littlelegendsfootballacademy.com. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Cookies
We use a single essential session cookie to keep you logged in and protect forms from misuse. When you pay by card, Stripe may set its own cookies to prevent fraud. We do not use advertising or tracking cookies.