Who we are and what this policy covers
Elite Dragon Sports Academy ("Elite Dragon", "we", "us", or "our") operates youth football and academy services in Bahrain. This policy covers information handled through our public website, member and staff portals, the Elite Dragon Academy mobile app, registration and membership services, academy communications, and related operational systems.
We act as the organisation responsible for deciding how this information is used. This policy does not replace any additional notice that may be provided for a specific programme, employment process, or legal requirement.
Information we collect
Depending on your relationship with the academy and the features you use, we may collect:
- Account and contact information: name, email address, phone number, authentication identifiers, role, account status, language, and branch or family links.
- Player and guardian information: date of birth or age group, guardian relationship, registration details, membership, branch, team, kit or delivery details, and eligibility information.
- Academy operations: schedules, attendance, coaching observations, development reports, membership history, founder status where relevant, merchandise orders, and support or inquiry records.
- Health and safety information: injuries, medical restrictions, participation guidance, emergency or safety information, and authorised medical notes where needed to protect a player.
- Payment and accounting information: payment method and status, BenefitPay or other payment-reference details, proof-of-payment uploads, invoices, receipts, income or expense records, and related accounting links. The app does not collect payment-card numbers for in-app purchases.
- Staff and applicant information: job applications, CVs, qualifications, employment and approval records, address, CPR or national identifier where required, bank or IBAN details, contracts, branch assignments, and staff documents.
- Files and content you provide: photographs, payment proofs, receipts, documents, messages, inquiries, notes, and other material submitted through an academy workflow.
- Device and notification information: Firebase account ID, a random installation ID, push token, device platform, app version, locale, time zone, notification preferences and read state, and integrity signals used by Firebase App Check.
We do not request device location or microphone access for routine academy use. Selecting an external Maps, WhatsApp, email, or social-media link may take you to a service governed by that provider's own privacy terms.
How we use information
We use personal information only where reasonably necessary to:
- create and secure accounts, authenticate users, and apply role- and branch-based permissions;
- process registrations, memberships, academy applications, merchandise orders, and payment proofs;
- plan sessions, manage attendance, deliver coaching, produce reports, and communicate academy updates;
- protect player health, safety, and participation requirements;
- administer staff onboarding, approvals, employment, branches, accounting, and academy operations;
- send requested service and push notifications and remember notification preferences;
- respond to inquiries, support requests, correction requests, and account-deletion requests;
- prevent fraud or misuse, protect the service, meet legal obligations, and establish or defend legal claims.
These uses may be based on providing the academy service you requested, consent where required, legitimate operational and safeguarding needs, or compliance with applicable law.
Children and young players
Our academy serves players aged 4 to 18, so some information relates to children and young people. Registration and family information should be provided or authorised by a parent or legal guardian where required. Authorised coaches, medical personnel, and academy administrators may handle limited player information when necessary for coaching, attendance, safeguarding, health, or academy operations.
We do not use children's information for behavioural advertising, sell it, or share it with data brokers. A parent or guardian may contact us to request access, correction, or deletion of a child's information, subject to identity, guardianship, safeguarding, and legal-record requirements.
Security and access
We use technical and organisational measures designed to protect personal information, including authenticated accounts, server-assigned roles, branch and family permissions, protected database and file-storage rules, application-integrity checks, and restricted access to sensitive medical, staff, payment, and accounting records. Passwords and one-time passcodes are handled by the authentication provider and are not stored in academy profile records.
No system can guarantee absolute security. Please contact us promptly if you believe an account or personal record has been accessed without permission.
Retention and deletion
We keep information only for as long as it is reasonably needed for the purposes described in this policy, including active academy services, player safety and safeguarding, employment administration, accounting and legal records, dispute resolution, and security. Retention may vary by record type and applicable legal obligation.
In the app, open Profile → Account deletion → Request account deletion. Your request and its date are recorded and shown as pending. You can cancel in the app for 7 days after requesting deletion. Cancellation returns the account to its normal state. After those 7 days, cancellation closes and the request becomes eligible for fulfillment by an academy Admin. Eligibility is not a promise that deletion is already complete. The request records its processing and completed states.
Fulfillment revokes account access and prevents future operational use. We remove or anonymise unnecessary personal profile information and remove unnecessary private uploads, notification tokens, and device registrations. We preserve only records needed for accounting, transaction integrity, audit integrity, or legal/business retention, and minimise identifying information where possible. Another person's or player's data is not deleted merely because it is linked to your account. Limited copies may remain temporarily in protected backups.
Where the academy has not approved a precise retention period, the retained category is explicitly classified as retained pending academy/legal retention policy. We do not state a fixed statutory retention period here. For a deletion request outside the app, cancellation help, completion status, or details of retained records, contact info@elitedsa.com.
Your rights and choices
Subject to applicable law, you may ask to access, correct, update, or delete personal information; restrict or object to certain processing; withdraw consent where processing relies on consent; or ask questions about how information is handled. You can also manage push-notification permission through your device and notification preferences through the app.
We may need to verify your identity and, for a young player, your parental or guardian relationship. We will explain if a request cannot be completed because of another person's rights, safeguarding needs, or a legal retention obligation. You may also raise a concern with the relevant data-protection authority.
Changes to this policy
We may update this policy when our services, providers, or legal obligations change. We will publish the updated version on this page and change the effective date. If a change materially affects how we use personal information, we will provide additional notice where appropriate.
Contact us
For privacy questions, rights requests, or account-deletion support, contact Elite Dragon Sports Academy: