Privacy Policy

Last updated 6 July 2026.

Who we are

The data controller is the Crezaro FC entity that operates the program you take part in, in your own country. That entity decides how and why your personal data is used, and the wider Crezaro network processes it under one shared standard. Where you sign in with your Crezaro ID, your account is coordinated across the network so a player who moves between countries keeps one record.

What we collect

• Account and contact details for the player and their parent or carer, such as name, date of birth, email and phone.
• Player development data: assessments, coach notes, attendance, video clips and match records.
• Health and medical information you choose to share so we can keep a player safe during activity.
• Billing information needed to process fees, scholarships and Foundation support. We do not store full card numbers.
• Technical data such as device type and pages viewed, described in our Cookies Policy.

Children and parental consent

Most of our users are children. Where a user is a minor, we rely on the consent and involvement of a parent or legal guardian. Accounts for younger children are set up and managed through a parent account, and a child cannot register alone. We collect the minimum a program actually needs, we do not use children's data for behavioural advertising, and we give parents visibility and control over their child's record. Under the Nigeria Data Protection Act a child is a person under 18, and under the UK and EU GDPR children under 13 to 16 (depending on the country) cannot consent for themselves. We apply the stricter standard where the rules differ.

Why we use your data (lawful bases)

• Consent, which you give when you register a player and which you can withdraw at any time.
• Performance of a contract, to deliver the programs and services you sign up for.
• Legal obligation, for example safeguarding, child-protection and financial record-keeping duties.
• Vital interests, to protect a child's life or safety in an emergency.
• Legitimate interests, to run and improve the club safely, balanced against your rights.

How long we keep it

We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires. Development records are kept while a player is active and for a limited period after, so a returning player keeps their history. Safeguarding records may be kept longer where child-protection law requires it. When data is no longer needed it is deleted or anonymised.

Sharing and cross-border transfers

We do not sell personal data. We share it only with the people who need it inside the Crezaro network, and with service providers who process data on our behalf under contract. Because Crezaro operates across countries, your data may be processed outside the country where you live. When that happens we use lawful transfer safeguards, such as standard contractual clauses and adequacy assessments, so your protection travels with your data, in line with the NDPA and GDPR.

Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to how we use it, withdraw consent, and receive a copy in a portable format. For a child, a parent or guardian can exercise these rights on their behalf. You also have the right to complain to your data-protection authority, such as the Nigeria Data Protection Commission or your national supervisory authority in the EU or UK.

Keeping data safe

We protect personal data with access controls, encryption in transit, monitored official channels for club communication, and staff who are trained in safeguarding and data protection. Our approach to protecting children's information is set out alongside our wider commitments on the Safeguarding page.

How to reach us

To exercise a right or ask a question about your data, open a tracked request through our support desk. We route data and safeguarding requests to the right team and reply there, rather than publishing an inbox.