UK GDPR Policy

 

Ignite Sport & Physical Education Ltd is committed to protecting the privacy and rights of individuals in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy outlines how we collect, use, store, and protect personal data.

 

This policy applies to:

  • All staff, contractors, and volunteers

  • All services including holiday camps, after-school clubs, mentoring sessions, and promotional activities

  • All data subjects including children, parents/carers, school contacts, and employees

 

Data We Collect

We may collect and process the following types of personal data:

  • Identity data: Name, title, date of birth

  • Contact data: Address, email, phone number

  • Financial data: Bank and payment card details

  • Transaction data: Details of payments and services purchased

  • Technical data: IP address, browser type, and device details

  • Marketing data: Communication preferences and feedback 

 

We process personal data under the following lawful bases:

  • Consent: For marketing communications and photo/video usage

  • Contract: To deliver services such as camps and clubs

  • Legal Obligation: For safeguarding, health and safety, and employment law

  • Legitimate Interests: For internal reporting, service improvement, and parent communications

 

 

 

 

We use personal data to:

  • Deliver safe, inclusive, and engaging sessions

  • Communicate with parents and schools

  • Promote achievements and upcoming events (with consent)

  • Meet legal and safeguarding obligations

 

We may share data with:

  • Local authorities (e.g. HAF programme)

  • Schools and partner organisations

  • Emergency services (when necessary)

  • IT and marketing service providers (under contract)

 

Data Storage and Security

  • Data is stored securely on encrypted systems with access controls

  • Paper records are kept in locked cabinets and disposed of securely

  • Staff are trained in data protection and safeguarding procedures

 

Data Retention

We retain personal data only as long as necessary:

  • Child records: up to 6 years after last activity

  • Staff records: up to 6 years after employment ends

  • Marketing data: until consent is withdrawn

 

Rights of Individuals

Individuals have the right to:

  • Access their personal data

  • Request correction or deletion

  • Withdraw consent

  • Object to processing

  • Lodge a complaint with the ICO

 

Data Protection Officer
Name: Tom Monks
Email: Tom@ignite-sport.co.uk

 

Requests can be made via: Tom@ignite-sport.co.uk

Last Updated: September 2025