The data controller for The Eleventh is Shaun Holmes, sole trader, trading as The Eleventh. Address: 161 Atlantic Road, Sheffield, S8 7GD. Email: shaun@theeleventh.co.uk.
Our ICO registration number is ZC267751.
We process personal data on these bases under UK GDPR:
We collect what a grassroots team needs to run:
Coaches can store medical and emergency notes on a player, such as an allergy or who to call. Coaches on that team can see those notes. A parent or player sees them only when medical-visibility consent has been given for that child.
Player photos are optional. A parent or the player can give media consent. With media consent, everyone on that team can see the photo, including parents and players. Without media consent, the photo is hidden from everyone, including coaches, and a coach can remove it. Award certificates leave the photo out and use the club crest instead.
Coaches can write development notes about a player. Some notes stay with the coaches. Parents and players see notes that are shared with them only when development-notes consent has been given.
An award certificate can include the child's name, a photo when media consent is in place, and the club crest. If the team has turned full names off, the certificate uses the squad number instead of the full name. Share a certificate only with the child's family or club.
We store attendance for training and matches, such as who is going and who was present, so coaches can plan the session and the matchday.
If a Player ID has been lost, a parent or player can ask us to email it. The form uses the email address on the account, plus the child's name or date of birth (or both). If those details match a profile linked to that account, we email the Player ID to that address only. The page shows the same message whether or not a match is found.
We use this information to:
These organisations process data for us:
The database is hosted by Supabase in Zurich, Switzerland, which is outside the UK. Hosting, payments, email, and push notifications may be handled by providers that process some data outside the UK.
We keep team and player information while the account and team are in use.
If you delete your account, we delete the login straight away. If a child's profile is only linked to you and they are not on an active team, we anonymise that profile at the same time: the name is replaced, and the date of birth and photo are cleared. If the child is still on a team, the club's record stays with the team.
Retiring a team hides it from the app. It does not immediately wipe attendance, notes, awards, or match history. We aim to delete or anonymise personal data that is no longer needed after a team is retired. Database backups are held by Supabase and roll off on Supabase's schedule. We cannot promise a fixed number of days for those backups.
To ask about your data, contact shaun@theeleventh.co.uk.
The Eleventh is used by grassroots football clubs and holds data about children under 18. We collect what the team needs to run sessions and matches. We do not sell children's data or use it for advertising. Parents and guardians can ask to see, correct, or delete a child's data by contacting us.
The Eleventh does not perform or verify DBS (Disclosure and Barring Service) checks on coaches or staff. The club or team using The Eleventh is responsible for making sure adults who work with children have the checks they need.
Under UK GDPR you can:
Contact us at shaun@theeleventh.co.uk.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. Our ICO registration number is ZC267751.
Questions about this Privacy Policy can go to Shaun Holmes, sole trader, trading as The Eleventh at shaun@theeleventh.co.uk.
Last reviewed: 14 October 2026
All data is protected under our Safeguarding & Children's Data Notice.