Privacy notice

Kridence Global Sport and Services is the data controller for our website enquiries, customer accounts, commercial relationships and support operations. When a club, agency or other organisation directs the processing of its own athlete or member records, that organisation may be the controller and we act as its processor under the applicable agreement. Contact info@kridenceglobalsport.com with privacy questions.

Account and contact data includes names, email addresses, sign-in identifiers, profile details, organisation membership and permissions. We use it to create accounts, provide the service, manage subscriptions and communicate with you. Passwords are handled by the authentication service; we do not publish credentials or collect full payment-card details in our app.

Where supplied, athlete and professional records include age or birth date, sport, role, location, qualifications, licence details, training and performance information, assessments, portfolios, videos, guardian relationships and consent records. We process them to provide the requested coaching, reporting, representation and organisational workflows. Health-related information receives additional protection and is processed only with an appropriate legal ground.

Support messages, enquiries, contracts, signatures, invoices and billing references support customer service, contractual administration and dispute handling. Technical information such as IP addresses, device/browser details, security logs and usage events supports security, troubleshooting and service improvement. Newsletter preferences and consent history are used for communications you choose to receive.

We rely on contract performance for account services and subscriptions; legitimate interests for proportionate security, fraud prevention, troubleshooting and service improvement; legal obligations for required financial records and lawful requests; and consent for optional marketing, public listings and other consent-based processing. Where sensitive data or children’s data needs additional authorisation, we obtain the applicable consent or other lawful basis. You may withdraw consent without affecting processing that was lawful before withdrawal.

We share necessary data with hosting, authentication, email, analytics and support service providers acting under appropriate terms; authorised members of your organisation within their permissions; professional legal/accounting advisers; and authorities when legally required. For orders processed through Paddle, Paddle is our Merchant of Record and receives data needed for the sale, subscription management, payments, tax compliance, invoicing and refunds. Its processing is described in Paddle’s privacy notice. Public talent listings and dossier access remain subject to consent, verification and access restrictions; purchasing a plan does not automatically release private records.

Children’s records require the applicable guardian authority and safeguarding controls. We do not treat a purchase as consent to publication. Public youth listings are restricted, and contact details, youth videos and protected location information are not made public merely because a profile exists. Contact us to correct a guardian link or withdraw an authorised listing.

Account and service records are retained while needed to provide the service and manage the customer relationship. Enquiry, support and usage records are kept only as long as necessary for their purpose, security and dispute resolution. Consent history is retained while needed to demonstrate permissions and withdrawals. Financial, contract and audit records may be retained for the periods required by applicable tax, accounting and legal obligations. On closure or an approved deletion request, we delete or anonymise data no longer required; required records and limited backup copies may remain until their lawful retention or backup cycle ends. Cancellation does not immediately erase records you may still need. Ask us for the retention period applicable to a particular record.

Our service providers may process data outside your country. Where required, we use applicable adequacy arrangements, contractual safeguards such as standard contractual clauses, and other lawful transfer protections. We use appropriate technical and organisational measures, including encryption in transit, permission controls and audit logging. No service can guarantee absolute security; suspected incidents should be reported promptly to our privacy contact.

Essential cookies and browser storage keep sign-in sessions, security and selected preferences working. Optional analytics or marketing technologies, where used, require consent where applicable and may be declined or withdrawn. Browser settings can remove cookies and storage, although doing so may sign you out or reset preferences. Newsletter consent is optional and can be withdrawn through the unsubscribe mechanism or by contacting us.

Depending on applicable law, you may request access, correction, erasure, restriction, portability or objection, and withdraw consent. We verify identity before releasing or changing protected data. Where GDPR applies, we normally respond within one month, subject to permitted extensions, and you may complain to your supervisory authority. You may also complain to the relevant data-protection authority in your jurisdiction, including the Nigeria Data Protection Commission where applicable. Email our privacy contact to exercise your rights.