Contents10 sections
Site legal
Website Privacy Notice
Version: 2.0
Last updated: 10 October 2026
This notice covers thefullsquad.com (the "site"). The Full Squad app and platform has its own Platform Privacy Policy, and clubs that use the app have their own notices for their members.
1. Who we are
The site is run by Reload IT Ltd, company number 10106178, registered office 124 City Road, London, EC1V 2NX, registered with the Information Commissioner's Office under number ZC200891. Reload IT Ltd is the controller of the personal data described in this notice. Contact: info@thefullsquad.com.
2. What we collect, why, and our lawful basis
2.1 Early access list
You can join the early access list by giving your email address and, if you choose, your club name and your role. These two optional boxes are free text. Please do not put the names or details of other people or of children in them.
We use your details for two separate things:
| Purpose | What we send | Lawful basis |
|---|---|---|
| Your place on the list. To confirm your sign-up and to tell you, once, when early access opens for you. | A confirmation email now (a link you must click), and one message about your early-access place when it is ready. | Taking steps at your request before a contract (UK GDPR Article 6(1)(b)), and our legitimate interest in running the list (Article 6(1)(f)). |
| Updates (optional). Only if you tick the separate box that says you would like occasional progress updates about the app. | Occasional updates about the app, roughly monthly, each with a one-click unsubscribe link. | Your consent (Article 6(1)(a)) and, for the emails, regulation 22 of the Privacy and Electronic Communications Regulations 2003. |
The updates box is not ticked for you, is not required to join the list, and joining does not depend on it. If you do not tick it, we will not send you updates.
Nothing is sent to you beyond the confirmation email until you click the link in it. If you do not click it within 30 days, we delete your sign-up.
We keep a record of what you saw and agreed to, so we can show it later: the wording and version of each tick box as it appeared to you, whether you ticked it, the date and time, and which form you used (we clear the form used when you leave the list). We also keep a salted hash of the internet address (IP address) you signed up from. A hash is a scrambled version of the address. We add a secret value before scrambling it, so we cannot turn it back into the address, and nobody without that secret can. It is still personal data and we treat it as such. We use it to limit abuse of the form (for example someone submitting it thousands of times) and as supporting evidence of where a sign-up came from. We delete it after 90 days.
You can withdraw consent to updates at any time with the unsubscribe link in any email, which takes one click, or by emailing us. Withdrawing consent does not affect anything we did before.
When someone confirms their sign-up, we send an alert containing the email address, club, role and form used to a Reload IT mailbox, so that we know who has joined. That alert goes through our email sending provider (Resend) to our company mailbox, and copies are deleted after 12 months.
2.2 Emails and messages you send us
If you email us (for example to ask a question, ask about a club committee or safeguarding, or ask us to delete your details), we use what you send to reply and to keep a record of the enquiry. Our lawful basis is our legitimate interest in answering you and running our business (and, where you are asking about a contract with us, steps at your request). We keep enquiries for 12 months after the last message, unless we need to keep them for a legal claim or because the law requires it.
2.3 How the site is used
We do not use analytics or any visitor-counting tool on the site. The only records of visits are the technical server records described in section 2.4.
2.4 Server records and security
Our hosting provider (Vercel) keeps technical server records of requests to the site (such as IP address, time, page and browser type) for security, reliability and fixing faults, for the short period its service keeps them. We use them only for those purposes. Our lawful basis is our legitimate interest in keeping the site secure and working.
3. Who we share it with
We do not sell your details or pass them to anyone for their own marketing. The people who handle personal data for us, as processors under written terms, are:
| Provider | What it does for us | Where |
|---|---|---|
| Vercel Inc. | Hosts the site and runs the form handler and the scheduled clean-up job. | May process in the UK, the EU and the United States. |
| Supabase | Stores the early access list. | UK (London region). |
| Resend | Sends our emails to you and our sign-up alerts. | May process in the EU and the United States. |
| Microsoft (Microsoft 365) | Hosts info@thefullsquad.com. | Ask us for details of where it processes data (see section 4). |
We may also share information where the law requires it, to establish or defend legal claims, or with professional advisers and insurers under duties of confidentiality. If our business is sold or reorganised, the early access list may transfer to the new owner, who must honour this notice.
