How NextGen protects family information.

Who is responsible for your information

NextGen Academy is the controller for personal information used to operate family accounts, coaching, safeguarding, bookings, kit orders and communications. Privacy questions and rights requests can be sent to info@next-gen-academy.com.

Information we collect

We may hold parent and child identity and contact details, dates of birth, emergency contacts, attendance, bookings, team and development records, communications, permission choices and account-security records. Payment providers return transaction references and payment status; NextGen does not store full card details.

Allergies, medication, health and medical notes are special-category information. Only provide information relevant to safe participation and keep it current.

Why and how we use it

We use information to perform bookings and memberships, administer accounts and payments, provide coaching, protect children, respond to emergencies, meet legal obligations and pursue legitimate operational interests where those interests do not override individual rights. Where consent is the appropriate basis, including optional promotional media use, it can be refused or withdrawn without losing access to coaching.

Children and parent authority

Family accounts are created by an adult who confirms they are a parent, guardian or otherwise authorised to provide information and make decisions for each child added. NextGen will take account of a child's age, understanding and wishes where appropriate and will not use a parent choice to disregard a capable child's objection.

Photography, video and social media

These permissions are separate and optional. Current choices are shown per child in the family portal. Every change is recorded with the account, child, policy version, source and server time so staff can follow the latest decision.

Who receives information

Authorised NextGen staff and coaches receive only the information needed for their role. Specialist suppliers may process data for hosting, authentication, payments, accounting, messaging and academy operations under contractual controls. Payment services may include Square and GoCardless once those integrations are enabled. Information is not sold.

International transfers

Some suppliers may process information outside the UK. Where this occurs, NextGen will use an applicable UK adequacy regulation or approved contractual safeguards and carry out required transfer-risk checks.

How long information is kept

Information is kept only for as long as it is needed for the purpose collected, safeguarding requirements, dispute handling and legal, tax or accounting obligations. NextGen must approve and maintain a written retention schedule before launch. When the applicable period ends, information will be securely deleted or anonymised.

Security

Access is role-based and family records are protected by database row-level security. Sensitive credentials are kept server-side, permissions are checked again by server routes, and important account and consent actions are logged. No online service can guarantee absolute security; suspected incidents are assessed and reported where the law requires.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and you may withdraw consent at any time. Identity and authority may need to be verified before a request is completed. You may complain to the UK Information Commissioner's Office at ico.org.uk.

Marketing and cookies

Operational messages needed for an account or booking are separate from optional marketing. Marketing preferences can be changed in the portal. Any non-essential analytics or advertising cookies must remain disabled until an appropriate cookie choice has been collected.

Changes to this notice

This notice is effective from 21 July 2026. Material changes will be shown in the portal or otherwise communicated. The version acknowledged at registration is retained with the account.