UK GDPR Privacy Policy for XG Analytics
Effective Date: 01/11/2024

At XG Analytics, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

XG Analytics
www.xganalytics01@gmail.com

We provide visual performance analysis services for grassroots football players.

We are the “data controller” of any personal information we collect from you.

2. What Data We Collect

We may collect and process the following types of personal data:

  • Identity Information: Name and contact details (email, phone number).

  • Performance Data: Video footage of games/training, stats, analysis notes.

  • Parental/Guardian Info: For users under 16, parental/guardian consent and contact details.

  • Technical Data: IP address, browser type, device type, website activity.

  • Communication Data: Correspondence via email, messages, or forms.

3. Legal Basis for Processing

Under the UK GDPR, we process your data on the following legal bases:

  • Consent: For processing and sharing videos with a third party (pro-license coach)

  • Contract: To deliver our services to you.

  • Legal Obligation: To comply with relevant UK laws.

  • Legitimate Interests: To operate and improve our services (where your rights do not override these interests).

3A. How We Gain Consent

Before collecting or using any video footage or performance-related data of under-18 players, XG Analytics requires explicit parental or guardian consent. This is done through a Filming & Data Usage Consent Form, which must be completed and submitted prior to any filming.

The process is as follows:

  • The consent form is sent to all participating teams ahead of any match.

  • Filming will not commence until the completed form is received for each participating player.

  • The form provides detailed information on:

    • What data is collected (e.g. video footage, stats, analysis reports).

    • Why and how data is used (e.g. performance improvement, feedback from elite coaches).

    • Who it may be shared with (e.g. scouts or coaches, if opted in).

    • How long the data is stored and how it's securely managed.

    • Your rights under the UK GDPR, including how to withdraw consent at any time.

Parents/guardians can choose whether or not to allow filming and can specify if they permit data sharing beyond the analysis service.

4. How We Use Your Data

Your data is used to:

  • Deliver tailored performance analysis and reports.

  • Provide access to elite coaches (with consent).

  • Communicate service updates or support.

  • Improve service delivery and user experience.

5. Who We Share Your Data With

We will only share your personal data when necessary, such as with:

  • Elite Coaches or Clubs: Only with your explicit consent.

  • Third-Party Service Providers: For secure video hosting, editing, analytics, or email communications.

  • Legal Authorities: If required to do so by law.

All third parties are contractually bound to protect your information.

6. International Data Transfers

Where we transfer data outside the UK (e.g., to cloud service providers), we ensure that appropriate safeguards are in place, such as:

  • UK International Data Transfer Agreements (IDTAs)

  • Standard Contractual Clauses (SCCs)

7. Data Retention

We only retain personal data as long as necessary:

  • Performance data: Kept for up to 3 months after the last engagement. Private link to video remains active for as long as the parent/guardian permits.

  • Contact info: Retained for up to 3 years after your last interaction.

  • Parental consents: Retained alongside associated performance data.

You can request data deletion at any time (see Section 9).

8. How We Keep Your Data Secure

We take appropriate technical and organisational measures, including:

  • Encrypted cloud storage

  • Restricted access to files

  • Routine security checks

9. Your Rights

You have rights under the UK GDPR, including:

  • Access: Request a copy of your data.

  • Rectification: Correct inaccurate or incomplete data.

  • Erasure: Ask us to delete your data.

  • Restriction: Request a pause in processing.

  • Objection: Stop processing based on legitimate interests.

  • Data Portability: Transfer your data to another provider.

  • Withdraw Consent: At any time, where processing is based on consent.

To exercise your rights, contact: xganalytics01@gmail.co.uk

10. Children’s Data

We do not knowingly process data from children under 16 without verifiable parental or guardian consent. Parents/guardians have the right to review or request deletion of their child’s data at any time.

11. Complaints

If you are unhappy with how we process your data, you can contact the UK’s Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Helpline: 0303 123 1113

12. Changes to This Policy

We may update this policy to reflect changes in our practices or legal obligations. We encourage you to review this page regularly.