We restrict access to family information to authorised people who need it for their work. We use approved systems, access controls and secure storage, and take particular care with children’s health and safeguarding information.

We assess service providers and information-sharing arrangements before use. Club information is not automatically added to unrelated business or marketing lists. Developers and other suppliers receive only the access necessary for their work.

We keep records for defined purposes and review them under our retention schedule. Some information may need to be kept longer for safeguarding, legal claims or an ongoing investigation. The Privacy Notice explains the applicable periods or criteria and your rights.

If information is lost, misdirected or accessed improperly, we assess and contain the incident, record the action taken and make notifications where required. No online system can be guaranteed completely risk-free.

Contact [PRIVACY_CONTACT] to report a data concern or exercise your rights. We acknowledge data-protection complaints within 30 days, investigate without undue delay and explain the outcome. You retain the right to complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.