Who looks after your information?
Active Liverpool C.I.C., Marybone Youth & Community Centre, Addison Way, Liverpool, L3 2EW. An approved privacy contact will be published before live registration.
What we collect and why
A parent or carer’s name and verified email support a secure family account. A child’s first name and age band support age-appropriate bookings. We record your confirmation that you are authorised to manage their profile. An emergency contact is collected for safe participation.
Bookings, waitlist offers and attendance help us organise sessions. Coach assessments and private messages support each child’s own development. Development is never publicly ranked or compared with other children.
Who can see it?
Only explicitly linked parents or carers, currently assigned coaches and authorised administrators can access private child records. Coaches see essential emergency information only for their assigned participants. The public calendar contains no child information. Access, role changes and booking exceptions are logged.
Optional choices
Photo permissions and marketing preferences are separate from bookings, off by default and can be withdrawn in family settings. No advertising trackers, facial recognition or wearable integrations are used. Private profiles are never public.
Health and accessibility information
These restricted fields are disabled in this MVP. Do not put health details in general profiles or messages. Before enabling such collection, Active Liverpool must confirm the appropriate Article 6 lawful basis and Article 9 condition.
How long we keep it
The retention period is awaiting an approved decision for each purpose. Before live use, Active Liverpool must set and implement retention, secure backups and deletion procedures. No retention period is assumed in this demo.
Your rights
You may ask to access, correct or delete your information, and withdraw optional permissions. Signed-in families can submit a request through family settings. Some information may need to be kept for legal or safeguarding reasons. You may also complain to the Information Commissioner’s Office at ico.org.uk.
Our hosting and legal checks
The portal uses Lovable Cloud for secure accounts and storage. Before real data is accepted, Active Liverpool must complete a data protection impact assessment, confirm each lawful basis and retention period, review hosting and processor terms and assess any international transfers under UK GDPR and the Data Protection Act 2018.
Keeping children safe
Staff access is invitation-only and must use multi-factor authentication before live use. For safeguarding concerns, see our safeguarding contact. In an emergency, call 999.