Facebook Instagram Tiktok Google
BOOK A FREE TRIAL

Future Step Football Academy

Privacy Policy

Who we are

Future Step Football Academy Ltd, company number 10456155. We provide football coaching for children and young people.
We are the data controller for the personal data described here.
Contact us by:
email: official.fsfa@gmail.com.
mobile/whatsapp : +44 7513 657261
landline 0114 489 1125
Postal address: 417 Langsett Road, Sheffield, S6 2LL.
Venue we use: The Soccer Centre, 630 Prince of Wales Rd, Sheffield S9 4ER.
Booking tool: we use Class for Kids as the primary booking tool and can be found at www.futurestepfootball.co.uk.

What this policy covers

This policy explains what data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and your rights.

The data we collect
  • Parent or carer details, name, email, phone, and address.
  • Player details, name, date of birth, training group, and attendance.
  • Emergency contacts.
  • Medical information you choose to share, allergies, conditions, GP details, care plans.
  • Safeguarding notes where needed.
  • Photos and video, only if you consent.
  • Payment details handled by our provider. We do not store card or bank details on our systems.
  • Communications, emails, messages, forms, feedback.
  • Website data, IP address, cookies, analytics, device and browser information.
  • CCTV images at venues where cameras operate.
Why we collect it and our lawful bases
  • Run sessions, manage bookings, and provide your membership. Lawful basis, contract.
  • Health and safety and safeguarding. Lawful basis, legal obligation and, where needed, vital interests.
  • Coaching operations, schedules, waitlists, and customer support. Lawful basis, legitimate interests.
  • Photos and video, and any marketing use. Lawful basis, consent. You can withdraw consent at any time.
  • Service updates and offers about similar services to existing customers. Lawful basis, legitimate interests and PECR soft opt-in. You can opt out at any time.
  • Cookies and analytics that are not essential. Lawful basis, consent.
Children’s data
  • We collect only what we need for coaching and safety. A parent or carer gives any needed consents. We keep access limited to trained staff.
Photos and video
  • We only create or use images or clips if you consent.
  • We never publish a child’s full name with an image.
  • Use with consent includes our public social pages, for example, Facebook, Instagram, TikTok, and YouTube. These pages are public, so content may be visible and shareable by others.
  • You can withdraw consent at any time. We will stop future use and take down our copies where we control them. We cannot control re-shares by others outside our pages.
  • Coaches may use video for training feedback. We store these securely and limit access.
  •  
Payments

  • We use payment providers such as Stripe, GoCardless or PayPal to process payments. They act as separate controllers or processors. They process your data under their own terms and security.

Sharing your data

We share data with:

  • Coaches and staff who need it to run sessions and keep children safe at The Soccer Centre.
  • IT and software providers, booking, email, payments, analytics, and website hosting, all under contract.
  • Insurers, legal advisers, regulators, police, local authority safeguarding partners, or the venue operator, where the law allows or requires it.
    We do not sell your data.
CCTV

  • The Soccer Centre may operate CCTV for safety and security. Where the venue controls CCTV, the venue’s policy applies. Where we control any cameras, we display signs, limit access, secure storage, and set a clear retention period.

International transfers

  • Some providers may store data outside the UK. Where this happens, we use legal safeguards, such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

How long do we keep data
  • Membership and booking records, up to six years after the end of your relationship.
  • Financial records, six years for tax and accounting.
  • Safeguarding records, for as long as guidance or law requires.
  • Photos and video used with consent, until you withdraw consent or we no longer need them.
  • Routine emails and messages, usually up to two years unless needed longer for a query, dispute, or legal reason.
    We review retention and delete or anonymise data when no longer needed.
Security
  • We use account access controls, device security, staff training, and secure providers. We restrict access to those who need it. We review suppliers and keep records of data sharing
Your rights

You can:

  • Access your data.
  • Ask us to correct your data.
  • Ask us to delete your data where the law allows.
  • Ask us to restrict or object to certain uses.
  • Ask for a copy of the data you gave us in a portable format.
  • Withdraw consent at any time.
    We will respond within one month. For complex requests, we may extend by up to two months, and we will tell you.
Marketing choices

You can opt out of marketing at any time. Use the unsubscribe link in emails or contact us. If we rely on the soft opt-in, it applies only to our existing customers and only for similar services.

Cookies

Our site uses essential cookies to work. We ask for your consent for analytics or advertising cookies. You can change your cookie settings at any time. See our Cookie Notice for details.

Automated decision-making

We do not use automated decision-making or profiling that produces legal or similar significant effects.

How to complain

If you have a concern, contact us first so we can help. You can also complain to the Information Commissioner’s Office, ico.org.uk, 0303 123 1113.

Changes to this policy

We may update this policy. We will post the new version on our website and show the date below.

Last updated: 11 November 2025