PRIVACY POLICY

This Privacy Policy has been prepared to align with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies to Ellë Football Academy (“the Academy”) and governs how personal information is collected, used, stored and disclosed.

The Academy manages personal information in an open and transparent way. This policy outlines the types of information collected, how it is used, and how individuals can access and correct their information or make complaints.

Where practicable, individuals may interact with the Academy anonymously or using a pseudonym. However, due to the nature of youth sports training and safety obligations, identification is generally required.

The Academy collects personal information that is reasonably necessary for its functions, including delivering training, ensuring safety and administering payments.

Sensitive information (such as health data) is only collected with consent.

If unsolicited personal information is received, the Academy will determine if it could have been collected lawfully. If not, it will be destroyed or de-identified.

At or before collection, the Academy will notify individuals about what information is collected, why it is collected and how it will be used.

Personal information is used for training delivery, safety management, communication, and payment processing. Disclosure occurs only where necessary, including to medical providers, regulators or service providers.

The Academy will not use children’s personal information for direct marketing. Parents may opt out of communications at any time.

If personal information is stored or processed overseas (e.g. cloud services), the Academy will take reasonable steps to ensure recipients comply with Australian privacy requirements.

The Academy takes reasonable steps to ensure personal information is accurate, complete and up to date.

The Academy protects personal information through access controls, encryption, secure payment systems and staff training. Financial information is handled through secure third-party platforms and is not retained longer than necessary.

In the event of a suspected data breach, the Academy will promptly assess the risk and notify affected individuals and the Office of the Australian Information Commissioner (OAIC) where required under the Notifiable Data Breaches scheme.

Individuals can request access to their personal information held by the Academy.

Individuals may request correction of inaccurate or outdated information.

Personal information is retained only as long as necessary for legal and operational purposes and then securely destroyed or de-identified.

Privacy complaints should be directed to the Academy. If unresolved, individuals may escalate complaints to the OAIC.