4. Transfers outside the UK
Some of the providers above process data outside the UK. Where they do, the transfer is protected by a mechanism recognised under UK law, such as UK adequacy regulations (including the UK extension to the EU-US Data Privacy Framework, for certified providers) or the UK addendum to the international data transfer agreement or standard contractual clauses. You can ask us for details of the mechanism that applies to a provider by emailing info@thefullsquad.com.
5. How long we keep it
| Data | How long |
|---|---|
| Sign-up never confirmed | 30 days, then deleted. |
| Confirmed early access list entry | Until you unsubscribe, or until the end of the 6th month after the platform opens to the public, whichever is first. If the platform has not opened to the public within 24 months of your sign-up, we will ask whether you still want to be on the list, and delete the entry if you do not reply. |
| Consent record: the wording and version of each tick box, whether you ticked it, and the date and time (not the IP hash) | On your entry while it is on the list. If you unsubscribe or ask us to erase your entry, the record stays on a minimal suppression record (next row). When the list closes after the platform opens, entries that hold consent evidence stay in the same way and the rest are deleted. |
| IP address hash | 90 days after sign-up, then deleted. |
| Suppression and consent record | Your email address, the date you left the list (or the date your entry was closed at the end of the launch window), and the consent record in the row above. Your club, role, form used and IP hash are cleared when you leave. We delete this record 6 years after the later of your last consent event and the date you left, so that we can answer any complaint or legal claim and make sure we do not email you again. |
| Sign-up alert copies in our mailbox | 12 months. |
| Emails you send us | 12 months after the last message, unless we must keep them longer (see section 2.2). |
| Server records | For the short period set by Vercel, then deleted. |
A scheduled job deletes the early access list data above at the end of its period. The copies and enquiries in our mailbox are deleted by hand.
6. Your rights
Under UK data protection law you have the right to:
- be told what we hold about you and to receive a copy (access);
- have wrong data corrected (rectification);
- have your data deleted in certain cases (erasure);
- ask us to restrict how we use it in certain cases;
- receive the data you gave us in a portable format, where we use it on the basis of consent or a contract (data portability);
- object to our use of your data that is based on our legitimate interests, and to any direct marketing; and
- withdraw consent at any time where we rely on it.
Email info@thefullsquad.com. We will reply within one month (we can extend that by up to two further months for complex requests and will tell you if we do). We may ask you to confirm who you are. There is no charge unless a request is clearly unfounded or excessive. If you ask us to delete your details we will clear your club, role, form used and IP hash and keep only the suppression and consent record described in section 5, so that we do not email you again and can answer any complaint or legal claim.
You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first, but you do not have to contact us first.
7. Children
The site is for adults who run or help run clubs, and for parents and players who want to find out about the product. It is not aimed at children. If you are under 18, please do not join the early access list or send us personal information. If we find that we hold information from someone under 18 that we should not have, we will delete it.
8. Providing your data is optional
You do not have to give us any personal data to read the site. If you do not give an email address you cannot join the early access list. We do not make decisions about you by automated means that have legal or similarly significant effects.
9. Changes to this notice
We will update this notice when what we do changes. The version number and effective date at the top show which version applies. If a change affects how we use your details in a way you would not expect, we will tell you, and where the law requires it we will ask for your consent again.
10. Other notices
The Platform Privacy Policy explains how we handle personal data in the app. If you are a member of a club that uses the app, the club's own member privacy notice explains how the club uses your data; the club is responsible for it. The Cookie Policy for this site explains how it uses cookies and similar technologies.