Privacy
Plain English, no small print. Here's what data The Full 90 holds, why, and what you can do about it.
Who we are
The Full 90 is software that helps grassroots football clubs run themselves. When a club uses us to manage their players, payments and fixtures, the club is the data controller for their members' information and we act as their data processor — we only handle it on the club's instructions. For your own account and our billing of the club, The Full 90 is the controller.
What we collect
- Account details — name, email and password for club admins, treasurers and coaches.
- Club & team data — teams, fixtures, training, finances and fundraising entered by the club.
- Player & guardian details — names, contact details and dates of birth captured at signup.
- Medical information — allergies, conditions and emergency contacts, where a guardian provides them. This is special-category data and we treat it accordingly (see below).
- Payment information — we never see or store card numbers or bank account numbers. Direct Debits and card payments are handled by our payment partners; we only hold their tokens and references.
Why we use it, and our legal basis
- To provide the service the club signed up for — performance of a contract.
- To collect subs and fees the club is owed — the club's legitimate interests / contract.
- To keep children safe at training and matches (medical and emergency-contact info) — with the guardian's consent, and protection of vital interests.
- To send service emails (signup confirmations, payment notices). We do not sell your data or use it for advertising.
Who we share it with
Only the partners we need to run the service, all under data-processing agreements:
- GoCardless and Stripe — Direct Debit and card payments.
- Postmark — sending transactional emails.
- Our UK hosting provider — your data is stored in the UK.
- Anthropic — to generate optional AI match reports from match facts (goals, line-ups). Coaches' private player ratings are never shared with anyone.
Medical & children's data
Medical information is encrypted at rest, access is restricted to the people who need it, and every view is audit-logged. We keep it for three years after a player becomes inactive, then delete or anonymise it. Players are children, so their data is provided and managed by their parent or guardian through the club.
How long we keep it
We keep data for as long as the club needs it to run, and to meet legal and financial record-keeping duties. When a club closes its account we delete or anonymise its data after a short grace period.
Your rights
You can ask to access, correct, export or delete your data. As most member data is controlled by the club, the quickest route is usually your club — but you can always contact us and we'll help. You also have the right to complain to the UK's Information Commissioner's Office (ICO).
Cookies
We use essential cookies to keep you signed in and to remember a one-off vote on the Player of the Match page. We don't use advertising or tracking cookies.
Contact
Questions about your data? Email hello@thefull90.co.uk or see our contact page.