Privacy policy
Last updated October 2026. Football Reach is operated by Apps 365 Ltd (United Kingdom), the data controller. In plain terms: we ask for as little as possible, we never sell your data, and you can delete it yourself at any time.
The short version
- Your free score needs no account. Email is optional - give one only if you want a link to your result. Marketing emails are a separate box you can leave unticked.
- We use your answers only to build your score and plan - nothing else.
- We never sell your data and never share it for anyone else's advertising.
- Free results are automatically deleted after 30 days. You can delete anything yourself, instantly.
What we collect
- Your assessment answers (age, position, level, self-ratings and so on) so we can calculate your score and build your plan. These are your own opinions of your game, not medical records.
- An email address, only if you choose to give one: on the free assessment (optional) to send you a link to your result - plus, only if you tick the separate box, up to three follow-up emails with tips and offers - or when you unlock a plan or start the Progress Tracker (receipt, plan link, magic-link sign-in, reminders). You can always take the free score without one.
- An optional first name, only if you type one, used to personalise your plan.
- A one-way hashed form of your IP address for abuse prevention. We never store your raw IP address.
- Payment records (amount, date, Stripe reference) if you buy. Card details are handled entirely by Stripe; we never see or store them.
- Basic ad-measurement events using a first-party cookie, so we can tell which of our own links brought you here. This is not third-party tracking and is not shared.
Lawful basis
We process your answers to provide the service you asked for (performance of a contract, and your consent). If you give your email on the free assessment, we send the link to your result because you asked for it; this does not sign you up to anything. We send follow-up marketing emails (tips and offers for the paid plan) only if you tick the separate, unticked box, on the basis of your consent; we record when you ticked it and the exact wording you saw, and you can withdraw at any time with the one-click unsubscribe in every such email. We process the hashed IP and first-party ad measurement under our legitimate interests in preventing abuse and understanding which of our links work. Payment data is processed to meet our legal and contractual obligations.
Who we share it with
We use a small number of trusted providers who process data on our instructions only, never for their own purposes: Stripe (payments), Postmark (sending email), and our UK/EU hosting and CDN providers (running the site). We do not sell your data or share it for advertising.
How long we keep it
- Free results: automatically deleted 30 days after you take them. Their ad-measurement events are stripped of anything that links them to you, leaving only anonymous campaign counts.
- Unlocked plans: kept so you can return to your private link - yours to keep. Deleted whenever you ask, or with the "delete this result" button on the page.
- Progress Tracker: your score history is kept while you are subscribed and for about 6 months after you cancel, then deleted.
- Payment records: the minimal record of a purchase (amount, date, Stripe reference, no card details) is held by our payment processor (Stripe) and in our accounts for 6 years to meet UK tax law. When you erase your data we remove it from Football Reach; only that legally required transaction record remains, with Stripe and our accountant.
- Hashed IP / abuse data: short-lived, and removed with the assessment it belongs to.
Your choices and rights
You are in control of your data:
- Delete a single result yourself using the "delete this result" link on any result page.
- Delete everything - if you use the Progress Tracker, the "delete my account and all data" button in your dashboard erases your whole history (and cancels any subscription first).
- Stop marketing emails - every marketing email has a one-click unsubscribe, and opting out stops all future ones to your address.
- Ask us - email hello@footballreach.com and we will erase your data for you.
Under UK GDPR you can request access to, correction of, or deletion of your personal data, and object to or restrict processing. If you are unhappy with how we use your data, you can complain to us (see Complaints below) and to the Information Commission (the ICO) at ico.org.uk.
Children and young players
These are the age rules for each part of Football Reach:
- The assessment is for players aged 8 to 30. If the player is under 16, a parent or guardian fills it in with them and is the one who gives any email address and makes any payment. The form asks who is filling it in.
- The Progress Tracker, directory enquiries, quote requests and reviews are for people aged 16 and over. For a younger player, a parent or guardian sends them.
- Business (provider) accounts - claiming or adding a listing - are for people aged 18 and over who are authorised to act for the business.
- Advertising: we never load advertising cookies or send conversion data for a player under 18.
In line with the ICO's Age Appropriate Design Code we keep data to a minimum, keep it only briefly and write this notice in plain language. We never require a real name for the free score.
Cookies
We use an essential session cookie to keep the site secure (for example, to protect forms), and a first-party cookie to measure which of our own links brought you here. We do not use third-party advertising cookies unless you explicitly opt in.
When you choose Accept or Decline in our cookie banner, we keep a record of that choice: the date and time, which version of the banner you saw, and a scrambled form of your IP address (never the address itself). We keep it for 12 months, because the law requires us to be able to show we asked you properly, then delete it. Whatever the cookie choice, we never load advertising cookies on the result or plan of a player under 18.
Football Reach Drills in ChatGPT
You can ask ChatGPT for a practice plan or drills from Football Reach Drills, our plugin for ChatGPT. It works without an account and without your name or email.
- What ChatGPT sends us: only what is needed to answer - the player's age, what to work on, the session length, who is training and whether there is a wall, or the drill words you searched for. We use them to pick drills and send the answer back, and we do not store them.
- An anonymous ChatGPT user code: ChatGPT also sends a code that stands for your ChatGPT account without naming you. We scramble it (a one-way hash) to limit how many requests one person can make in an hour, and delete it within a day.
- Our logs: we record which tool ran, how long it took and whether it worked - never the answers you gave.
- Links: links in the answer carry a tag so we can count visits that came from ChatGPT. The tag holds no personal data.
