Privacy Policy

1. Introduction
Chipuka Academy ("the Academy", "we", "us") is committed to protecting the privacy of parents, guardians, and players. This Privacy Policy explains what personal data we collect, why, and how we protect it, in line with Kenya's Data Protection Act, 2019.

2. Data We Collect
We collect: parent/guardian contact details; player biographical data (name, date of birth, gender, nationality); medical information (allergies, injury history, emergency contacts); school and residence information; identity documents (birth certificate or passport); photographs and video; coach assessments and performance statistics; and payment records.

3. Why We Collect It
We use this data to: register and manage player accounts; ensure player safety and appropriate emergency response; communicate with parents about training, fixtures, and fees; process payments; track player development; and, where consented, promote the Academy through media featuring players.

4. Legal Basis for Processing
We process personal data on the basis of your consent (given at registration), to perform our obligations to you as a parent/guardian enrolling a player, and, in limited cases, our legitimate interest in operating and improving the Academy safely.

5. Children's Data
Players are minors, and their personal and medical data receives extra protection. We only collect a player's data with the consent of a parent or legal guardian, and limit access to this data to Academy staff who need it to fulfil their role (e.g. coaches, medical first-responders, administrators).

6. Data Sharing
We do not sell personal data. We share data only where necessary: with payment processors (Pesapal, M-Pesa) to process fee payments; with cloud storage and email providers who process data on our behalf under contract; and where required by law.

7. Data Storage & Security
Data is stored on secured cloud infrastructure with access controls and encryption in transit. Access to medical and financial records is restricted to authorised staff.

8. Data Retention
We retain player and guardian data for as long as the player is enrolled, and for a reasonable period afterwards for record-keeping and legal purposes, after which it is archived or deleted.

9. Your Rights
Under the Data Protection Act, 2019, you may request access to, correction of, or deletion of personal data we hold about you or your child, and may withdraw consent for optional uses (such as media/image use) at any time. You may also lodge a complaint with the Office of the Data Protection Commissioner.

10. Cookies
Our website uses only the minimal cookies necessary for the site to function (such as keeping you logged in); we do not use third-party advertising trackers.

11. Contact
For any privacy questions or requests, please contact the Academy through the Contact Us page.