Privacy Policy

Island City Elite Football Academy ("Island City", "we", "us" or "our") is committed to protecting the personal data of players, parents, guardians, and visitors to islandcityelite.com.sg (the "Site") in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA"). This Privacy Policy explains what personal data we collect, how we use it, and the choices you have.

1. Personal Data We Collect

We collect personal data that you provide directly to us, including:

• Parent/guardian name, email address, and mobile (WhatsApp) number, submitted through our assessment enquiry form.
• Player name and programme interest, submitted through the same form.
• Any additional information you choose to share with us in the "message" field or in correspondence (e.g. medical conditions, scheduling notes).
• If you are granted access to our Members Area, account credentials, attendance records, payment and invoicing information, and individual player development records.
• Technical information collected automatically when you browse the Site, such as IP address, browser type, and pages visited, for the purpose of operating and improving the Site.

2. How We Use Your Personal Data

We use personal data to:

• Respond to assessment and programme enquiries, and arrange player assessments;
• Administer enrolment, attendance, fee invoicing and payment collection;
• Communicate with parents and guardians about schedules, venue changes, and club announcements;
• Prepare individual player development plans, assessments, and feedback;
• Operate and secure the Members Area for parents, players, admins and coaches;
• Comply with our legal and regulatory obligations; and
• Improve the Site and our Programmes.

We do not use your personal data for purposes unrelated to the above without obtaining your consent, unless required or permitted by law.

3. Legal Basis for Processing

We collect and use personal data on the basis of your consent (given when you submit our forms or enrol a player), and where necessary to perform our obligations to you under the enrolment agreement, or to comply with applicable law.

4. Cookies and Third-Party Embeds

The Site may use essential cookies required for basic functionality. We do not currently use third-party advertising or tracking cookies. Some pages include third-party content — for example an embedded Google Map on our Contact page and web fonts loaded from Google Fonts — and your browser's request to those services will disclose your IP address to the relevant provider, which processes it under its own privacy policy. If our use of cookies or third-party services changes, this Policy will be updated accordingly and, where required, your consent will be obtained.

5. Disclosure of Personal Data

We do not sell your personal data. We may share personal data with:

• Coaching staff and administrators, strictly for the purpose of delivering the Programmes;
• Service providers who support our operations (e.g. payment processing, form submission handling, messaging via WhatsApp, and Members Area/portal hosting), who are bound by confidentiality and data protection obligations;
• Regulatory or governmental authorities, where required by law.

6. Overseas Transfer of Personal Data

Some of the service providers we rely on — such as our enquiry-form handling, website and portal hosting, and messaging via WhatsApp — may store or process personal data on servers located outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure that the receiving party provides a standard of protection comparable to that required under the PDPA, in accordance with the Transfer Limitation Obligation.

7. Photography and Media

Photographs and videos of players taken during training sessions, assessments, or events may be used on the Site and our social media channels for promotional purposes. If you do not wish your child to be included, please notify us at contactus@islandcityelite.com.sg and we will honour your request going forward.

8. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including for as long as a player is enrolled, and thereafter as required to meet legal, accounting, or regulatory obligations, after which it is securely deleted or anonymised.

9. Data Security and Breach Notification

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Access to Members Area accounts and player records is restricted to authorised staff. In the event of a data breach that is likely to result in significant harm to affected individuals, or that is of a significant scale, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with the Data Breach Notification Obligation under the PDPA.

10. Your Rights

Under the PDPA, you may:

• Request access to the personal data we hold about you or your child;
• Request correction of inaccurate or incomplete personal data;
• Withdraw consent to our collection, use, or disclosure of personal data, subject to legal or contractual restrictions; and
• Ask us to stop using your data for a specific purpose (e.g. photography, marketing communications).

To exercise any of these rights, contact us using the details below. We may need to verify your identity before processing your request.

11. Children's Data

Our Programmes are designed for minors, and personal data relating to players is provided and managed by their parent or legal guardian. We do not knowingly collect personal data directly from children without parental involvement.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be notified through the Site or directly to affected users where appropriate.

13. Data Protection Officer

We have designated a Data Protection Officer (DPO) responsible for overseeing our compliance with the PDPA. You may contact our DPO on any matter relating to your personal data or this Policy:

• Data Protection Officer: [DPO name — to be appointed]
• Email: dpo@islandcityelite.com.sg
• Post: 160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914

14. Contact Us / Data Protection Queries

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at contactus@islandcityelite.com.sg or write to us at 160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914.