- Your conversation with ChatGPT is handled by OpenAI under its own privacy policy. We never see your chat, only the details above.
The plugin is for parents, coaches and players aged 13 and over (ChatGPT's own minimum age). Younger players should use it with a parent.
Our football services directory
Separately from the assessment, we run a directory of football services (clubs, academies, coaches and similar). If your business is listed there, the next section, If your business is listed on Football Reach, is your notice under Article 14 of the UK GDPR.
- If you send an enquiry or a quote request: before you send, the form tells you who will receive it. We pass your name, email and anything you add (phone, player's age, postcode, message) to that provider: either the person who manages the listing, or, for a listing nobody has claimed, the email address the business publishes. We keep a copy, and a record of whether it was sent, delivered and replied to, to run and improve the service, and email you a copy of where it went. We cannot make a provider reply. If we have no way to reach a provider, we do not take your enquiry.
If your business is listed on Football Reach
This part is for the businesses, clubs and coaches in our directory, and for anyone named in a listing. We did not get these details from you directly, so this is our notice to you under Article 14 of the UK GDPR.
Who we are
Football Reach is run by Apps 365 Ltd, a company registered in England and Wales (company number 13955007), registered office 20-22 Wenlock Road, London, N1 7GU. We decide how the directory's details are used (we are the controller). Contact us at hello@footballreach.com.
What we hold
For each listed business: its name, address, phone number, email address and website, the services it offers and the ages it works with, and public ratings (for example its Google rating and number of reviews, with the date we recorded them). The listing itself is public: anyone can see it on footballreach.com. Some of these details are personal data, for example when the business is a sole trader or a coach working under their own name.
When a listing has no email address, we may write to the contact address the business publishes on its own website (for example its info@ address). We use it only to contact the business about its listing, and it is not added to the public listing.
Where the details come from
- the business's own website and its other public listings;
- map listings, gathered for us through a data service;
- Companies House;
- the charity registers (the Charity Commission for England and Wales, and the Scottish Charity Regulator).
We record where each detail came from and when. The "your listing and your data" page shows this for your listing.
Why we use them
- to show the listing to families looking for football services;
- to pass on the enquiries parents send through the listing: to the person who manages it or, if nobody does, a limited number to the email address the business publishes (these emails are not marketing);
- to contact businesses about managing their listing;
- for companies, and for providers who claimed their listing and did not opt out, to tell them about our optional paid placement.
To decide which businesses to contact first, we look at facts such as the category, the area, whether parents have sent enquiries and whether the business is a company. A person approves every contact: nothing is decided about you by a computer alone. We send a marketing email to a business that has not dealt with us before only if it is a company. Before we phone a business, we check its number against the Telephone Preference Service lists, and we never make automated calls to anyone who has not asked for one.
Our lawful basis
Legitimate interests (UK GDPR Article 6(1)(f)): running an accurate directory that helps families find local football services, passing on their enquiries, and telling businesses about our services. We have weighed these interests against yours in a written legitimate interests assessment, which we keep on file.
How long we keep them
- listing details: for as long as the business is listed;
- our outreach emails and the replies to them: 12 months after the last contact, then deleted;
- notes of our calls and follow-ups: 12 months after the follow-up is closed, then deleted;
- calls with our phone assistant: no recording is kept; the transcript is deleted after 90 days and the call's summary after 12 months;
- a minimal do-not-contact record (the listing, email address, phone number or company number you asked us not to use, and the date): for as long as we need it to honour your objection, so that we never contact you again by mistake.
Who handles them for us
These providers handle the details on our instructions only, and none of them uses them for its own marketing:
- our hosting providers in the UK and EU, which run the site and its database;
- Postmark, which sends our transactional emails, such as an enquiry we pass on;
- Google Workspace, which runs our outreach mailbox;
- Anthropic, whose AI (Claude) sorts the replies to our outreach emails and drafts answers, which a person checks before anything is sent;
- ElevenLabs and Twilio, if a business calls our phone assistant;
- Stripe, which handles payments.
Some of these providers may handle data outside the UK, for example in the United States. Where they do, it is protected by safeguards that UK law accepts, such as the UK-US data bridge or the UK's international data transfer agreement. Ask us for details.
Your rights
You can ask us for a copy of the details we hold about you (access), to correct them, to delete them (erasure) or to limit how we use them (restriction). You can also object to us using them for the directory, and we will take the listing down.
You have an absolute right to object to direct marketing. Tell us and we stop contacting you about Football Reach, on every channel, with no exceptions.
How to use your rights
- the "your listing and your data" page: the link is in the notice we email to each listed business. It shows what we hold and lets you correct the details, remove the listing or stop us contacting you;
- if you manage the listing, sign in and correct it yourself;
- reply "stop" to any email we send you;
- email hello@footballreach.com, or use "Report a problem" on the listing.
We reply to requests within one month.
Complaints
If you are unhappy with how we use your details, please tell us through our complaints form (see Complaints below). You can also complain to the Information Commission (the ICO) at ico.org.uk/make-a-complaint.
Complaints
If you are unhappy with how we use personal data, whether you are a player, a parent or a listed business, please use our complaints form, or email hello@footballreach.com. We email you an acknowledgement with a reference straight away, look into your complaint, keep you informed and tell you the outcome. We aim to reply in full within 30 days.
We keep a complaint, and our replies to it, for 2 years after it is closed, then delete them. You can also complain to the Information Commission (the ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint.
Contact
Email hello@footballreach.com for any privacy request or question. Football Reach is operated by Apps 365 Ltd, a company registered in England and Wales (company no. 13955007), United Kingdom.