Last updated: 6 September 2026
Privacy notice
Who we are
PitchUnion is operated by PitchUnion. We are the data controller for the information described here. Contact us at privacy@pitchunion.co.uk.
PitchUnion is in closed alpha
PitchUnion is being tested with a small number of invited teams. Features change frequently. We will tell you before we start processing any new category of information about you or your children.
Only adults hold accounts
Accounts are for adults aged 18 or over. Children do not log in and cannot be contacted through PitchUnion. There is no direct adult-to-child messaging.
What we collect
About you: your name, email address, the teams and roles you hold, your notification and appearance settings, and the content you create — messages, notes, availability responses.
About children, provided by their guardians: a football display name, date of birth, team membership, availability responses, attendance, and match statistics such as goals and assists. Guardians may optionally add emergency and medical information and record consents. We do not collect children’s residential addresses. Children’s photographs are switched off in the closed alpha.
Technical: sign-in records and basic security logs. We do not use advertising or tracking cookies, we show no ads, and we do not sell data to anyone.
Our sign-in and sign-up forms use Cloudflare Turnstile to tell people apart from automated abuse. It looks at technical signals from your browser and device to do this. It does not track you across other websites and we do not use it for advertising.
Why we use it, and our lawful basis
- To provide the service you signed up for — contract.
- To let a team organise itself: fixtures, availability, squads and results — legitimate interests, balanced against everyone’s privacy, with visibility deliberately limited by role.
- Optional information such as medical and emergency details, and any future use of children’s photographs — consent, which you can withdraw at any time.
- To keep the service secure and meet our legal obligations — legal obligation and legitimate interests.
Who sees what
Visibility is restricted by role and enforced on our servers, not merely hidden on screen. Guardians see their own children’s information; they do not see other children’s contact details, medical information, dates of birth, positions, selection or playing minutes. Team staff see what they need to run the team. Nothing is public: the site requires a sign-in.
Who we share it with
We use service providers who process data on our instructions only: our hosting and database provider, our application hosting provider, our email delivery provider, and our domain and network provider. We do not sell or share your data for marketing. We may disclose information where the law requires it, or where there is a safeguarding concern.
How long we keep it
For as long as your account is active, and for a limited period afterwards where we need it for legal or safeguarding reasons. You can ask us to delete your account and your children’s records at any time.
Your rights
You can ask for a copy of your information, ask us to correct or delete it, ask us to restrict or stop certain uses, or ask for it in a portable form. Contact privacy@pitchunion.co.uk. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
Access is restricted by relationship and role, and enforced by the database itself. Sensitive information is held behind additional checks. No system is perfectly secure, and we will tell you promptly if something goes wrong that affects you.
Changes
We will post any changes here and, where they matter, tell you directly.