Privacy Policy

DNA Women's Football ("we", "us") is the data controller for the personal information described in this policy. The business is run by Dave Rimmer, who is responsible for the information we hold. Contact details are on the Contact page and in the footer of every page.

• Coaching enquiries: name, email address, phone number, club and level, position, coaching goals, availability and your message, depending on the form you use.
• Emergency contact details, and parent or carer details where needed for players aged 16–17.
• Health and medical information you choose to share — medical conditions, allergies and medication — so we can look after you safely.
• Session records: attendance registers, plus any accident or incident record.
• Photos or video where we have consent.
• Correspondence: the emails and messages you send us.
• Technical data such as device and usage information needed to run and secure the website.

• To reply to your enquiry and arrange coaching (contract).
• To run sessions safely, including knowing who to call in an emergency (vital interests and legal obligation).
• To keep safeguarding, first aid and accident records (legal obligation).
• To send service messages such as session confirmations, changes and cancellations (contract).
• To share photos or videos of sessions where you have given permission (consent — you can withdraw at any time).
• Health information is special category data and is processed with your explicit consent and for reasons of health and safety in sport.

• Club safeguarding contacts where it is necessary to protect a player or run a session safely.
• Our service providers: the hosting and database provider that stores enquiry records and the email services we use. They act on our instructions.
• Emergency services or medical professionals if needed to protect someone's health or safety.
• Statutory agencies such as children's social care or the police where we have a safeguarding or legal duty to do so.

We never sell your personal data.

• Enquiry details: kept while there is a reason to — for example a potential or active booking — and then deleted.
• Accident and safeguarding records: retained in line with statutory guidance, and for children until they reach 25 where required.
• Photos: kept only while consent remains in place.

• All traffic to our website is encrypted in transit (HTTPS).
• Enquiry records are held in a secure database with restricted access — they are not publicly visible.
• Enquiry access is limited to Dave and authorised service providers acting on our instructions.
• We collect only what is needed and do not ask for information that is not relevant.

• Ask for a copy of the personal data we hold about you or your child.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete data where we no longer need it.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent for photography at any time.

To exercise any of these rights, contact us using the details on the Contact page. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

For players aged 16–17, a parent or carer is involved where consent or safeguarding arrangements require it. Extra care is taken with children's information: we collect only what is needed, keep it secure, and never use it for marketing.

We review this policy at least annually and will publish any updates on this page. This website does not use advertising cookies; if we add analytics or cookies in future, this policy will be updated and the date below will change with it.