Privacy notice

Who we are

This Privacy Notice explains how OPNPLAY LIMITED (company number 15938692) ("OPN", "we", "us", or "our") collects, uses, stores, shares and otherwise processes personal data when you use the OPN Athlete, OPN Coach or PFA Transfer List applications, websites and related services (the "Services").

OPNPLAY LIMITED is the data controller of your personal data.

Our Services are not intended for children under 13 and we do not knowingly collect personal data from children. If we become aware that personal data has been provided by a child under 13 without appropriate consent, we will delete it.

Please ensure the information you provide is accurate and kept up to date through your account profile settings.

Personal data we collect

Depending on how you interact with our Services, we may collect:

• Contact Data, such as your name, email address, telephone number, postal address and other contact details.
• Profile Data, such as your username, profile photograph, date of birth, player or coach profile information, preferences and account settings.
• Device Data, such as your device type, device identifiers, operating system, browser type, IP address and mobile network information.
• Content Data, such as information, images, videos, documents, messages, comments and other content you upload, share or create through the Services.
• Usage Data, such as information about how you use the Services, including pages viewed, features used, login activity, searches and interactions within the App.
• Security Data, such as login credentials, password reset requests, authentication records, account verification information and security logs.
• Cookies Data, such as information collected through cookies and similar technologies, including browser information, session identifiers, preferences, IP address and website usage information.
• Marketing and Communications Data, such as your marketing preferences, subscription choices, communication history and interactions with marketing emails, notifications or campaigns.
• Location Data, such as your approximate or precise geographic location where location services are enabled on your device.
• Connected Data, such as information received from third-party services or integrations that you choose to connect to your account.
• Social Media Data, such as your social media profile information, username, profile image and information made available when you link a social media account.
• Feedback Data, such as survey responses, reviews, ratings, support requests and other feedback you provide about the Services.
• Health and Fitness Data, such as athletic performance metrics, training records, fitness activities, physical measurements, wellbeing information and other sports-related data you choose to provide or record through the Services.

We do not intentionally collect special category personal data (such as information about racial or ethnic origin, political opinions, religious beliefs, trade union membership, sex life or sexual orientation) unless it is voluntarily provided through the Services.

How we collect and use personal data

We collect personal data when you:

• Register or manage an account;
• Use our App, websites and Services;
• Upload or share content;
• Contact us by email, telephone, chat, online forms or support functions;
• Connect social media or third-party accounts;
• Interact with marketing communications;
• Provide feedback; or
• Consent to optional features such as location services.

We also automatically collect information about your device, browser, IP address, preferences and usage of the Services through cookies and similar technologies.

We use personal data to:

• Provide, operate and improve the Services;
• Manage accounts and user profiles;
• Deliver customer support;
• Diagnose and resolve technical issues;
• Personalise user experiences;
• Analyse performance, security and usage;
• Administer marketing communications and preferences;
• Prevent fraud and misuse of the Services; and
• Comply with legal and regulatory obligations.

Lawful basis for processing

We process personal data only when permitted by law, including where processing is necessary:

• With your consent;
• To perform a contract with you or take steps before entering into a contract;
• For our legitimate interests, provided these are not overridden by your rights and freedoms;
• For recognised legitimate interests permitted by law, including safeguarding, crime prevention, public security and co-operation with public authorities; or
• To comply with a legal or regulatory obligation.

Where information is required for contractual or legal purposes and is not provided, we may be unable to provide certain Services.

Sharing your personal data

We may share personal data with:

• App Store, Google Play and mobile network providers;
• IT, hosting, payment processing, verification, customer support, analytics and data storage providers;
• Professional advisers, including lawyers, auditors, insurers and consultants;
• Service providers appointed by you, such as banking or payment providers;
• Marketing and promotional partners;
• Third parties where you have consented to receive marketing from them;
• Prospective purchasers, investors or acquirers in connection with a business sale, merger or restructuring; and
• Regulators, law enforcement agencies, public authorities and courts where required by law or to protect our legal rights.

Third-party services

Our Services may contain links to third-party websites, applications or services, including commercial partners. These third parties are responsible for their own privacy practices, and we encourage you to review their privacy notices before providing personal data.

International transfers

Where personal data is transferred between the UK and the EEA, such transfers are carried out in accordance with applicable adequacy decisions and other lawful transfer mechanisms where required by law.

Cookies

We use cookies and similar technologies to operate, secure, personalise and improve our Services, remember preferences, analyse usage, troubleshoot issues and support marketing activities when permitted by law. Cookies Data may include device identifiers, browser information, IP addresses, login status, preferences, pages viewed and interactions with our Services. Cookies may be placed by us or by trusted third-party providers acting on our behalf.

Security

We use appropriate technical and organisational measures to protect personal data. Information is stored on secure systems located in the UK or EEA and may also be stored locally on your device using application caches, browser storage and similar technologies. Certain Services may include chat or social features. Any information you choose to make available through these features may be visible to other users.

Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to comply with legal, regulatory, accounting or reporting obligations, resolve disputes, prevent fraud and enforce our rights. Accounts that remain inactive for 12 months may be treated as expired and deleted. Where retention is no longer required, personal data will be securely deleted or anonymised for research, statistical or business purposes.

Your rights

Subject to applicable law, you may have the right to:

• Access your personal data;
• Correct inaccurate or incomplete data;
• Request deletion of personal data;
• Object to processing;
• Restrict processing;
• Receive certain personal data in a portable format;
• Withdraw consent at any time where processing is based on consent; and
• Complain about our handling of your personal data.

We encourage you to contact us first so we can address any concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Contact us

Data Protection Officer
OPNPLAY LIMITED
31 Dashwood Avenue
High Wycombe
Buckinghamshire HP12 3DZ
England

Email: dataprotection@opnplay.com

You can contact us at any time to exercise your rights or ask questions about this Privacy Notice.