This is not yet the final production privacy notice. The controller identity, contact route, retention schedule and processor list must be approved before applications open.
Who the service is for
Grassroots Connect accounts are for adult players, parents and guardians, approved club users and platform administrators. Anyone under 18 is represented through an account managed by their parent or guardian.
Information the service needs
Adult accounts
This includes identity and contact details, account roles, club relationships, security information and the records needed to review club access.
Guardian-managed child profiles
A guardian may provide a private date of birth, football pathway, positions, experience, availability and postcode-based travel preference. The exact date of birth and postcode remain in restricted records and are not returned in player search.
Adult player profiles
Adult players can add a name they choose to show, football category, positions, level, league, experience, availability and travel preference. Exact date of birth and full postcode stay in restricted records. Clubs receive football details and a broad distance band only when the player chooses to be listed.
Club directory information
Public club information can include teams, venues, leagues, training days, vacancies, trials, safeguarding routes and independently recorded governing-body credentials.
What is public
Published club, team, vacancy and trial details can be public. Player profiles are not part of the public directory. A listed adult profile or guardian-managed junior profile is available only through the approved club search and never includes exact location or contact details.
Cartoon player cards
A guardian can choose to upload a photograph to create an illustrated card. The intended process validates and strips metadata from the upload, sends it to the image provider, stores the approved illustration privately and removes the source from Grassroots Connect after processing.
Standard provider retention is currently planned. Provider abuse-monitoring records may persist for up to 30 days, so the service will not claim that an upload is immediately deleted everywhere.
Sharing adult contact details
An adult player, or the parent or guardian of a junior player, chooses whether to reveal an email address or phone number after a recruitment request is accepted. Once shared, the recipient may retain it outside Grassroots Connect and the platform cannot take it back.
Access, correction and deletion
Adults will be able to review their information, correct inaccurate records, hide or delete their own player profile, unlist junior profiles they manage and request deletion through the authenticated service. Some narrowly defined records may need to be retained for security, safeguarding or legal reasons.
Questions and concerns
The final notice will name the controller, data-protection contact, processors, international-transfer safeguards and complaint route. For a safeguarding concern, use the safeguarding page.