Menu toggle button

Toxteth El8te CIC – Privacy Notice (UK GDPR)

Last updated: 14 August 2025

1. Who we are

Toxteth El8te CIC ("we", "us") is the data controller for the website and mobile apps used to run our basketball programmes, events and safeguarding processes.

  • Contact: info@toxtethel8te.com
  • Registered address: 8C Sunnyside, Princes Park, Liverpool, L8 3TD
  • Company no: 14689600

2. What this notice covers

This notice applies to players, parents/carers, volunteers, staff and website/app users. It explains what data we collect, why, how long we keep it, who we share it with, and your rights. We follow the ICO Children's Code for under-18s.

3. The data we collect

  • Identity & contact: name, DOB, gender, nationality, school/year group, address/postcode, parent/guardian details, emergency contacts.
  • Programme data: session registrations, attendance, consents (media, travel), kit sizes, positions.
  • Health & additional needs (special category): medical conditions, medication, allergies, access needs (only what is needed for safety/inclusion).
  • Safeguarding information where necessary.
  • Technical data: app/device identifiers, usage analytics (aggregated).

4. Why we use your data (lawful bases)

  • Consent: media, certain health disclosures, communications preferences.
  • Legitimate interests: running safe sessions, managing venues, evaluation and improvement.
  • Vital interests: sharing essential information with emergency services to protect life.
  • Legal obligation: safeguarding, health & safety, incident reporting.
  • Contract (where applicable): providing booked sessions or paid services.

5. How we use and share data

We use data to deliver safe sessions and events (incl. Midnight League, LVP 3x3), manage bookings, communicate with parents/players, provide adjustments, and evaluate impact. We may share relevant data with:

  • National Governing Bodies (e.g., Basketball England) for eligibility/registration.
  • Venues and event partners (LJMU) where needed for access and safety.
  • Health services, safeguarding partners or police if required by law or to protect a child.
  • Cloud service providers under contract and UK GDPR safeguards.

We do not sell personal data.

6. International transfers

If we transfer data outside the UK/EEA (e.g., cloud hosting), we use approved safeguards such as the UK Addendum to the EU Standard Contractual Clauses or other adequacy mechanisms.

7. Retention

  • Routine programme records (registrations, attendance, consents): 3 years after last activity.
  • Accident/incident records: 3 years (or longer if legally required).
  • Safeguarding records: per statutory guidance (typically to age 25 or longer where advised).

We securely delete or anonymise data after these periods.

8. Your rights

You have rights to access, correct, erase, restrict or object to processing, and data portability where applicable. Where we rely on consent, you can withdraw it at any time. To exercise rights, contact info@toxtethel8te.com.

You can complain to the ICO: www.ico.org.uk.

9. Children & parental consent

For under-18s, we obtain consent from a parent/guardian where required and present information in clear, age-appropriate language.

10. Cookies & analytics

See our Cookies Policy for details of cookies used on our website/app and how to manage them: www.toxtethel8te.com/cookies.

11. Changes to this notice

We may update this Notice and will post the latest version in the app and on our website.