Club data agreement

What this is

This agreement sits between MY TASK MASTER LTD ("Reelstat") and the club or team organisation ("the club") that uses Reelstat. It sets out who is responsible for which data, as UK GDPR and EU GDPR require. The club accepts it when it creates its team on Reelstat.

Who decides what

• The club decides why and how its players' data is used: the roster, the games it films and who sees them. For this data the club is the controller and Reelstat is the processor, and we process it only on the club's documented instructions (using Reelstat as set up by the club is an instruction).
• For parents' accounts, payments, security, abuse prevention and our legal duties, Reelstat is an independent controller, as the privacy policy explains.

The data and the purpose

Roster details, game video and audio, and what the software makes from them (tracking data, stats, clips, reels), about players, coaches, parents and other people who appear. The purpose is to produce stats and reels for the club, its families and, with consent, the public, and to let families buy reels.

What the club must do

• Have a lawful basis, and tell players and parents about the filming and about Reelstat before filming.
• Collect parental or guardian consent through Reelstat for every player under 18, and adult players' own consent. Do not film or upload a child whose consent is missing or withdrawn.
• Name a safeguarding contact, and respond to reports on its content.
• Not use Reelstat to film anyone in a place where filming is not allowed.
• Tell us promptly about requests from people about their data that need our help.

What Reelstat must do

• Process the data only on the club's instructions, and keep it confidential. Everyone with access is bound to confidentiality.
• Keep it secure: encryption in transit and at rest, access control, logging, short-lived signed links.
• Show players from other teams only as a team, without names or individual stats, in anything that leaves the club.
• Never use face detection or face recognition.
• Help the club answer requests from people about their data, and help with data protection assessments.
• Tell the club without undue delay, and within 48 hours, after becoming aware of a breach affecting its data.
• Not sell the data, and not use it for advertising.

Sub-processors

The club agrees that we may use the sub-processors on our sub-processors page. We will give at least 30 days' notice of a new one, and the club may object on reasonable data protection grounds by writing to support@reelstat.com. We stay responsible for them.

Where data goes

Video and accounts are stored in London (UK) and the EU. If data is transferred outside the UK or the EU, we use an adequacy decision or standard contractual clauses.

Opponents

Players from the other team are processed only as an anonymous team: they get no names and no individual stats. If the opposing club buys the game, that club's own players are unlocked for that club under its own agreement with us.

AI training

We do not use the club's footage to train AI models today. If we ever want to, we will give the club notice and an opt-out first, and we will not use footage of children without lawful consent.

Retention and deletion

Raw game video is deleted 180 days after upload. Clips and reels stay until the club or a parent deletes them. When the club ends this agreement or deletes its team, we delete or return its data within 30 days; backups are overwritten within a further 30 days. We may keep what the law requires, such as payment records.

Club share

The club's share of reel sales is covered in the terms and the club's order with us.

Contact

Data protection questions and sub-processor objections: support@reelstat.com.