UK GDPR Privacy Policy for XG Analytics
Effective Date: 01/11/2024
At XG Analytics, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
XG Analytics
www.xganalytics01@gmail.com
We provide visual performance analysis services for grassroots football players.
We are the “data controller” of any personal information we collect from you.
2. What Data We Collect
We may collect and process the following types of personal data:
Identity Information: Name and contact details (email, phone number).
Performance Data: Video footage of games/training, stats, analysis notes.
Parental/Guardian Info: For users under 16, parental/guardian consent and contact details.
Technical Data: IP address, browser type, device type, website activity.
Communication Data: Correspondence via email, messages, or forms.
3. Legal Basis for Processing
Under the UK GDPR, we process your data on the following legal bases:
Consent: For processing and sharing videos with a third party (pro-license coach)
Contract: To deliver our services to you.
Legal Obligation: To comply with relevant UK laws.
Legitimate Interests: To operate and improve our services (where your rights do not override these interests).
3A. How We Gain Consent
Before collecting or using any video footage or performance-related data of under-18 players, XG Analytics requires explicit parental or guardian consent. This is done through a Filming & Data Usage Consent Form, which must be completed and submitted prior to any filming.
The process is as follows:
The consent form is sent to all participating teams ahead of any match.
Filming will not commence until the completed form is received for each participating player.
The form provides detailed information on:
What data is collected (e.g. video footage, stats, analysis reports).
Why and how data is used (e.g. performance improvement, feedback from elite coaches).
Who it may be shared with (e.g. scouts or coaches, if opted in).
How long the data is stored and how it's securely managed.
Your rights under the UK GDPR, including how to withdraw consent at any time.
Parents/guardians can choose whether or not to allow filming and can specify if they permit data sharing beyond the analysis service.
4. How We Use Your Data
Your data is used to:
Deliver tailored performance analysis and reports.
Provide access to elite coaches (with consent).
Communicate service updates or support.
Improve service delivery and user experience.
5. Who We Share Your Data With
We will only share your personal data when necessary, such as with:
Elite Coaches or Clubs: Only with your explicit consent.
Third-Party Service Providers: For secure video hosting, editing, analytics, or email communications.
Legal Authorities: If required to do so by law.
All third parties are contractually bound to protect your information.
6. International Data Transfers
Where we transfer data outside the UK (e.g., to cloud service providers), we ensure that appropriate safeguards are in place, such as:
UK International Data Transfer Agreements (IDTAs)
Standard Contractual Clauses (SCCs)
7. Data Retention
We only retain personal data as long as necessary:
Performance data: Kept for up to 3 months after the last engagement. Private link to video remains active for as long as the parent/guardian permits.
Contact info: Retained for up to 3 years after your last interaction.
Parental consents: Retained alongside associated performance data.
You can request data deletion at any time (see Section 9).
8. How We Keep Your Data Secure
We take appropriate technical and organisational measures, including:
Encrypted cloud storage
Restricted access to files
Routine security checks
9. Your Rights
You have rights under the UK GDPR, including:
Access: Request a copy of your data.
Rectification: Correct inaccurate or incomplete data.
Erasure: Ask us to delete your data.
Restriction: Request a pause in processing.
Objection: Stop processing based on legitimate interests.
Data Portability: Transfer your data to another provider.
Withdraw Consent: At any time, where processing is based on consent.
To exercise your rights, contact: xganalytics01@gmail.co.uk
10. Children’s Data
We do not knowingly process data from children under 16 without verifiable parental or guardian consent. Parents/guardians have the right to review or request deletion of their child’s data at any time.
11. Complaints
If you are unhappy with how we process your data, you can contact the UK’s Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Helpline: 0303 123 1113
12. Changes to This Policy
We may update this policy to reflect changes in our practices or legal obligations. We encourage you to review this page regularly.