Privacy Notice - Sports Bug Jersey

Last updated: 29/08/2025

1. Who we are

We’ve been delivering sports coaching to the Islands youngsters for over 15 years and are proud to have been part of the start of so many children’s sporting journeys.

We work with children from 18 months old to 12 years and provide sports classes during term time as well as after and during school/nursery. We also offer sports holiday clubs.

Sports Bug Jersey is registered with the Jersey data protection authority, please see JOIC certificate as we collect and process data about you and your children in order to offer our sports classes. We determine why and how your personal data is processed.

2. How we collect your personal data

We collect your information in the following ways:

  • Through on-line booking forms
  • When you interact with our staff, both in person and on the telephone
  • When you email us
  • Through Facebook, Google Analytics / Ads (website activity, marketing tracking)
  • Customer forums

3. The types of information we collect

We may collect and process the following types of personal data when providing you with our services:

  • Your child’s name, gender and date of birth/age, school attended
  • Images of your child participating in classes where you have provided consent
  • Your name and contact details, such as email address, postal address or telephone number  
  • Details of your child’s medical conditions/disabilities for the purpose of participation in classes
  • Details of injuries if your child has had an accident when attending one of our classes.
  • Details of your child’s next of Kin / emergency contact
  • Financial details when you are making a payment for the classes you have signed your child up to
  • Details of your income support eligibility so that a discount can be applied
  • Information you disclose from your interactions with us, either electronically or in person.
  • The comments you leave about your child’s experience when you rate our service via Facebook, Bookeo, Google
  • You IP address which is collected when you book our classes, or when you interact with us via Facebook and Google if you have given your consent

The information we collect about your child is usually provided to us by you when you book them into one of our classes.  

We will always ensure that your child’s information is kept secure and that it is not knowingly shared with anyone else, unless there is a legal requirement for us to do so (eg: for safeguarding purposes) or where you have given your consent for it to be shared.

4. Why we collect personal data

We collect your personal data and that of your child in order to:

  • Provide sports classes and activities that you have signed your child up to
  • Understand any special needs that your child may have in order to participate in our sports classes
  • To personalise or tailor any marketing communications that you may have consented to receive from us
  • Collect details of any accidents that may have occurred during your child’s attendance at one of our classes
  • Communicate with you about your booking or your child
  • Respond to your enquiry or complaint
  • Process payments for sports bookings

5. Who we share your data with

We will only share the personal data we hold where:

  • Where you have consented for it to be shared (for example, where you have consented to promotional images of your child to be taken and used in publications or on our Facebook or Website)

6. Third Party data processors

We use a number of  third‑party services to process data for us, these include:

  • Bookeo – who provide us with our booking system
  • Airtable – is a data base that stores our bookings and customer data
  • Mailchimp – who provide a marketing email platform for us
  • MailerSend – who facilitate the provision of instructions and details about our classes
  • Salespie – who manage, support and update our systems and their interactions with other platforms, and our website.
  • N8N – who we use to ensure that our systems interact correctly with one another
  • Softr – which is an online register used for viewing customer data relating to our after school sessions
  • Elavon – our payment gateway and processor
  • Xero – used to process our invoices payments
  • Facebook – who we use as a communication and marketing tool
  • Google – who we use for search engine optimisation and marketing

Each processor operates under GDPR‑equivalent terms and only processes data as per our instructions.

7. Cookies and tracking

We use Cookiebot to:

  • Block non-essential cookies (e.g. marketing, analytics) until consent is given
  • Scan cookies daily and keep a cookie declaration
  • Log user consent with timestamp for compliance

8. Data retention

We retain personal data for as long as needed to fulfill the purpose:

  • Booking data: (including detail of your child’s medical conditions / disability, and your financial details, etc): 6 years after your child has stopped participating in our classes, or sooner if you withdraw your consent for us to continue to process this information. In rare circumstances we may be required to keep your information for a longer period if there is a legal requirement for us to retain it.
  • Accident book entries: 6 years after your child has stopped participating in our classes, or sooner if you withdraw your consent for us to process this information
  • Income support eligibility data: 6 years after your child has stopped participating in our classes, or sooner if you withdraw your consent for us to process this information
  • Images of your child: 5 years after your child has stopped participating in our classes, or sooner if you withdraw your consent for us to continue to process this information
  • Customer review data: 6 years after your child has stopped participating in our classes, or sooner if you withdraw your consent for us to continue to process this information
  • Marketing email data: until consent is withdrawn
  • Analytics: are aggregated and anonymised after 26 months

9. Your data protection rights

Under the Data Protection (Jersey) Law 2018, you have the right to:

  • Request access to your personal data
  • Ask for correction, limitation or deletion of your data
  • Withdraw consent (e.g., from marketing emails or cookies)
  • Object to processing based on legitimate interest
  • Ask for your data to be transferred to another organisation

To exercise these rights, contact us at Contact. We respond within 30 days.

10. International data transfers

We use data processors that process your data outside Jersey or the EEA, however we ensure that all of your data is protected by appropriate safeguards, such as standard contractual clauses.

11. Security

In order to ensure that your personal information is protected from unauthorised access, alteration, disclosure, or destruction, we implement suitable technical and organisational measures.  We only use data processors who can also demonstrate appropriate technical and security measures are in place.

12. Complaints or questions

If you have a concern about how we process your data, please contact us. You also have the right to contact:
The Jersey Data Protection Authority
PO Box 449, St Helier, JE4 8YP
Email: enquiries@jerseyoic.org
Phone: +44 (0)1534 716530

13. Changes to this Privacy Notice

We may update this notice to reflect changes in our data processing or legal requirements. The current version will always be available on our website.