Privacy Policy

Beyond The Pitch (“we”) provides a scheduling and booking tool for private soccer coaching. This policy explains what personal information we collect, how we use and protect it, and the choices you have. We’re an early-access product and will update this policy as the service grows.

• Account details — your name and email, and a password (which we store only as a secure one-way hash, never in plain text).
• Player profiles — for the athlete a session is for: their name and date of birth (used to know whether they’re under 18), and any notes you choose to add.
• Booking details — the sessions you request (coach, program, date, time), a contact email, and any notes you include for the coach.
• Limited technical data — basic information such as IP address and activity timestamps, used to operate and secure the service.

We use this information to provide the service — letting you request and manage coaching sessions, letting coaches see and respond to requests, securing your account, and operating and improving the product. We do not use it for unrelated advertising.

Beyond The Pitch is designed so that a parent or guardian holds the account and provides and controls a player’s information. Players under 18 should not create their own accounts. As the account holder you can review, update, or delete your players’ information at any time, or ask us to do it for you.

Passwords are hashed, sessions use signed, HTTP-only cookies, and data is transmitted over encrypted (HTTPS) connections. We validate input on the server and use parameterized database queries to guard against common attacks. Access to personal data is limited to what’s needed to run the service.

When you request a session, the relevant booking details are shared with the coach you’re booking — that’s how the service works. We rely on trusted service providers (for example, hosting and database infrastructure, and a payment processor when paid sessions are enabled) that process data on our behalf. We do not sell your personal information.

When paid bookings are enabled, card payments are handled by our payment processor (Stripe). We don’t collect or store full card numbers on our own servers.

You can access, update, or delete your account and player information, or ask questions about this policy, by contacting us at [your contact email].

We’ll post any changes to this policy on this page with a new “last updated” date. Questions? Reach us at [your contact email] — [legal entity name], [address], [jurisdiction].