Privacy Policy

1. Who we are

GALZ UK Ltd (“GALZ™”, “we”, “us”, “our”) is the data controller for personal data collected through galz.uk.

• Registered company: GALZ UK Ltd (company no. 16832673)
• Registered office: 4 Bartlett View, Hockley, England, SS5 4FX
• Privacy queries: legal@galz.uk

2. What this policy covers

galz.uk is a pre-launch marketing website. It collects personal data only through the waitlist sign-up form, the contact form and cookie-free website analytics. There is no account system, no messaging and no user-generated content. If you are a parent or guardian reading this on behalf of your daughter, Section 5 is written for you.

3. Information we collect

Information you give us on the waitlist form

Everyone:

• First name
• Email address
• Whether you are signing up as a Player, Parent or Professional

Players also confirm that they are 13 or over. We record that you confirmed this. We do not ask for your date of birth.

Optional questions after sign-up

After you join, we ask up to three optional questions. You can skip any or all of them. We store your answers as fixed options, not as free text, except where stated.

Players:

• Where you are with your football (Not Playing Yet, Just For Fun, Club Team, Academy)
• Your age band (13 to 14, 15 to 16, 17 to 18, 18 and over)
• What would help you most (Confidence, Skills, Meeting People, My Options)

Parents:

• Where your daughter is with her football (same four options as Players)
• Your daughter’s age band (Under 12, 12 to 14, 15 to 16, 17 to 18, 18 and over)
• What matters most to you (Safety, Her Confidence, Her Development, Clear Pathways)

We do not ask for your daughter’s name, date of birth, club, school or town.

Professionals:

• Your role (Coach, Scout, Club Or Academy, Something Else). If you choose Something Else, you may describe your role in up to 60 characters.
• How many players you work with (Under 20, 20 to 50, 50 to 150, 150 and over)
• Your biggest challenge (Retention, Player Wellbeing, Parent Comms, Clear Pathways)

Information you give us on the contact form

• First name
• Email address
• The topic you choose (General, Partnerships, Clubs And Demos, Press)
• Your message, up to 1,000 characters

Please don't include sensitive personal information in your message.

Information collected automatically

• Source page: which page of the site you used a form on, for internal reporting
• Campaign tags (UTM parameters): if the link you followed contained them, for campaign reporting (waitlist only)
• A one-way hash of your IP address: a scrambled value that cannot be reversed to your IP address, used only to stop the forms being abused. We never store your IP address itself.

Website analytics

We use Cloudflare Web Analytics, which does not use cookies and does not track you across other websites. It records aggregate figures such as page views and referring sites. It is not linked to your waitlist details.

What we don’t collect

No payment details, no passwords, no photos and no messages. We never ask for a child’s name.

4. Why we use it, and our legal basis

You can withdraw consent at any time (see Section 8). This does not affect anything done before you withdrew it.

5. Children’s data and parental consent

GALZ™ is built for girls and young women aged 10 to 20. Our approach follows UK GDPR Article 8 and the ICO’s Age Appropriate Design Code (the Children’s Code).

• Contact form: the contact form does not ask your age. If you're under 13, please ask a parent or guardian to get in touch for you.
• Age 13 and over: a player aged 13 or over may sign up herself. Before the Player form can be submitted, she must confirm she is 13 or over.
• Under 13: a child under 13 must not sign up herself. If she answers that she is under 13, the form does not collect anything from her. It asks her to get a parent or guardian, and offers to switch to the Parent sign-up. Nothing about that answer is stored.
• If we learn a child under 13 has signed up directly, we will delete that entry as soon as we become aware of it. If you think this has happened, contact legal@galz.uk.
• Parent sign-ups: we collect the parent’s first name and email. The optional questions ask only for your daughter’s age band and football stage, never her name or date of birth.

A note on scope. This waitlist is a pre-registration list for a product that does not yet exist. The safeguarding features described in our brand materials, such as age-verified access and moderated spaces, apply to the GALZ™ app at launch. They are not features of this website, which has no login, messaging or user-generated content.

6. Who we share your data with

We use the following processors. None of them may use your data for their own purposes.

We do not sell your data, share it with advertisers, or use it to build advertising profiles.

7. International data transfers

Our waitlist database is hosted in London. Some of our other processors may process personal data outside the UK, including in the European Economic Area and the United States. Where personal data is transferred outside the UK, we make sure it is protected by an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Email legal@galz.uk if you would like details of the safeguard used for a particular processor.

8. Your rights

Under UK GDPR, you (or, for a child under 13, her parent or guardian) have the right to:

• access the personal data we hold about you
• correct it
• have it deleted
• restrict or object to how we use it
• receive it in a portable format
• withdraw consent at any time
• complain to the Information Commissioner’s Office (ICO) at ico.org.uk

To use any of these rights, email legal@galz.uk. We will respond within one calendar month, free of charge for a standard request.

To leave the waitlist, reply to any email from us or email legal@galz.uk from (or quoting) the address you signed up with. We will remove you from the waitlist database and the mailing list.

9. How long we keep your data

We keep waitlist data until the earlier of:

• you ask us to delete it, or
• the GALZ™ app launches and your entry is either moved to an app account (with fresh consent) or deleted.

We keep contact form messages, and our replies, for 12 months from the date we receive them, then delete them, unless you ask us to delete them sooner.

We review waitlist data at least once a year. Backups follow the same deletion commitments on a rolling basis.

10. Cookies

galz.uk does not use tracking or advertising cookies, and our analytics work without cookies. If that changes, we will update this policy and add a consent mechanism where required.

11. Security

• All traffic to galz.uk is encrypted (HTTPS)
• The waitlist database is not publicly readable; only our server can access it
• The keys that can read or write the database are never exposed in the website’s public code
• IP addresses are hashed before storage and never stored in raw form
• The sign-up form is rate-limited and protected against automated sign-ups

No system is completely free of risk. If we become aware of a breach affecting your personal data, we will assess it and, where the law requires, notify the ICO within 72 hours and tell you directly if there is a high risk to your rights and freedoms.

12. Changes to this policy

We may update this policy as the website or our data practices change. The date at the top will change accordingly. We will highlight material changes, especially anything affecting children’s data, on the site.

13. Contact us

Questions, requests or concerns: legal@galz.uk.

If you are not satisfied with our response, you can complain to the UK Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.