← Back to home

Privacy policy

Last updated: 2026-04-20. Sample template — replace before launch with advice from a UK-qualified data protection professional.

1. Who we are

ClassMaster (“we”, “us”) is the operator of https://classmaster.anatolian.uk. We act as a data processor for the club you register with or join (the “Club”), which is the data controller for the personal data it collects from you.

2. What we collect

• Account data: email address, display name, hashed password.
• Student data: names, dates of birth, emergency contact details, medical notes, signed waiver versions, attendance records.
• Operational data: session cookies, IP addresses and user-agent strings captured in server logs for security and troubleshooting.
• Feedback: any content you submit through the report-a-bug form.

3. Why we process it

• To provide the service you signed up for (contractual basis).
• To keep the platform secure and prevent abuse (legitimate interest).
• To comply with legal duties (e.g. record-keeping for waivers and safeguarding).

4. Children's data

Student records belong to children in most cases. A parent or guardian must register the child, sign the waiver on their behalf, and confirm the information is accurate. We rely on that parental consent as the lawful basis for processing children's data. You can withdraw consent at any time by contacting your Club.

5. Sharing

We do not sell your data. We share it only with:

• Your Club (the coach and any additional coaches they authorise).
• Our hosting provider, only to the extent needed to run the service.
• Email delivery (Resend) and — only if your Club enables it — SMS delivery (Twilio).
• Authorities when required by law.

6. How long we keep it

Active account and student data are kept while your Club is active. If a Club closes its account, we delete or anonymise data within 30 days unless we're required by law to keep it longer (e.g. tax records). Signed waivers and their version strings are retained for the limitation period for personal injury claims.

7. Your rights

Under UK GDPR you have the right to:

• Access your data and get a copy of it.
• Correct inaccurate data.
• Ask us to delete data we no longer need to keep.
• Object to processing and restrict it.
• Complain to the ICO (ico.org.uk).

To exercise any of these rights, contact your Club first (they control your data), or write to us at privacy@classmaster.anatolian.uk.

8. Cookies

We use a first-party session cookie to keep you logged in and a first-party CSRF cookie to protect forms from cross-site attacks. Both are essential and do not require consent. We do not load third-party analytics or advertising trackers on the parent-facing pages.

9. Changes

We'll update this page when the service changes materially. The “last updated” date above tells you when it was last revised.