Data Protection & GDPR Policy

Statement of Intent

ADL is committed to protecting the privacy, rights, and personal data of all young athletes, parents, carers, staff, sub-contractors, and volunteers. Because our international pathways, scholarship applications, showcase events, and travel arrangements require processing sensitive personal and medical data, ADL strictly complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Protection Principles

• —Processed lawfully, fairly & transparently - collected with clear consent or legal justification.
• —Purpose-limited - gathered strictly for legitimate sports scholarship, recruitment, travel, and safeguarding purposes.
• —Data minimisation - limited only to what is necessary for our international operations.
• —Accurate & up-to-date - continually updated and corrected upon request.
• —Storage limitation - retained only for as long as necessary or required by law/insurance terms.
• —Integrity & confidentiality - secured against unauthorised processing, loss, or damage.

Categories of Data Collected

• —Personal identifiers - full names, date of birth, home address, contact numbers, academic history, football club details.
• —Travel & identity data - passport numbers, expiration dates, visas, birth certificates, emergency contact details.
• —Special category data - medical history, allergies, prescription medications, dietary needs, disability disclosures.
• —Vetting data - DBS certificates, police clearance records, reference checks for staff/volunteers.
• —Media data - photos, match video footage, showcase highlight tapes, social media features, granted via the Sign-Up, Consent & Participation Pack.

Data Security & Storage

• —Digital records are stored in password-protected, encrypted, cloud-based databases with role-based access restrictions.
• —Physical records (e.g. signed consent packs) are stored in locked, fireproof filing cabinets at ADL headquarters.
• —When sharing participant data with foreign host institutions, universities, or showcase organisers outside the UK/EEA, ADL ensures appropriate safeguards such as standard contractual clauses are in place.

Controlled Data Sharing

ADL never sells or rents personal data to third-party advertisers. Data is shared strictly on a need-to-know basis with travel partners, airlines, and insurance providers for logistics; host universities, academies, and scouts for placement consideration; and emergency medical personnel or statutory safeguarding authorities when required by law.

Your Data Rights

To request access to personal data ADL holds about you, email supportn@adl-sm.com. Subject Access Requests are fulfilled free of charge within one calendar month.

Data Breach Protocol

In the event of a suspected or confirmed data breach, the Data Protection Lead immediately acts to isolate and secure it, assesses the potential impact on affected individuals, and - where the breach poses a risk to individuals' rights and freedoms - notifies the Information Commissioner's Office within 72 hours and informs affected individuals without undue delay.