Privacy Policy

1. Who We Are

This site is operated by JPL Tournaments WLL (Commercial Registration No. 1-184821), trading as JPL Bahrain, the GCC arm of the Junior Premier League (UK). We are the "data controller" responsible for personal data collected through this portal.

2. What Data We Collect

Depending on which form you use, we may collect:

• Contact details: name, email address, phone number
• Role data: whether you're a parent, player, coach, referee, academy director, etc.
• Identity verification (academies): director photo, government-issued ID document (CPR for Bahrain or equivalent)
• Organisation data: academy name, commercial registration, safeguarding officer details
• Player data: name, age group, current academy (if any) — registered only by parents/guardians of players under 18, or self-registered for players 18+
• Account data: email + password for portal login
• Usage data: dates of login, actions taken on the portal

3. Why We Process Your Data

We process personal data for the following purposes:

• To register and verify academies, clubs, coaches, referees, parents and players
• To administer the league: fixtures, results, tournaments, accreditation
• To comply with safeguarding obligations for under-18 participants
• To communicate league updates, fixtures, and important notices
• To detect and prevent abuse or fraudulent registration

Our lawful basis under applicable data protection law is a combination of: consent (which you give when ticking the box on each registration form), contractual necessity (we need this data to provide the service you've requested), and legitimate interest (to administer the league fairly).

4. Who Sees Your Data

Access to your data is restricted to:

• JPL Bahrain administrators who review registrations and manage the league
• Your own academy/club management (if you're a player, parent, or coach attached to an academy)
• Our service providers who help us run the portal:
  • Supabase — secure database and authentication (data hosted in Singapore/EU regions)
  • Cloudflare — website hosting
  • Resend — transactional email delivery (e.g. login codes, magic links)
• The Junior Premier League (UK) parent organisation, only where required for cross-region tournaments or talent pathways, under a Data Sharing Agreement

We do not sell your personal data to third parties for marketing or any other purpose.

5. Where Your Data Is Stored

Personal data is stored on cloud infrastructure managed by Supabase (primary region: Singapore/EU), Cloudflare (CDN: global), and Resend (US-based with EU sub-processors). All providers commit to industry standard security controls and applicable data protection regulations. Cross-border transfers occur only as necessary to provide the service.

6. How Long We Keep It

We keep personal data only as long as needed for the purposes above, or as required by law:

• Active accounts: for as long as the account is in use
• Rejected academy applications: 12 months, then deleted
• Closed accounts: 24 months after closure, then anonymised or deleted
• Audit/safeguarding records: may be kept longer where required for legal or safeguarding reasons

7. Your Rights

Under Bahrain Personal Data Protection Law, KSA PDPL, UAE Federal Data Protection Law, UK GDPR and similar laws across the GCC, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion (subject to legal retention requirements)
• Object to or restrict certain processing
• Withdraw consent at any time (this will not affect prior lawful processing)
• Lodge a complaint with the relevant data protection authority in your country

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

8. Children's Data

Players under 18 may only be registered by a parent or legal guardian. The registering adult must confirm both their relationship to the player and their authority to consent to the data being processed. Players 13 and over may be given limited access to their own data view once their parent has registered them and approved access. We take special care with safeguarding under-18 data, in line with international child protection standards.

9. Cookies & Local Storage

This portal uses essential cookies and browser local storage to keep you logged in and to remember your interface preferences (e.g. language choice on public pages). We do not use third-party advertising trackers on the portal.

10. Changes to This Policy

We will update this policy as the portal develops and as our policy framework is finalised with the Junior Premier League (UK) parent organisation. The "last updated" date below will change accordingly. Any material changes that affect how we use your data will be communicated to registered users by email.

11. Contact Us

For any questions, requests, or complaints about this policy or your data: