PRIVACY POLICY
Out of the Box Football ("we", "us", "our") is committed to protecting the privacy of the players, parents, agents and visitors who get in touch with us. This page explains what personal data we collect, how we use it, and the rights you have under the General Data Protection Regulation (GDPR).
Who we are
Out of the Box Football provides player support services for football trials and training camps in Portugal, Spain and Northern Ireland. You can reach the data controller at info@outoftheboxfootball.com.
What we collect
We only collect what you choose to share with us:
- Enquiry form: name, role, email address, phone number, player age, player position, club preference and the message you send us.
- Email and WhatsApp: the contact details and message contents you send us when reaching out directly.
We do not collect special-category data, payment data, or data from automated trackers.
Why we use it
We use your data solely to:
- Reply to your enquiry and arrange next steps;
- Coordinate trials, care packages and logistics with our partner clubs on your behalf;
- Keep a basic record of past enquiries so we can follow up appropriately.
Our legal basis is your consent (when you submit the form or contact us) and our legitimate interest in responding to and fulfilling enquiries.
Who we share it with
- FormSubmit — processes form submissions and forwards them to our inbox. See formsubmit.co.
- WhatsApp / Meta — when you message us on WhatsApp, the conversation is processed by Meta under their own privacy policy.
- Partner clubs — only the information strictly needed to assess your player's profile (e.g. age, position, current club) is shared with the relevant club, and only after you've agreed to move forward.
We never sell, rent or trade your personal data.
Cookies and tracking
This site does not set advertising or analytics cookies. We use a single first-party browser storage entry to remember that you've dismissed the privacy notice. Third-party services we link to (FormSubmit, WhatsApp) may set their own cookies under their own policies.
How long we keep it
We keep enquiry records for up to 24 months from the last contact, after which they are deleted unless an active relationship is in place. You can ask us to delete your data sooner at any time.
Your rights
Under the GDPR you have the right to: access your data, correct it, ask us to delete it, restrict its processing, object to processing, and request a portable copy. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
Updates to this policy
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent change.