Privacy Policy

1. Who we are

Staty ("we", "us") is operated by D. Platten, trading as Staty, of Unit 170474, PO Box 7169, Poole, BH15 9EL. We're the data controller for the information described in this policy. You can contact us about privacy matters at support@staty.co.uk.

2. What we collect, and why

We collect different information depending on who's using Staty:

Club owners (coaches who sign up)

• Name and email address, to create and secure your account
• Billing information (handled entirely by Stripe — we never see or store your card details ourselves)
• Team, player, match, and stats data that you enter into the app

Players (including children)

• Name, squad number, and position, entered by their coach
• An email address, if the coach chooses to invite them to their own login
• Match statistics and coach's notes logged against them

We only collect what's needed to run the service: managing your account, letting you log and view stats, processing payments, and communicating with you about the service (e.g. invite emails, password resets).

3. Children's data

Staty is used by grassroots football coaches to track statistics for youth players, many of whom are under 18. A player's data (name, stats, an optional email for their own login) is entered and managed by their coach, not by the child directly. We rely on the coach's relationship with the players and their parents/guardians to ensure appropriate consent is in place for a child's data being recorded this way — coaches should have their own basis (e.g. club membership agreements, parental consent) for holding this information about children in their care.

We collect the minimum necessary for a player's stats to function, don't use children's data for any marketing purpose, and don't share it outside the club's own coaching staff. A parent or guardian can ask their coach, or contact us directly, to have a child's account and data removed at any time.

4. Legal basis for processing

• Contract: processing your club's data is necessary to provide the service you've signed up for
• Legitimate interests: keeping the service secure, preventing misuse, and improving what we offer
• Consent: where a player is invited to their own login, by choosing to send that invite

5. Who we share data with

We use a small number of trusted service providers to run Staty, each acting as a processor on our behalf:

• Supabase — hosts our database and handles login/authentication
• Stripe — processes all payments; we never see full card details
• Vercel — hosts the application itself, and provides Vercel Web Analytics (aggregated, anonymised site traffic — no cookies, no individual profiling; see Section 8)

We don't sell personal data to anyone, and don't share it with third parties for their own marketing purposes.

6. International data transfers

Some of our service providers may process or store data outside the UK. Where that happens, we rely on their own compliance mechanisms (such as Standard Contractual Clauses) to ensure your data stays protected to UK standards. [Confirm and update this section with the specific hosting regions Supabase/Vercel/Stripe use for your account before publishing.]

7. How long we keep data

We keep your data for as long as your account is active. If you cancel your subscription, we keep your data for a reasonable period afterwards in case you resubscribe, then delete it. You can ask us to delete your data sooner at any time — see Section 9.

8. Cookies and analytics

We only use strictly necessary cookies — specifically, a login session cookie that keeps you signed in. We don't use advertising or tracking cookies of any kind. We do use Vercel Web Analytics to see aggregated site traffic (which pages are visited, roughly how often); it doesn't use cookies, doesn't build a profile of individual visitors, and can't track you across other sites. See our Cookie Policy for details.

9. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Request deletion of your data
• Object to or restrict certain processing
• Receive your data in a portable format
• Complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data

To exercise any of these rights, contact us at support@staty.co.uk.

10. Changes to this policy

We may update this policy from time to time. We'll update the date at the top of this page when we do, and let you know directly if the changes are significant.