Privacy Policy

01 Introduction and Scope

We are The Angutsa Football Championship. We handle personal information collected through our website and in connection with Championship activities.

Responsible organisation: The Angutsa Championship. Read this notice with our Terms & Conditions.

02 Information You Enter

When you create an account, register a team or player, or take part in a competition, we collect information needed to provide those services. This may include:

• Team information: team name and category, a submitted team logo, registration status, squad information, and relevant competition documents.
• Manager and official information: name, telephone number, email address if provided, team role, and communications with organisers.
• Player information: name and basic registration details, team affiliation, shirt number or playing position where required, eligibility details specified by official rules, and guardian or consent information where legally necessary.
• Competition information: fixtures, match participation, confirmed results, and relevant disciplinary decisions.
• Payment and transaction information: payment method, amount, date, transaction reference, and payment status when needed to administer fees and reconcile payments. We do not ask for your card security code, mobile-money PIN, or banking password.
• Account and technical information: account email address, authentication and security records, device and browser details, IP address, and service logs needed to operate and protect the website.

We collect sensitive information only where it is necessary for a lawful Championship purpose, explain the reason when we request it, and apply appropriate safeguards.

03 How Information Is Collected

You provide information when you create or update an account, submit a team or player registration, contact us, or participate in Championship activities. We also receive information from authorised Team Managers, Match Officials, and other people involved in administering a competition.

Our account service uses Firebase Authentication to create and secure accounts. Our backend processes registration and competition information. Brevo processes email addresses and message details to send account, registration, and Championship service communications on our behalf. These service providers process information only to provide their services and under appropriate contractual and security safeguards.

If you provide another person's information, you must have authority or another lawful basis to do so. For a child, obtain parent or legal guardian consent where required by law.

04 Why We Use Personal Information

We use personal information to create and secure accounts; process Team and Player registrations; check eligibility; administer fixtures, results, standings, and payments; communicate account and competition updates; respond to questions and complaints; protect our services; prevent fraud or rule breaches; and meet legal obligations.

We use information only for these purposes or another purpose allowed by law. The lawful basis depends on the activity; we do not rely on consent for every use.

05 Legal Basis for Processing

Kenyan data-protection law requires a lawful basis for each use of personal information. Depending on the activity, that basis can be your consent, steps you ask us to take before an agreement, an agreement with you, a legal obligation, or our legitimate interests where the law allows it and we protect your rights.

When we rely on consent, we explain the purpose and ask for your agreement. You can withdraw consent at any time; this does not make earlier lawful processing unlawful.

06 Public Information and Competition Results

We publish competition information such as team names, approved public squad listings, fixtures, match results, standings, announcements, and official disciplinary outcomes when publication is lawful and appropriate for the competition.

We do not publish private telephone numbers, home addresses, identity-document details, guardian contact details, or other unnecessary personal information. We take particular care with information about minors and publish it only when we have a lawful basis and any required permissions.

08 Photography, Video, and Media

We create photographs, video footage, match reports, and other media for Championship communication or promotion only when we have a lawful basis and any permissions the law requires. Taking an image and publishing it are separate uses, and we obtain any required permission before publication.

We take particular care with identifiable images of minors and respect each person's privacy and dignity. We do not claim unrestricted rights over your image. You or your guardian can raise a concern through our official contact process. We review requests to remove or correct content, but cannot control copies on third-party platforms or lawful public records.

09 When We Share Personal Information

We share information when necessary to run the Championship, including with authorised administrators, relevant Team Managers and Match Officials, and service providers who support account authentication, website and backend operations, and email delivery. We also share information with public authorities when the law requires it or when disclosure is otherwise lawful.

Firebase Authentication processes account credentials and authentication records to provide secure sign-in. Our Cloudflare-hosted backend processes account-related requests, registrations, and competition records. Brevo processes recipient email addresses and message content or delivery details to send service emails. We do not sell personal information. We require service providers to protect information and use it only to provide services to us.

Our website also loads typefaces from Google Fonts. When your browser requests those files, Google receives the request and associated technical information, such as your IP address.

10 Payment Information

We use payment and transaction information to confirm entry fees and reconcile payments. Payments are made through the payment channel identified in the relevant competition or registration information.

We do not ask you to send us payment-card security codes, mobile-money PINs, or banking passwords. Do not share these credentials with Championship staff.

11 Data Storage and Security

We protect personal information using technical and organisational safeguards appropriate to its sensitivity, including access controls, secure transmission, account authentication, and procedures for handling and recovering information. Access is limited to people and service providers who need it for their responsibilities.

We regularly review these safeguards and take reasonable steps to prevent unauthorised access, alteration, disclosure, loss, or misuse. No online service can be guaranteed completely secure.

12 Data Retention and Deletion

We retain personal information only for as long as necessary for the purpose for which we collected it, including administering the competition, resolving disputes, safeguarding participants, maintaining financial records, and meeting legal requirements. Retention periods vary by record type and applicable legal obligations.

When information is no longer required, we securely delete it or remove identifying details, unless the law requires us to retain it.

13 Your Privacy Rights

Kenyan data-protection law gives you rights that may include the right to know how we use your information, request access or correction, request deletion where the law allows, object to or restrict certain uses, withdraw consent when we rely on it, and complain to the relevant authority.

To exercise a right, contact us using the details below. We may verify your identity and respond within the time and limits set by law. Some rights are subject to legal conditions or exceptions.

14 Cookies and Technical Data

Our website uses essential browser storage and similar technologies to support sign-in, maintain security, and provide core website functions. We use analytics or marketing technologies only where enabled and in accordance with applicable consent requirements.

Our pages load fonts from Google Fonts as described above. Your browser may also receive cookies or security-related technical data from the services that operate the website.

15 External Websites and Third-Party Services

Our Website links to external websites and uses service providers to operate accounts, the backend, and email delivery. When you follow an external link, that service's privacy notice applies to its processing. We remain responsible for our own obligations under the law.

16 International Data Transfers

Our service providers may process information in countries outside Kenya. Where an international transfer occurs, we use the safeguards and legal measures required by Kenyan data-protection law to protect your information.

17 Data Breaches and Privacy Concerns

Report a suspected privacy incident using the contact details below. We investigate suspected incidents, take reasonable steps to limit their effects, and notify affected people or relevant authorities when required by law.

18 Changes to This Privacy Policy

We update this notice when our information practices or legal obligations change. We show the effective and last-updated dates at the top of this page and communicate material changes through an official channel when the law requires it.