Privacy policy

1. Who we are

Norstar Inline Hockey Club (“we”, “us”, “our”) is the data controller for personal data processed through this website and our club administration processes.

For data protection queries, contact us via contact.

2. Personal data we collect

• Identity and contact details for parents/guardians and players where relevant.
• Club participation data, such as team registrations, attendance, and availability responses.
• Account data, including role-based access information for secure member areas.
• Communication data submitted through contact or account forms.
• Technical/security data (for example IP address and session-related information) required to keep the site secure.

3. Why we process data and lawful bases

Under UK GDPR, we rely on one or more of the following lawful bases:

• Contract — to deliver requested club services and manage membership activities.
• Legal obligation — where we must comply with legal requirements.
• Legitimate interests — to run, safeguard, and improve club operations and website security.
• Consent — where required for optional processing activities.

4. Children’s data

As a youth club, some processing relates to children. We aim to minimise data collection and process only what is necessary for participation, communication, and safeguarding administration.

5. Cookies and website security

We use essential cookies or similar technologies to support secure sign-in, session management, and core website functionality. We do not use these essential technologies for advertising.

6. How long we keep data

We retain personal data only for as long as needed for club operations, safeguarding context, legal requirements, and legitimate administrative needs. Data is deleted or anonymised when no longer necessary.

7. Sharing and international transfers

We may share data with authorised staff/volunteers and trusted service providers that support club operations. We do not sell personal data. If data is transferred outside the UK, we use appropriate safeguards where required.

8. Your rights

You may have rights under UK GDPR, including:

• Access to your personal data.
• Correction of inaccurate data.
• Erasure, restriction, or objection in certain circumstances.
• Data portability where applicable.
• Withdrawal of consent where processing is based on consent.

You can contact us via contact.

9. Changes to this policy

We may update this policy from time to time. Any updates will be posted on this page with the revised date.