Privacy Policy

1.1 Blueprint Sports Guides Ltd ("we", "us", "our") is committed to protecting your privacy and the privacy of your children.

1.2 This Privacy Policy explains how we collect, use, store, and protect personal data when you use our application, website, and services (the "Service").

1.3 We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.4 If you have any questions about this Privacy Policy or our data practices, please contact us via our Contact page.

2.1 Information You Provide:

Account Information:

• Parent/Guardian full name (required)
• Email address (required)
• Password (stored securely, hashed)
• Phone number (optional)

Child Information:

• Child's first name only (we intentionally collect minimal child data)
• Age range selected

Order Information (for equipment purchases):

• Delivery address
• Payment information (processed by Stripe; we do not store card details)
• Order history

2.2 Information Generated Through Use:

Progress Data:

• Activity completions
• Notes you add to activities
• Certificates earned
• Session preferences and favourites

2.3 Automatically Collected Information:

Analytics (via Google Analytics):

• Pages viewed and features used
• Device type and operating system
• Approximate location (country/city level, IP addresses are anonymised)
• Usage patterns and session duration

Technical Data:

• Error logs for troubleshooting
• Security event logs

3.1 We process your personal data for the following purposes and legal bases:

3.2 Marketing Communications: We will only send marketing emails if you have given explicit consent. You can withdraw consent at any time by clicking "unsubscribe" in any email or contacting us.

4.2 Minimal Data Collection: We intentionally only collect your child's first name. We do not collect:

• Full names
• Dates of birth
• Photos or videos
• Any other identifying information

4.3 Purpose: We use your child's first name solely to personalise their experience within the app (e.g., displaying progress, certificates with their name).

4.4 Parental Control: As the parent or guardian, you have full control over your child's data and can delete it at any time (see Section 7).

5.1 We do not sell your personal data to third parties.

5.2 We share data with the following categories of service providers who process data on our behalf:

5.3 All our service providers are bound by data processing agreements and are required to protect your data in accordance with applicable law.

5.4 International Transfers: Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, UK International Data Transfer Agreements).

5.5 Legal Disclosure: We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

6.1 We retain your personal data as follows:

6.2 After Subscription Cancellation:

• Your child's first name and progress data will be retained for 30 days
• If you resubscribe within 30 days, your data will be reinstated
• After 30 days, child data is permanently and automatically deleted
• Your parent account information may be retained for our records

7.1 Under the UK GDPR, you have the following rights regarding your personal data:

7.2 How to Exercise Your Rights:

• In-App: Use the "Manage" section to update details or delete progress data
• By Email: Contact us via our Contact page

7.3 We will respond to requests within one month. We may need to verify your identity before processing requests.

7.4 Complaints: If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: www.ico.org.uk
• Helpline: 0303 123 1113

8.1 We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication and password hashing
• Regular security updates and monitoring
• Access controls limiting who can access data
• Secure payment processing (PCI-DSS compliant via Stripe)

8.2 While we take security seriously, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9.1 We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyse usage patterns
• Improve the Service

9.2 Essential Cookies: Required for the Service to function. Cannot be disabled.

9.3 Analytics Cookies: Used via Google Analytics to understand how users interact with the Service. These cookies use anonymised IP addresses.

9.4 Managing Cookies: You can control cookies through your browser settings. Note that disabling essential cookies may prevent the Service from working properly.

10.1 The Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

11.1 We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

11.2 The "Last updated" date at the top indicates when the policy was last revised.