MH-Pitch Privacy Policy

• Data controller: MH PITCH LTD
• Trading name: MH-Pitch
• Company number: 17434682
• Registered in: England and Wales
• Registered office: Apartment 1111 X Q 7 Building, Taylorson Street South, Salford, England, M5 3FY
• ICO registration reference: ZC243528
• Privacy contact: MHPitch@outlook.com

Further company details are available on our Company Information page.

Depending on how you use MH-Pitch, we may process:

• Name, email address, and account credentials
• Account role information (club administrator, coach, or player) and active dashboard view where applicable
• Club and team membership details via team_memberships (authoritative membership source)
• Coach team assignments
• Player age group where provided during player registration
• Attendance records for training sessions and matches
• Calendar event and availability responses (this is not the same as attendance)
• Challenge participation, submitted results, approved leaderboard data, badges, and points
• Session plan content, diagrams, and attached images or documents uploaded by authorised users
• Club profile information and club logos uploaded by authorised administrators
• Notification preferences (for example club updates and product announcements)
• Referral programme information where used
• Support or contact communications you send to us
• Subscription or billing-related identifiers when billing is enabled (payment card details are processed by Stripe, not stored by MH-Pitch)
• Technical information such as session/authentication data, browser type, and security logs generated by our hosting and authentication providers

Video upload functionality is not a core feature at present. If upload features are introduced, this policy will be updated to describe what is collected and how it is protected.

• Directly from you when you register, update your profile, respond to availability, submit challenge results, or contact us
• From your club when an administrator or coach invites you to join a team or club
• Automatically through authentication sessions and platform security logs
• From payment providers when you subscribe, where billing is enabled

• To create and manage your account
• To connect you to the correct club and team
• To let coaches and club administrators manage teams, attendance, calendars, and challenges
• To display leaderboards and participation information within authorised club contexts
• To send service-related communications and, where you opt in, product updates
• To operate referral or subscription features where available
• To maintain security, prevent misuse, and improve the platform
• To comply with legal obligations

Under UK data protection law, we rely on different lawful bases depending on the processing activity, including:

• Contract — to provide the service you sign up for
• Legitimate interests — to operate, secure, and improve the platform in ways that are reasonably expected and do not override your rights (for example club administration, fraud prevention, and internal reporting)
• Legal obligation — where we must retain or disclose information to comply with law
• Consent — where required, for example optional marketing or notification preferences where consent is the appropriate basis

We do not treat parental consent as the lawful basis for all processing of children's personal information. The appropriate lawful basis for a specific activity is identified for each processing purpose and may be updated as features evolve.

MH-Pitch is used in grassroots football and may involve children. We collect only information needed to provide club features. During the initial beta, Player accounts are created through team invite links issued by authorised coaches or club administrators — not through unrestricted public self-registration. Clubs, coaches, and parents or guardians are responsible for deciding whether it is appropriate for a young person to use the platform and for providing guidance about sharing personal information.

Children's personal information uses privacy-protective defaults: access is limited to the appropriate authenticated team, club, or personal account context according to role permissions and database access controls — it is not intended to be publicly searchable. During the initial beta we do not use advertising, behavioural advertising, or unnecessary profiling of children.

See our Safeguarding & Children's Privacy page for additional information about privacy-by-default and youth content.

Information you add to a club or team is visible to authorised users within that club according to role permissions and row-level security rules. Data is not intended to be publicly searchable. Club administrators and assigned coaches can manage membership and team operations for their authorised teams.

Availability responses indicate whether a player expects to attend a future event. Attendanceis recorded separately by authorised coaches or administrators after a session takes place. A player marking themselves as "Attending" in availability does not automatically mean they were marked present in attendance.

Challenge results may be submitted by players and reviewed by coaches before appearing on leaderboards. We store submitted results, approval status, badges, points, and related metadata to operate challenges fairly within a club.

Authorised coaches and club administrators may create session plans, diagrams, and attachments (such as PDFs or images). This content is stored within club-scoped access controls and is visible only to authorised users according to role permissions.

Clubs may upload logos and related branding images for use within MH-Pitch. Uploads must be appropriate and must not infringe third-party rights. Access is limited to authorised club users.

Video upload or media storage is not currently a standard feature of MH-Pitch. If introduced, we will describe what is uploaded, who can access it, retention periods, and security controls in an updated version of this policy.

We share information only where necessary to operate the service, including with:

• Supabase — Authentication, database hosting, file storage, and application infrastructure. Location: United States / European Union (region-dependent).
• Vercel — Website and application hosting. Location: United States / global edge network.
• Stripe — Payment processing for club subscriptions. Location: United States / global. MH-Pitch does not store full payment card details when Stripe is used.

We may also disclose information if required by law, to protect rights and safety, or in connection with a business reorganisation subject to appropriate safeguards.

Some service providers may process data outside the UK. Where this occurs, we aim to use appropriate safeguards such as standard contractual clauses or equivalent mechanisms required by UK data protection law.

We retain personal information for as long as your account is active and as needed to provide the service, resolve disputes, and meet legal obligations. When you delete your account, we apply deletion and anonymisation processes designed to remove or de-identify personal data while retaining limited club operational records where necessary (for example anonymised attendance facts).

We use technical and organisational measures including authenticated access, database row-level security, role-based permissions, and server-side access controls. No online service can guarantee absolute security, but we work to protect information using privacy-by-design principles.

Depending on your circumstances, you may have rights to access, rectify, erase, restrict, or object to processing of your personal information, and to data portability where applicable. You may also withdraw consent where processing is based on consent.

To exercise your rights, contact us at MHPitch@outlook.com. We may need to verify your identity before responding.

Account deletion is available in account settings. Deletion processes are designed to remove personal profile information and disconnect your account from active club operations, subject to retention described in section 15.

MH-Pitch uses essential cookies and similar technologies needed for authentication, session management, and security. We do not use non-essential analytics or advertising cookies unless we introduce them and update this policy accordingly.

We may update this policy from time to time. The current version is 1.0 (effective 9 September 2026). Material changes may require renewed acceptance within the product. Material expansion of children's functionality, public visibility, tracking, profiling, age or consent mechanisms, or children's data sharing requires a compliance review before release.

If you have concerns about how we handle personal information, contact us first at MHPitch@outlook.com. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk.

• Email: MHPitch@outlook.com
• Postal address: Apartment 1111 X Q 7 Building, Taylorson Street South, Salford, England, M5 3FY

See also our Terms & Conditions.