Who is responsible for your information?

Alton Storm Basketball is the data controller for personal information collected through this website and through club administration. Contact us at [email protected].

Information we collect

• Account and member details: name, email address, age, phone number, sex, address, account role, and team membership.
• Booking and attendance details: selected sessions, booking status, attendance, experience, and coaching notes.
• Tournament details: team name, captain contact details, and player names.
• Payment details: payment and subscription status and Stripe identifiers. We do not store full card details.
• Technical information needed for authentication, security, troubleshooting, and reliable operation.

How and why we use it

• To create and manage accounts, bookings, teams, tournaments, subscriptions, and club communications.
• To run the club and deliver services requested by members and visitors.
• To protect members, prevent misuse, maintain records, and meet legal or financial obligations.

Our lawful bases are primarily performance of a contract, legitimate interests in operating and safeguarding the club, and compliance with legal obligations. Where consent is the appropriate basis, you may withdraw it at any time.

Who receives information?

Authorised club administrators and coaches receive only the information needed for their roles. We use service providers including Supabase for authentication and database hosting, Google when you choose Google sign-in, Stripe for payments, and our website hosting provider. These providers process information under their own security and data-protection commitments. We also use Resend to deliver messages submitted through the contact form. We do not sell personal information.

International transfers

Some service providers may process information outside the UK. Where this happens, we require an appropriate transfer safeguard or rely on another lawful transfer mechanism.

Retention

• Active member accounts and club records: while membership is active, then normally up to 24 months after the last activity.
• Trial requests that do not become memberships: normally up to 12 months after the request.
• Tournament registrations and attendance records: normally up to 24 months after the event.
• Payment and accounting records: normally six years where required for tax, accounting, dispute, or fraud-prevention purposes.
• Security and technical logs: only as long as reasonably needed for security and troubleshooting.

We may keep information longer where required by law, needed to resolve a dispute, or necessary to protect a person. We securely delete or anonymise it when no longer needed.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability, or object to our use of your information. You may also complain to the UK Information Commissioner's Office. Contact us first at [email protected] so we can help.

Cookies and security

We use essential cookies for authentication and security. See our cookie policy. We use access controls and row-level security, but no online service can guarantee absolute security.

Changes

We will update this page when our practices change and show the effective date at the top.