Privacy Policy

Introduction

First Responder Soccer Academy (“FRSA”, “we”, “us”) is committed to protecting the privacy of our members, players, coaches, volunteers and website visitors, in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy explains what personal information we collect, why, how we use and protect it, and the rights you have over it. FRSA provides wellbeing-related services to first responders and, where members choose to share health-related information (e.g. wellbeing check-ins, medical/welfare notes), we treat that as sensitive information and apply the extra protections described below regardless of our size or turnover.

What we collect

• Identity & contact details: full name, date of birth, email, phone, address, emergency contact.
• Service/role details: agency (Police, Fire and Rescue, Ambulance, SES, Marine Rescue, Border Force, Defence Force, Nurses etc.), team, role (player, captain, vice-captain, coach, staff), squad number.
• Sensitive information (collected only with your consent): wellbeing check-in responses (sleep, injury/pain, feeling supported, requests for someone to check in with you), welfare/medical and dietary notes you choose to add to your profile.
• Match & competition data: results, stats, availability responses, rankings.
• Incident and support records: incident reports, support/help tickets, moderation reports you or others file.
• Communications: team chat, match chat, direct messages, announcements, survey/feedback responses.
• Files you upload: documents, team badges, profile/community photos.
• Technical data: device/browser type, pages visited, approximate usage patterns. Basic aggregate page-load logging is built into our hosting platform (Lovable), runs before the page loads as part of operating and securing the service, cannot be disabled, and is not shared outside FRSA and Lovable. Any optional analytics we may introduce in future would be off by default and only run with your consent, via Cookie Preferences.

Why we collect it

To register and manage your membership and team; run the competition (fixtures, results, rankings); support player wellbeing and duty of care; enable team communication; respond to incidents and support requests; keep the platform secure; and improve the service. We only collect sensitive information (like wellbeing/medical notes) where you choose to provide it, and we don’t require it to use the core platform.

How wellbeing data is protected

Wellbeing check-in responses are visible only to your own team’s Captain/Vice-Captain/Coach and Super Admins, never to other players. Any statistics shown to a manager are suppressed (not shown) if fewer than 5 people have responded, so no individual can be identified from a group figure. Free-text notes you write are never included in any aggregate report, export or summary. You can always decline to answer wellbeing questions.

Who we share it with

We do not sell your personal information. We share it only with: the service providers that host and run the platform (Supabase for database/authentication/file storage, Lovable for application hosting) under contractual confidentiality obligations; your own team’s leads and Super Admins, to the extent described above; and where required by law. Some of our service providers may store data on servers located outside Australia; by using the platform you acknowledge this cross-border storage.

Data security

We use role-based access control and row-level security so people can only see the data they’re authorised to see, encrypted connections (HTTPS) for all traffic, and access logging on admin actions. No system is 100% secure, but we take reasonable technical and organisational steps to protect your information from misuse, loss and unauthorised access.

Data retention

We keep personal information only as long as needed for the purposes above, or as required by law, and delete or de-identify it when it’s no longer needed. You can request deletion of your account at any time (see “Your rights” below).

Your rights

You can ask to access, correct or delete the personal information we hold about you, and withdraw consent for optional data (like wellbeing notes) at any time, by contacting us (details below). If you’re unhappy with how we’ve handled your information, you can lodge a complaint with us first, and if unresolved, with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Data breaches

If we experience a data breach likely to result in serious harm, we will notify affected individuals and the OAIC in line with the Notifiable Data Breaches scheme.

Children

FRSA is intended for adult first responders (18+) and is not directed at children.

Changes to this policy

We may update this policy from time to time; the “last updated” date at the top will always reflect the current version. Continued use of the platform after a change means you accept the updated policy.

Contact us

For any privacy question, access/correction/deletion request, or complaint: privacy@firstrespondersoccersacademy.com