Privacy Policy
Last updated: 2026
This privacy policy explains how Mini Stars Football ("we", "us", "our") collects, uses, and protects your personal data when you register your child for one of our football camps or join our mailing list.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Mini Stars Football
7 Mere Court, Winsford, Cheshire. CW7 4BQ
ministarsfootball@gmail.com
For any questions about this policy or how we handle your data, contact us at the address above.
2. What Data We Collect
| Data | Why we collect it |
|---|---|
| Child's name and age | To identify the registered child and allocate them to the correct age group |
| Which camp(s) selected | To process the booking |
| Parent / guardian name | To identify the responsible adult |
| Parent email address | To send booking confirmation and camp communications |
| Parent phone number | Emergency contact during camp (optional) |
| Medical notes / allergies | To keep your child safe during the camp (optional) |
| Marketing opt-in | To send future camp announcements if you consent |
Medical notes and allergy information are health data — a special category of personal data under Article 9 of the UK GDPR. See Section 4 for how we handle it.
We do not collect payment card details. Payments are handled directly by Square; see Section 7.
3. Legal Basis for Processing
- Contract performance — processing your registration and managing the camp booking.
- Legitimate interests — keeping campers safe, contacting you about your booking.
- Consent — sending marketing emails (only where you have opted in).
- Legal obligation — retaining records as required by law.
- Explicit consent & vital interests — processing your child's medical and allergy information (special category data); see Section 4.
4. Children's Data & Medical Information
Our camps are for primary-age children (ages 4–11). All personal data about a child is provided by their parent or guardian, who registers on the child's behalf and gives consent for the processing described in this policy. In line with Information Commissioner's Office (ICO) guidance on children's data, we collect only the minimum information needed to run the camp safely, and we never use a child's data for marketing or profiling.
Medical notes and allergy information are special category data (health data) under Article 9 of the UK GDPR. We process it only:
- on the basis of your explicit consent, given when you choose to provide it during registration; and
- where necessary to protect the vital interests of your child — for example responding to a medical emergency or safeguarding their welfare during the camp.
Health information is used solely to keep your child safe. Access is limited to the camp staff responsible for your child's care, it is never used for marketing, and it is deleted in line with our retention schedule (Section 8). You can withdraw it or ask us to delete it at any time by contacting us.
5. How We Use Your Data
- Processing and confirming your registration
- Managing the camp and ensuring your child's safety
- Contacting you about your booking or camp logistics
- Sending future camp announcements (only if you opted in)
- Meeting our legal and safeguarding obligations
We will never sell your data or share it with third parties for their own marketing purposes.
6. Who We Share Data With
| Third party | Purpose | Location |
|---|---|---|
| Formspree | Stores registration form submissions | USA (standard contractual clauses) |
| Web3Forms | Stores registration form submissions (redundant backup handler) | USA (standard contractual clauses) |
| Square | Processes camp payments | USA / UK |
| Google (Gmail / Drive) | Sends marketing emails; stores mailing list | EEA / USA |
| Firebase (Google) | Hosts the sign-up website | EEA / USA |
Where data is transferred outside the UK, we rely on adequacy decisions or standard contractual clauses to ensure it remains protected.
7. Payments
Payments are processed by Square. When you click "Complete Payment" you are redirected to Square's hosted checkout. We do not see or store your card details. Square's privacy policy is available at squareup.com.
8. How Long We Keep Your Data
- Registration data is retained for up to 2 years after the camp, then securely deleted.
- Payment records are retained as required by HMRC (currently 6 years).
- Marketing email addresses are kept until you unsubscribe.
9. Your Rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data (subject to legal obligations).
- Restriction — ask us to limit how we use your data.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — unsubscribe from marketing at any time.
- Portability — receive your data in a machine-readable format.
To exercise any of these rights, contact us at ministarsfootball@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
10. Cookies
Our sign-up page does not use tracking cookies or analytics. The Formspree and Web3Forms form handlers and the Square payment page may set their own cookies; please refer to their respective privacy policies.
11. Changes to This Policy
We may update this policy from time to time. The current version is always available on this page. Material changes will be communicated by email where we hold your address.