Policies
Privacy, cookies and data retention
How Time Football Academy (TFA) collects, uses and protects information about you and your child, how long we keep it, and your rights. We use no cookies or tracking on this website.
Who we are
Time Football Academy (TFA) is the trading name of TIME FOOTBALL ACADEMY LTD, company no. 17529209, registered in England and Wales. The company is the data controller for the information described here.
Correspondence address: 10 William Street, Windsor, SL4 1BA.
For anything about your information, contact Milad Rakian at info@timefootballacademy.co.uk.
What we collect
When you register a child, we collect:
- your name, email address and mobile number
- an emergency contact: their name, relationship to the child and phone number
- each child's name, date of birth, chosen location and programme
- any medical conditions, allergies or support needs you tell us about
- whether a brother or sister is already a member, and their name
- your consent choices for each child: whether we may use their medical and support details, and whether we may use photos and video of them. Each is recorded separately with the date, time and the wording you saw, and earlier records are never changed
- your acceptance of the membership terms, with the date and the version you accepted
- technical details for security: a scrambled (hashed) form of your IP address, never the address itself, and your browser type
Other ways we collect information
- Enquiry forms: your name, email address, phone number if you give it, and what you tell us, such as your child's age, experience and what they want to work on.
- WhatsApp: if you message us, WhatsApp (owned by Meta) handles that conversation under its own privacy policy.
- Direct Debit: you give your bank details to GoCardless on its own secure pages, never to us or this website. We receive payment confirmations, not your bank details.
- Sessions: attendance, progress notes for your child's monthly report, and accident or incident records if something happens.
Why we use it, and our legal basis
| What we do | Legal basis (UK GDPR) |
|---|---|
| Process a registration, arrange the free trial and run membership | Contract: to provide the membership you have asked for |
| Contact an emergency contact if your child is hurt or unwell | Vital interests, and legitimate interests in keeping children safe |
| Use medical and support information to keep your child safe at sessions | Explicit consent, given with a separate tick box for each child on the registration form |
| Answer enquiries | Legitimate interests: replying to you |
| Use photos or video of your child | Consent, given per child; you can withdraw it at any time |
| Keep payment records | Legal obligation: HMRC record-keeping rules |
| Record and act on safeguarding concerns | Legal obligation and the substantial public interest in safeguarding children (Data Protection Act 2018) |
| Protect the website and forms from misuse | Legitimate interests: security |
Medical and support information
Health information is a special category of data, so we protect it more strictly.
It is stored only in our secure records, never in emails. Only the owner (and later an authorised operating manager) can see full records. Before each session, the coaches supervising your child receive only what they need to keep your child safe.
We use it only with your explicit consent. You can withdraw that consent at any time; we will then delete the details and talk with you about how to keep your child safe at sessions.
Who we share it with
We never sell your information or use it for advertising. We share it only with:
- Coaches supervising your child: first name, age group, emergency contact and relevant medical or support needs.
- Integ House, which builds and hosts this website and its records for us, under a written data-processing agreement.
- Microsoft (Azure), which stores the records in its UK South (London) data centre. Form submissions pass briefly through its West Europe (Netherlands) region on the way, encrypted, and are not stored there.
- Zoho, which provides our email, including the confirmation emails this website sends.
- GoCardless, which collects Direct Debit payments under its own privacy notice.
- Emergency services, if a child needs urgent help.
- Police, children’s social care or other authorities, where the law requires it or to protect a child.
Information stored outside the UK
Our records are stored in the UK. Some processing happens in the European Economic Area: form submissions passing through the Netherlands, and Zoho’s EU data centres for email. The UK recognises these countries as having adequate data protection.
How long we keep it
We delete or anonymise information once it is no longer needed. Our records are checked regularly against these periods. Anonymising means removing names and contact details, keeping only what can’t identify anyone.
| Information | How long |
|---|---|
| Enquiries that don’t lead to a registration | 12 months after our last contact |
| Registrations that don’t go ahead (including after a free trial) | 6 months |
| Members’ contact, emergency and membership details | While your child is a member, checked each year |
| Former members’ contact and membership history | 2 years after leaving |
| Medical and support information | Deleted within 1 month of membership ending, unless linked to an accident or safeguarding record |
| Payment records | 6 years after the end of the financial year they relate to |
| Acceptance of the membership terms | 6 years after membership ends |
| Photo and video consent (and withdrawals) | While any image of your child is in use, then 2 years |
| Accident and injury records | Until the child turns 21, and at least 3 years |
| Safeguarding records | Until the child turns 25 |
How we keep it safe
- Everything is encrypted in transit (HTTPS) and while stored.
- Access to records is limited to named people and protected by sign-in.
- Medical details never appear in emails.
- IP addresses are scrambled before they are stored.
Your rights
You can ask to see the information we hold, have it corrected or deleted, restrict or object to how we use it, or receive a copy to take elsewhere. Where we rely on consent, such as for photos, you can withdraw it at any time; this doesn’t affect your child taking part.
Email info@timefootballacademy.co.uk. We reply within one month. Parents usually act for younger children; older children can ask about their own information too.
Cookies
This website sets no cookies and uses no analytics, advertising or tracking. Our fonts are hosted on our own website, so loading a page sends nothing to third parties.
Links to WhatsApp, Instagram and our partners’ websites take you to their sites, which have their own cookie policies.
Complaints
If you’re unhappy with how we handle your information, please tell us first at info@timefootballacademy.co.uk. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk or 0303 123 1113.
Changes
We will update this page if anything changes.
Questions
If you have a question or concern, message us on WhatsApp 07403 05 7744.
Contact Milad Rakian at info@timefootballacademy.co.uk.
Time Football Academy is the trading name of TIME FOOTBALL ACADEMY LTD, company no. 17529209, registered in England and Wales. Correspondence address: 10 William Street, Windsor, SL4 1BA.
