Data Collection Policy

On Account Registration:

1. First name
2. Last name
3. Email address
4. Password

your password is never stored in plain text. It is hashed before being saved, and your original password cannot cannot be viewed or retrieved at any time

Upon Joining a Club:

When you register with a club, Touchline Insights stores a link between your account and that club, along with your role (Viewer, Coach, Admin, or Owner). This determines what you're able to see and do on the platform

Session Data:

When you log in, Touchline Insights creates a session and place a cookie on your device to keep you logged in. Sessions automatically expire after 30 days

Match and Team Data:

Where applicable, we also store team names, match details (date, opposing team, scores, conditions, location), and match events (tries, kicks, penalties, handling errors, lineouts, scrums) logged during games. This data relates to matches and teams rather than to individual people, aside from the coach assigned to a match

1. your first name, last name, and email are visible to the admins and owners of the club you're currently registered with
2. Coaches, Admins, and Owners are visible in the same way to other admins and owners of that club, since these are just elevated versions of a registered account
3. If you leave a club, your details are no longer visible to that club's Admins and Owners
4. The data is visible so that admins and owners can accurately promote users within the club to coach and admin levels
5. Touchline Insights does not sell, rent, or share your personal information with any third party

Touchline Insights does not use any third-party services beyond Cloudflare's hosting and database infrastructure

1. If you de-register from a club, your account remains active as a base account with no club affiliation, until you register with another club
2. Session data expires automatically 30 days after login and is removed from the database at expiry
3. If you delete your account, your name, email, and password are permanently removed from our database. This action cannot be reversed, and there is no way to recover a deleted account

Deleting your Account:

You can delete your account at any time from your account page by confirming your email and password. There are two conditions that apply before an account can be deleted:

1. If you are a club owner, you must transfer ownership to another admin first, since a club cannot be left without an owner
2. If you are a coach with an active match, you must complete that match first

For match records you were previously assigned to as a coach, the record itself is kept for the club's history, but your account is unlinked from it rather than the match being deleted. There is no separate option to export your data before deletion

1. Right of Access (request a copy of the personal data Touchline Insights holds about you)
2. Right to Rectification (request corrections to inaccurate or incomplete data)
3. Right to Erasure (delete your account yourself at any time from your account page, or request deletion from Touchline Insights directly)

Access and rectification requests, beyond what is currently available on the account page, require manual handling by Touchline Insights. Erasure can be actioned immediately through the account page, subject to the conditions described above

1. Passwords are hashed and never stored or logged in plain text
2. Access to club member data is restricted by account role