Our Commitment
Protecting Personal Information
Flag Frenzy Football Ltd respects the privacy of children, parents, guardians, volunteers and other people who interact with Flag Frenzy Football Camp.
This Privacy Policy explains what personal information we may collect, why we collect it, how we use and protect it, when it may be shared and the rights individuals have in relation to their personal information.
We aim to collect only the information reasonably needed to operate the camp, communicate with families, support children's safe participation, manage enquiries, registrations and payments, meet our responsibilities and run Flag Frenzy Football Ltd.
01
Who We Are & Who Controls Your Data
Flag Frenzy Football Ltd is the data controller responsible for personal information covered by this Privacy Policy.
Flag Frenzy Football Ltd
Company number: 16566783
Registered in: England & Wales
Registered office: 128 City Road, London, EC1V 2NX
Email: info@flagfrenzyfootball.co.uk
Phone: 07481 029204
References in this policy to “Flag Frenzy”, “we”, “us” or “our” mean Flag Frenzy Football Ltd, including the operation of Flag Frenzy Football Camp.
02
Information We May Collect
The personal information we collect depends on how someone interacts with us.
Parents, guardians and other adults
We may collect information such as:
- Name and contact details.
- Email address and telephone number.
- Emergency contact information.
- Relationship to a child.
- Information included in enquiries, correspondence or forms.
- Registration and booking information.
- Records relating to payments, refunds and transactions processed through Stripe.
- Communication and marketing preferences.
Children
Where a child is registered to attend camp, we may collect information such as:
- Name.
- Date of birth or age.
- Information needed to place them appropriately within camp.
- Emergency contact and authorised collection information.
- Relevant medical conditions, allergies and medication.
- Disability, SEND or additional support information where relevant.
- Relevant behavioural, communication or participation needs.
- Accident, injury, medical, safeguarding or incident information where necessary.
- Attendance information.
Volunteers and people helping at camp
Where relevant, we may collect information including:
- Name and contact details.
- Age or date of birth where relevant.
- Experience, availability and role-related information.
- Information required for safeguarding or suitability checks where applicable.
- Emergency contact information.
03
How We Collect Personal Information
Most personal information is provided directly to us.
This may happen when someone:
- Completes a Register Your Interest form.
- Completes a camp registration form.
- Completes a volunteer interest or other website form.
- Contacts us by email, telephone or another communication method.
- Makes, changes or cancels a camp booking.
- Makes a payment through Stripe as part of the registration and booking process.
- Provides information to us before or during camp.
- Reports an accident, incident, medical matter or safeguarding concern.
Register Your Interest: submitting our Register Your Interest form is not the same as registering or booking a child for camp and does not reserve a place or require payment. More detailed information, including relevant health and medical information, is requested through the full camp registration process when a parent or guardian chooses to register a child.
04
How We Use Personal Information
Depending on the circumstances, we may use personal information to:
- Respond to enquiries and expressions of interest.
- Manage camp registrations, bookings and attendance.
- Communicate important camp information to parents and guardians.
- Manage emergency contacts and authorised collection arrangements.
- Help assess and support a child's safe participation at camp.
- Manage relevant medical conditions, allergies, medication, disabilities or additional needs.
- Respond to accidents, injuries, illnesses and emergencies.
- Manage safeguarding concerns and children's welfare.
- Manage behaviour, incidents and complaints.
- Administer bookings, payments, cancellations, credits and refunds, including payments processed securely through Stripe.
- Recruit and communicate with volunteers or helpers.
- Maintain appropriate business, insurance, safeguarding and operational records.
- Comply with legal and regulatory responsibilities.
- Protect our legal rights or respond to legal claims.
- Send marketing communications where we have an appropriate basis to do so.
05
Our Lawful Bases for Using Personal Information
UK data protection law requires us to have a lawful basis for processing personal information. The basis we rely on depends on what information we are using and why.
Contract
We may process information where it is necessary to take steps at someone's request before entering into a contract or to perform a contract, including administering a camp registration, confirmed booking and associated payment.
Legitimate interests
We may process information where it is necessary for our legitimate interests or those of another person, provided those interests are not overridden by the individual's rights and interests.
These interests may include operating and improving the camp, responding to enquiries, communicating with families, maintaining appropriate records, protecting our organisation and supporting safe camp operations.
Legal obligation
We may use or retain information where necessary to comply with a legal obligation.
Vital interests
In an emergency, personal information may be used where this is necessary to protect someone's life or vital interests.
Consent
We may rely on consent where an individual has been given a genuine choice and has clearly agreed to a particular use of their information. Where consent is relied upon, it may be withdrawn at any time, although this does not affect processing that was lawful before withdrawal.
06
Health, Medical & Other Special Category Information
When a parent or guardian completes our camp registration form, we ask for relevant health and medical information about their child where this is needed to help us understand and support their safe participation at camp.
This may include information about medical conditions, allergies, medication, disabilities, additional needs or other information relevant to the child's health, safety or participation.
We use this information to help assess and support the child's safe participation at camp, make appropriate arrangements and respond to medical situations or emergencies.
Information concerning health is classed as special category personal data under UK data protection law. Special category data requires both an appropriate lawful basis and an additional legal condition for processing.
Explicit consent: where we rely on explicit consent to process health or medical information supplied through the registration process, the parent or guardian providing the information will be asked to expressly agree to that processing for the stated purposes.
Consent to the processing of health information is kept separate from unrelated marketing choices.
In some circumstances, another legal condition may apply to particular processing, for example where information must be used in a genuine emergency to protect someone's vital interests or where processing is required for another specific lawful purpose.
Further information about how health and medical needs are handled at camp is available in our Medical & Inclusion Policy .
