Legal
Privacy Policy
Last updated:
1. Who We Are
Elite11Plus is the operator of the platform and the data controller for the personal data processed through our services. We provide AI-powered football performance testing and player development software to coaches, academies and clubs.
Full company registration details and contact information will be provided here once the legal entity is formally established.
2. What Personal Data We Collect
We collect different categories of personal data depending on your relationship with us:
2.1 Account & Contact Data
- Name, email address, phone number
- Job title and organisation name
- Login credentials (encrypted)
- Billing and payment information
2.2 Player Performance Data
- Player names, dates of birth, positions
- Test results (sprint times, agility scores, technical skill ratings)
- Progress tracking data across sessions and seasons
- Photos or videos uploaded by the club (if applicable)
2.3 Automatically Collected Data
- IP address, browser type, device information
- Usage data (pages visited, features used, session duration)
- Cookies and similar tracking technologies (see Section 10)
3. How We Use Your Personal Data
We process personal data for the following purposes and legal bases under GDPR Article 6:
| Purpose | Legal Basis |
|---|---|
| Providing the Elite11Plus platform and services | Performance of a contract (Art. 6(1)(b)) |
| Processing player performance tests and generating reports | Legitimate interest (Art. 6(1)(f)) / Club's legal obligation |
| Account management and authentication | Performance of a contract (Art. 6(1)(b)) |
| Customer support and responding to enquiries | Legitimate interest (Art. 6(1)(f)) |
| Service improvements, analytics and platform security | Legitimate interest (Art. 6(1)(f)) |
| Marketing communications (with your consent) | Consent (Art. 6(1)(a)) |
| Legal compliance and dispute resolution | Legal obligation (Art. 6(1)(c)) |
4. Who We Share Data With
We do not sell personal data. We only share data in the following circumstances:
- Within your organisation: Coaches, analysts and administrators within your club or academy can access player data you authorise them to see.
- Service providers: We use trusted third-party providers for hosting (Netlify), payment processing, email delivery and analytics. All are GDPR-compliant and bound by data processing agreements.
- Legal requirements: We may disclose data if required by law, court order or regulatory authority.
- Business transfers: In the event of a merger, acquisition or asset sale, data may be transferred subject to the same privacy protections.
5. International Data Transfers
Elite11Plus is based in the United Kingdom. Our primary hosting and data storage is within the UK and European Economic Area (EEA).
If we transfer personal data outside the UK/EEA, we ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreements (IDTAs)
- Adequacy decisions for recognised countries
6. How Long We Keep Your Data
We retain personal data only as long as necessary for the purposes outlined above:
| Data Type | Retention Period |
|---|---|
| Account and contact data | Until account closure + 6 years for legal obligations |
| Player performance data | Controlled by the club — deleted upon club request or account termination |
| Payment and billing records | 6 years (UK tax and accounting requirements) |
| Marketing consent records | Until consent is withdrawn + 2 years |
| Server logs and analytics | 12 months |
7. Data Security
We implement appropriate technical and organisational measures to protect personal data:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access controls: Role-based permissions — clubs control who sees what data
- Regular security audits: Penetration testing and vulnerability assessments
- Incident response: Breach notification procedures compliant with GDPR Article 33/34
- Staff training: All personnel with data access receive data protection training
8. Your Data Protection Rights
Under GDPR and the UK Data Protection Act 2018, you have the following rights:
- Right of Access (Art. 15)
- Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16)
- Request correction of inaccurate or incomplete data.
- Right to Erasure — "Right to be Forgotten" (Art. 17)
- Request deletion of your personal data where there is no overriding legal reason for us to keep it.
- Right to Restrict Processing (Art. 18)
- Request that we limit how we use your data in certain circumstances.
- Right to Data Portability (Art. 20)
- Receive your data in a structured, machine-readable format and transfer it to another controller.
- Right to Object (Art. 21)
- Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent (Art. 7)
- Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us through the contact form on our website. We respond within one month.
9. Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the supervisory authority:
UK: Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
10. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve our platform:
| Category | Purpose | Duration |
|---|---|---|
| Essential | Authentication, security, platform functionality | Session |
| Preferences | Remembering your settings and preferences | 1 year |
| Analytics | Understanding how users interact with the platform | 13 months |
You can manage cookie preferences through your browser settings. Analytics cookies are only set with your consent.
11. Children's Data
Elite11Plus processes data about young football players on behalf of clubs and academies. We do not knowingly collect data directly from children under 13.
Clubs using our platform are responsible for:
- Obtaining appropriate parental or guardian consent before adding minor players
- Ensuring compliance with child protection and data protection laws in their jurisdiction
- Only collecting data necessary for player development purposes
If you believe we have inadvertently collected data from a child without appropriate consent, please contact us immediately through the contact form on our website.
12. Automated Decision-Making
Elite11Plus uses AI algorithms to benchmark player performance data against position-specific and age-banded norms. This automated processing:
- Generates percentile rankings and composite scores based on statistical models
- Does not produce legal effects or similarly significant consequences for individuals
- Is always accompanied by human review — coaches and analysts make final development decisions
- Is based on explicit consent or the club's legitimate interest in player development
13. Third-Party Links and Services
Our platform may contain links to third-party websites (e.g., Hudl, GPS platforms). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before sharing data.
We use the following categories of service providers:
- Cloud hosting and infrastructure
- Payment processing
- Email and communication services
- Analytics and error monitoring
- Customer support tools
All providers are vetted for GDPR compliance and bound by data processing agreements.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform functionality. Material changes will be notified via:
- Email notification to registered account holders
- Prominent notice on our website
- In-platform notification where applicable
The "Last updated" date at the top of this page indicates when the policy was last revised.
15. Contact Us
For any privacy-related questions, requests or concerns, please reach out through the contact form on our website.
Detailed contact information including registered address and dedicated privacy email will be published here once the company is formally incorporated.
Response time: We aim to respond within 5 business days.