Legal

Children’s data & safeguarding

Youth football means handling children’s data. Here’s how we’re built to protect it, and where the club’s responsibilities sit.

Last updated: 25 August 2026

Draft for review. This document is a working draft prepared to get you started. Because Sweeper processes children’s data, have it reviewed by a qualified solicitor before you rely on it.

Our commitment

Most people on Sweeper are children, or their families. We treat their data with heightened care and design the platform to minimise risk, not just to tick a compliance box.

How the platform protects children’s data

  • Tenant isolation, each club runs in its own isolated space, so one club can never see another’s players.
  • Role-based access, sensitive fields (like medical notes) are visible only to appropriate roles within the club.
  • Data minimisation, we collect only what a club needs to run, and default to the least exposure.
  • Named-child safeguards, public-facing features (like the club programme) avoid revealing children’s full names.
  • Vetted onboarding, we review every club application before it goes live.

What the club is responsible for

The club is the data controller and remains responsible for its own safeguarding policy, for obtaining any parental consent required, for who it gives access to, and for how its volunteers use the platform. Sweeper provides the tools and safeguards; it does not replace a club’s safeguarding duties.

Parental rights

Parents and guardians can ask their club to access, correct or remove their child’s data, and can request account closure. See our Privacy Policy for the full set of rights and how to exercise them.

Reporting a concern

If you have a data or safety concern about a child on Sweeper, contact your club’s welfare officer in the first instance. You can also reach us at [email protected], and, for immediate risk of harm, contact the police or the NSPCC.