Privacy notice

Last updated: [DATE]

Draft: replace every item in square brackets, and have it checked before ROSTR holds real player records.

Who we are

ROSTR is provided by [YOUR NAME OR BUSINESS NAME], [ADDRESS]. Contact: [EMAIL ADDRESS]. [If registered: ICO registration number [NUMBER].]

Two different roles

This website and the pilot form. When you send us a pilot request, we decide how your details are used, so we are the controller for them.

Player and staff records inside ROSTR. Each club or school decides what it records about its players and staff, so the club or school is the controller. We process those records only on its instructions, under a written agreement, to provide the service. Questions about those records should go first to the club or school; we will help them answer.

The pilot form

• What we collect: your name, role, organisation, email address, type of programme, number of squads and anything you write in the message box.
• Why: to reply to you and, if you go ahead, to set up your workspace.
• Lawful basis: legitimate interests, in answering an enquiry you chose to send us.
• How long: up to [12] months after our last contact, unless your organisation becomes a customer.

Signing in to ROSTR

To give you access, we keep your email address, a securely stored password (or sign-in links), your role in each organisation, and records of when your access was given or removed. ROSTR also records who created and changed clinical records, so each organisation has an audit trail.

Who processes data for us

• Supabase: the database, sign-in and file storage, hosted in [London / the EU].
• Vercel: serves the website and app pages. It does not store player records.
• [EMAIL PROVIDER]: sends sign-in, invitation and password emails.
• Google Fonts: supplies the typefaces, so your browser contacts Google when pages load.

Each has data protection terms with us. Where any of them transfers data outside the UK, it does so under the UK's approved safeguards.

Cookies and browser storage

This website sets no advertising or analytics cookies. The ROSTR app keeps your sign-in session and a few display preferences in your browser, which it needs to work.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Contact [EMAIL ADDRESS]. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.