Privacy Policy

Who we are

This service is operated by Gôl Centres Ltd ("Gôl", "we", "us"), Lawrenny Avenue, Cardiff CF11 8BR, Wales. We are the data controller for the personal information collected through this app. You can contact us about anything in this policy at cardiff@golcentres.co.uk or by phone on 029 2037 5760.

What we collect

• Account details: name, email address, and a password (stored only in hashed form by our authentication provider).
• Player profile details you choose to provide: date of birth, gender, phone number, address, and postcode.
• Team and league participation: the teams you belong to, fixtures, results, and standings.
• Booking records: pitches and slots you book, and their status.
• Payment records: amounts, dates, and payment status. Card details are collected and processed by Stripe — we never see or store your card number.
• Emails we send you (booking confirmations, invitations, payment receipts) and their delivery status.

Why we use it

• To provide the service you have asked for (performance of a contract): managing your account, bookings, team membership, league fixtures, and payments.
• Our legitimate interests in running the venues: operational dashboards for our staff, contacting you about your bookings and fixtures, and keeping the service secure.
• Legal obligations: keeping financial records of payments.
• Consent, where we ask for it — for example, photography and short videos captured during games and events to promote Gôl. For anyone under 18, we require parent or carer consent before they take part in activities and before any photography is used.

Who processes it for us

We use a small number of service providers to run this app:

• Supabase — database and authentication hosting (EU region, Ireland).
• Stripe — card payment processing.
• Brevo — transactional email delivery.
• Vercel — application hosting.

Each provider processes your data only on our instructions. Where a provider transfers data outside the UK or EEA, the transfer is protected by recognised safeguards such as the UK Addendum to the EU Standard Contractual Clauses.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Cookies

The app uses strictly necessary cookies only: authentication session cookies that keep you signed in, and a preference cookie that remembers your selected venue. We do not use advertising or cross-site tracking cookies.

How long we keep it

We keep your account and profile information while your account is active. Booking, fixture, and league records are kept as part of the operational history of the venue. Payment records are kept for six years to meet accounting and tax obligations. If you ask us to close your account, we will delete or anonymise personal information we no longer need.

Your rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018) you have the right to:

• access a copy of the personal information we hold about you, free of charge;
• have inaccurate information corrected;
• have your information erased where we no longer need it;
• restrict or object to processing, including any direct marketing;
• receive the information you provided to us in a portable format.

To exercise any of these rights, email cardiff@golcentres.co.uk. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we have handled your data.

Security

Access to personal information is restricted to staff who need it, protected by individual accounts and role-based permissions. Data is encrypted in transit and at rest by our hosting providers.

Our venues

Gôl Cardiff — Lawrenny Avenue, Cardiff CF11 8BR — cardiff@golcentres.co.uk — 029 2037 5760

Gôl Newport — Nash Road, Newport NP19 4RP — newport@golcentres.co.uk — 01633 290857