Privacy Policy

Tamworth Fitness Football (“we”, “us”, “the club”) is the data controller for the personal information collected through this website and member portal, fitnessfootballtamworth.co.uk. This policy explains what we collect, why, how we protect it, and the rights you have over it.

If you have any questions about this policy or how your data is handled, contact us at info@fitnessfootballtamworth.co.uk.

What we collect

When you sign up and use the member portal, we collect:

• Account details — your name, email address, and password (stored securely, never in plain text).
• Health and fitness data — your height, weekly weight, starting weight, and goal weight. This is used to calculate your BMI and track your progress.
• Club activity — attendance, match results, goals, League Table points, awards, and Player of the Week votes.
• Membership details — how you pay (Pay on Day or Direct Debit) and when you joined.

We do not collect payment card details through this site — membership payments are handled directly with the club, not through the portal.

Why we collect it, and our legal basis

We process your account and activity data to run your membership — this is necessary to provide the service you've signed up for (League Table, weekly check-ins, and so on).

Your weight, height, and BMI are special category health data under UK GDPR, which requires a stronger legal basis than ordinary account details. We rely on your explicit consent, given when you tick the box at sign-up. You can withdraw this consent at any time by asking us to close your account — see “Your rights” below.

Your weight data is private

No other member can ever see your individual weight, weigh-in history, or BMI. The League Table only ever shows points, never numbers on the scale. Only you and club admins can see your personal figures — this is enforced at the database level, not just hidden in the interface.

Your Insight (AI-generated progress notes)

The dashboard's “Your Insight” panel is generated by an AI model (Anthropic's Claude). To generate it, we send your first name and a summary of your season-by-season weight figures (start weight, current weight, target) to Anthropic's API. No other member's data is included in this request. Anthropic processes this solely to generate your note and does not use it to train their models under their API terms.

Who we share your data with

We use a small number of service providers to run the portal. We don't sell your data, and we don't share it with other members beyond your name, League Table points, and awards.

• Supabase — hosts our database and handles secure login. This is where all member data is stored.
• Vercel — hosts the website and member portal itself.
• Anthropic — generates your personal AI progress insight (see above).
• Microsoft 365 — used to send account emails like password resets.

Each of these providers only processes data on our instructions and is contractually required to keep it secure.

How long we keep your data

[Suggested starting point — confirm this works for the club:] While you're an active member, we keep your data for as long as your account exists. If you leave the club or your account is deactivated, we keep your weigh-in history for up to 12 months in case you rejoin, then delete it, unless you ask us to delete it sooner.

Keeping your data secure

Your data is encrypted in transit and at rest. Access to personal and health data is restricted by account role — regular members can only ever see their own data, and only admins can view or edit member records. Passwords are never stored in a readable form.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (you can update most of this yourself in your Profile)
• Erase your data (“right to be forgotten”)
• Restrict or object to certain processing
• Withdraw consent for health data processing at any time
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at the email address above. If you're not satisfied with how we've handled your request, you have the right to complain to the Information Commissioner's Office (ICO).

Children

Tamworth Fitness Football is intended for adult members. We do not knowingly collect data from children.

Changes to this policy

If we make significant changes to how we handle your data, we'll update this page and let members know.