Privacy Policy

1. Data Controller

JS Football Pathway is operated by George Hadjichristofi, based in Cyprus. We are the data controller responsible for your personal data.

Contact: info@jsfootballpathway.com

2. Data We Collect

We collect the following categories of personal data when you use our platform:

2.1 Account Information

• Full name, email address, phone number (WhatsApp)
• Date of birth, nationality, passport country
• Profile photo
• Login credentials (password is stored encrypted; Google OAuth ID if using Google login)

2.2 Football Profile Data

• Playing position(s), preferred foot, height, weight
• Current club, years of experience
• Career history, languages spoken, skill self-assessments
• Video highlight links (YouTube/Vimeo URLs)
• Work permit status (EU, UK)

2.3 Documents

• Football CV, medical certificate, passport copy
• These are uploaded voluntarily and stored securely on our servers

2.4 Payment Information

• Subscription and billing data is processed through Stripe
• We do not store your credit/debit card details on our servers
• We store only your Stripe customer ID and the last four digits of your card for display purposes

2.5 Communications

• Messages sent through the platform's messaging system
• Attachments sent in conversations

2.6 Usage Data

• IP address, browser type, pages visited, timestamps
• Session data for authentication purposes

3. Purpose of Processing

We process your data for the following purposes:

• Service delivery: Matching you with trial and contract opportunities, coordinating with partner clubs and agents on your behalf
• Football consultancy services: Evaluating your profile to recommend suitable opportunities
• Payment processing: Managing subscriptions and consultancy fee arrangements
• Communication: Responding to your messages, providing updates on applications and trials
• Platform improvement: Understanding usage patterns to improve our services
• Legal compliance: Meeting our legal obligations under applicable law

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent: You provide consent when you register an account and agree to our Terms and Conditions
• Contract performance: Processing necessary to provide the football consultancy services you have subscribed to
• Legitimate interest: Analytics and platform improvement, fraud prevention, security
• Legal obligation: Where required by law (e.g., financial record-keeping)

5. Third-Party Services

We share data with the following third parties, only as necessary:

• Stripe: Payment processing
• Google: OAuth authentication for users who choose to sign in with Google
• Hosting provider: Our servers are hosted on infrastructure that may process data in accordance with their privacy and security standards

We do not sell your personal data to third parties. We do not share your contact details directly with clubs or agents — all communication is coordinated through our platform team.

6. International Data Transfers

Your data may be processed outside the European Economic Area (EEA) when using third-party services such as Stripe or hosting providers. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions by the European Commission.

7. Data Retention

• Active accounts: Your data is retained for as long as your account is active
• Account deletion: Upon requesting account deletion, your personal data will be anonymized immediately and permanently deleted within 30 days
• Financial records: Payment-related records may be retained for up to 7 years to comply with tax and accounting obligations
• Communications: Messages are retained while your account is active and deleted when your account is deleted

8. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access: Request a copy of all personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to restrict processing: Request limitation of how we process your data
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing

How to Exercise Your Rights

You can exercise your data rights in two ways:

• Self-service: Use the "Download My Data" and "Delete My Account" buttons on your Profile page within the platform
• Email: Contact us at info@jsfootballpathway.com with your request. We will respond within 30 days.

9. Cookies

We use only essential cookies required for the platform to function. We do not use tracking or advertising cookies. For full details, see our Cookie Policy.

10. Security

We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption, encrypted password storage, access controls, and regular security reviews.

11. Children's Privacy

Our platform is intended for users aged 16 and older. Users aged 16-17 may register with verifiable parental or guardian consent. We do not knowingly collect data from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify registered users via email.

13. Contact & Complaints

For any questions or concerns about this Privacy Policy or our data practices:

George Hadjichristofi
JS Football Pathway
Email: info@jsfootballpathway.com

You also have the right to lodge a complaint with a supervisory authority. In Cyprus, the supervisory authority is the Office of the Commissioner for Personal Data Protection.