07
Payments & Stripe
Flag Frenzy Football Ltd uses Stripe to process payments connected with camp registrations and bookings.
When a payment is made through the registration and booking process, payment information is submitted to and processed by Stripe. We may receive information relating to the transaction, such as payment status, transaction reference, amount paid and information needed to administer the booking, payment, refund or related enquiry.
Flag Frenzy Football Ltd does not receive or store full payment card details itself. Card and payment information entered into Stripe's payment service is handled by Stripe in accordance with its own privacy and security practices.
Stripe may process personal information for purposes connected with providing its payment services, preventing fraud, maintaining security and complying with its own legal and regulatory obligations.
More information about how Stripe handles personal information is available in Stripe's Privacy Policy .
08
Children's Privacy
Flag Frenzy Football Camp works with children, so some of the personal information we hold relates directly to children.
We recognise that children's personal information requires particular care. We aim to collect only information that is reasonably necessary for the relevant purpose and to use it fairly, appropriately and with children's safety and privacy in mind.
Registration information about a child will normally be supplied by their parent or guardian.
Children may also provide information directly to staff during camp, particularly where they need help, report an incident, disclose a concern or speak to us about their wellbeing.
Where a child tells us something that raises a safeguarding concern, their safety and welfare will take priority. Information may need to be recorded or shared with appropriate people or organisations in accordance with our safeguarding responsibilities.
10
Marketing & Camp Updates
We may contact people about future Flag Frenzy Football activities, camps or related opportunities where we have an appropriate legal basis to do so.
Where consent is required for electronic marketing, we will ask for it separately. Marketing consent is not required simply to submit a camp enquiry or register a child for camp.
A person can ask us to stop sending direct marketing at any time by using any unsubscribe option provided or by contacting us at info@flagfrenzyfootball.co.uk .
Important operational communications about an enquiry, registration, booking, payment, attendance, safety or camp arrangements are not treated as marketing merely because they are sent by email or another electronic method.
11
Website, Forms & Cookies
When someone uses our website or submits an online form, technical information may be processed as part of providing and securing the website and transmitting the information submitted.
Our website or the services used to operate it may use cookies or similar technologies where these are necessary for website functionality, security or other permitted purposes.
If we introduce non-essential analytics, advertising or similar technologies that require consent, we will provide appropriate information and consent choices before using them where required.
Third-party websites or services linked from our website operate under their own privacy practices. We encourage users to review those privacy notices where appropriate.
12
International Data Transfers
Some technology or service providers we use, including Stripe, may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection requirements.
Depending on the provider and destination, this may involve an adequacy arrangement or appropriate contractual and other safeguards.
13
How Long We Keep Information
We do not intend to keep personal information for longer than is reasonably necessary for the purpose for which it was collected.
Different types of information may need to be kept for different periods depending on factors such as:
- The reason the information was collected.
- Whether the information remains necessary for camp operations or follow-up.
- Safeguarding and child-welfare considerations.
- Insurance requirements.
- Accounting and tax requirements.
- Payment and transaction record requirements.
- Legal claims or limitation periods.
- Other legal or regulatory record-keeping requirements.
When information is no longer required, we will aim to delete, securely dispose of or anonymise it as appropriate.
Stripe may retain information it processes in accordance with its own legal obligations and retention practices.
14
Keeping Personal Information Secure
We take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Measures may include limiting access to people who need information for their role, using password-protected systems, applying appropriate access controls and handling sensitive information carefully.
People who have access to children's or families' personal information as part of their role are expected to respect its confidentiality and use it only for appropriate purposes.
Payment card information is processed through Stripe rather than being stored directly by Flag Frenzy Football Ltd.
If a personal-data breach occurs, we will assess it and take appropriate action in accordance with applicable data protection requirements.
15
Your Data Protection Rights
Depending on the circumstances and the legal basis for processing, individuals may have rights under UK data protection law in relation to their personal information.
These may include the right to:
- Be informed about how personal information is used.
- Request access to personal information held about them.
- Request correction of inaccurate or incomplete personal information.
- Request erasure of personal information in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to certain processing, including direct marketing.
- Request data portability where the legal requirements for that right apply.
- Withdraw consent where processing is based on consent.
- Raise concerns about how personal information has been handled.
These rights are not absolute in every situation. Whether a particular right applies can depend on the information involved, why it is being processed and the lawful basis relied upon.
Parents or guardians may contact us about personal information relating to their child. As children develop sufficient understanding, data protection rights may also belong to and be exercised by the child themselves.
We may need to verify identity or authority before responding to a request where this is necessary to protect personal information.
16
Questions, Requests & Complaints
If you have a question about this Privacy Policy, want to exercise a data protection right or have concerns about how personal information has been handled, please contact us.
Flag Frenzy Football Ltd
Email: info@flagfrenzyfootball.co.uk
Phone: 07481 029204
Registered office: 128 City Road, London, EC1V 2NX
Information Commissioner's Office
Individuals also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
We would appreciate the opportunity to address a concern directly where appropriate, but contacting us first does not remove the right to complain to the ICO.
ICO information and contact details are available at ico.org.uk .
17
Changes to This Privacy Policy
This Privacy Policy was last reviewed in September 2026 and will be reviewed at least annually, or sooner where changes to our activities, forms, systems, service providers or legal obligations make an earlier review appropriate.
We may update this policy as Flag Frenzy Football Camp develops, including when our registration, booking, payment, website or other operational systems change or new service providers are introduced.
Where a change materially affects how existing personal information is used, we will take appropriate steps to communicate that change where required.
Policy owner: Director, Flag Frenzy Football Ltd.
Camp Policies