Privacy policy

Privacy Policy

Last updated: 12 June 2026

Athlete Academy Ltd ("Athlete Academy", "we", "our", "us") is committed to protecting your privacy and handling personal data in line with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Irish data protection law. This policy explains how we collect, use, store and protect personal data when you engage with us through our website, our shop, social media, camps, Sunday Academy, one-to-one sessions and direct communications.

1. Who we are

Athlete Academy Ltd, registered in Ireland, is the data controller for the personal data described in this policy. Contact: info@athleteacademy.ie

2. What personal data we collect

We collect personal data directly from parents or guardians when they register interest, book a session, camp or Sunday Academy place, buy from our shop, contact us by WhatsApp, email or social media, join our mailing list, or take part in competitions and promotions.

Parent or guardian data: name, email address, phone number, and payment confirmation details.

Participant (athlete) data: name, age, playing position, and club or school where provided.

Order and shop data: items purchased, order history, delivery address (for apparel), and the player details entered at the time of a camp booking.

Technical data: IP address, device and browser information, and website usage data.

Where a camp booking requires medical, allergy or fitness information to keep a participant safe, we collect it at the point of booking as part of the participation declaration. We treat this information as confidential, restrict access to the coaches and organisers responsible for that camp, and retain it only for as long as needed for the camp before securely deleting it.

3. Children's data

Our services are for children and young people, generally aged 10 to 18, with specific age ranges per programme (for example, summer camps are for ages 10 to 15). All bookings and registrations must be made by a parent or legal guardian. We process a child's data only where necessary to deliver coaching safely, and on the basis of parental consent. We are committed to safeguarding the children in our care and to handling their data with particular care.

4. Lawful basis for processing

Under GDPR we rely on the following legal bases. Contract: to organise and deliver camps, Sunday Academy, sessions and shop orders you have booked or bought. Legitimate interests: to run and improve our operations, respond to enquiries, and keep our records accurate. Consent: for email marketing, WhatsApp marketing, promotional communications, use of photography and media, and non-essential cookies. You can withdraw consent at any time. Legal obligation: to comply with Irish tax, accounting and consumer protection law.

5. How we use your data

We use personal data to organise and deliver coaching, communicate booking details and reminders, process and confirm payments, build camp and session rosters, send updates about upcoming camps, Sunday Academy or offers where you have consented, improve our website and service, and administer competitions or promotions. We do not sell personal data.

6. Marketing communications

If you opt in, we may contact you by email or WhatsApp with updates about upcoming camps, Sunday Academy, sessions and related Athlete Academy services. Where you have previously bought from us, we may tell you about similar services in line with Irish ePrivacy rules. You can opt out at any time by clicking unsubscribe in any email, replying STOP to messages, or contacting info@athleteacademy.ie. We do not send unsolicited marketing and we do not sell personal data.

7. Who we share data with (processors)

We use a small number of trusted service providers to run our business. These act as our processors and handle data on our instructions: Shopify (our online store and payment processing through Shopify Payments; card details are handled securely by Shopify Payments and are not stored by us), Revolut Business (payment processing for one-to-one sessions), Mailchimp (email marketing), Google Workspace (secure storage of booking and roster records), and WhatsApp Business (parent communication and community). We share data with these providers only as needed to deliver our service, and with public authorities where we are legally required to do so.

Our store is hosted by Shopify. Shopify processes personal data to provide and improve the store, and processes some data for its own purposes as described in the Shopify Consumer Privacy Policy (www.shopify.com/legal/privacy/app-users).

8. International transfers

Some of our providers (including Shopify and Mailchimp) are based outside the European Economic Area, mainly in the United States. Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses or an equivalent approved mechanism.

9. Data storage and security

We store data using Shopify, Google Workspace and WhatsApp Business, and process payments through Shopify Payments and Revolut Business. We apply appropriate technical and organisational measures to protect personal data, and access is restricted to authorised people. If a data breach occurs that is likely to affect your rights, we will act in line with our legal obligations, including notifying the Data Protection Commission and affected individuals where required.

10. Data retention

We retain booking and payment records for 6 years to meet Irish accounting requirements, marketing data until you withdraw consent, and other data only for as long as it is needed for the purpose it was collected. When data is no longer required, it is securely deleted.

11. Your rights

Under GDPR you have the right to access your personal data, request correction, request deletion, restrict or object to processing, request data portability, and withdraw consent at any time. You also have the right to lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie). To exercise any of these rights, contact info@athleteacademy.ie.

12. Third-party links

Our website and communications may link to third-party sites such as Trustpilot, Instagram and WhatsApp. We are not responsible for the privacy practices of those sites, and we encourage you to review their own privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.