Privacy Policy.

01Who We Are

The data controller for the purposes of this Policy is:

ORYX Football Academy
Greenfield International School, Dubai Investments Park 1, Dubai, United Arab Emirates
Email: Info@oryxfa.com · WhatsApp: +971 58 206 2730
Head of Coaching: Dmytro Ulchenko

Where this Policy refers to “you”, it means the parent, guardian, or player whose personal data we are processing. Where the Player is under 18 (which is the case for all our Players), “you” means the Parent/Guardian who consents on the Player's behalf.

02Data We Collect

From parents & guardians

• Full name and preferred name
• Mobile telephone number and email address
• Home area or neighbourhood (for logistics only — full address is not required)
• Emergency contact details

About the Player

• Full name and date of birth (or age)
• Relevant medical disclosures, allergies and medications
• Prior training or club history
• Preferred position, dominant foot, and other training-relevant attributes
• Coach evaluations, attendance, and stage-progression data

Media

• Photographs and video captured during training Sessions, matches and events

Payments

• Transaction records and receipts. We do not store full card numbers — payment card processing is handled by our payment processor.

Website & mobile-app technical data

• IP address, device type, browser, and pages or screens viewed
• App usage data (login times, screens viewed, feedback submitted)

Messages and enquiries

• The content of any WhatsApp, email or form message you send us, together with the contact information you provide.

03How We Collect It

• Directly from you via the trial-signup form on our website (processed via Formspree)
• Via WhatsApp, email, or telephone conversations you initiate with us
• On the training pitch and at matches (attendance, evaluations, photography)
• Through the ORYX parents' mobile application when you register and use it
• From publicly available sources (such as previous-club references) only with your explicit permission

04Why We Use It (Purposes)

We only ever use personal data for clearly defined purposes:

• To arrange trial Sessions and confirm the Player's enrolment
• To communicate with the Parent/Guardian about training, matches, fees, events and Academy news
• To deliver and personalise the coaching Programme and track Player development across the five-stage pathway
• To safeguard Players (emergency contact, medical response, insurance)
• To process payments and issue receipts
• For Academy marketing and social media, using photographs and video captured at Sessions (subject to your consent under Clause 4 of our Terms)
• To comply with UAE law, including safeguarding, tax and insurance obligations
• To defend the Academy in the event of legal claims

05Legal Basis

Under the UAE PDPL, personal data must always be processed on a lawful basis. We rely on:

• Consent — for marketing photographs and video, and for registration on the parents' mobile app.
• Performance of a contract — for delivering the coaching Programme you have enrolled in.
• Legal obligation — for tax records, insurance obligations, and safeguarding compliance.
• Legitimate interest — for improving our coaching methodology, defending legal claims, and ensuring the security of our systems.

06Who We Share Data With

We share personal data only with the following categories of recipient, and only to the extent strictly necessary:

• Our coaches and administrative staff, under written confidentiality obligations
• Formspree — our form-submission and email-delivery provider
• Our payment processor, for the handling of card transactions
• Our insurance provider, in the event of an injury or liability claim
• Qualified medical or emergency personnel, only if the Player requires urgent treatment
• Third-party football academies, clubs or scouts — only with the express written consent of the Parent/Guardian, and typically only for Players in the Elite or Apex stages of the pathway
• Government or regulatory authorities where we are required to do so by UAE law

We do not sell personal data to any third party. We do not share Player data with any advertising or analytics platform beyond the basic technical measures described in Clause 11.

07International Data Transfers

Some of the service providers we use for the operation of our website and communications (for example, Formspree for form submissions and Google for Maps embedding) are based outside the United Arab Emirates.

We only use providers that offer data-protection standards equivalent to those required by the UAE PDPL, and we transfer only the minimum data necessary for the service in question.

08How Long We Keep Data

• Enrolment records — for the duration of the Player's enrolment plus five (5) years thereafter.
• Payment records — seven (7) years, in line with UAE tax and accounting requirements.
• Marketing photographs and video — until you request removal.
• Website analytics — up to twenty-six (26) months.
• Trial-form submissions — retained for twelve (12) months if the trial does not lead to enrolment, then deleted.

09Children's Data

All Players are under the age of eighteen (18). All personal data concerning a Player is provided by, and consented to by, the Parent or legal Guardian on the Player's behalf.

We apply enhanced safeguarding practices to Player data:

• Photographs of children are never published together with the child's full name, home address or contact details.
• Coaches and staff receive periodic safeguarding briefings.
• Access to Player records is restricted to authorised personnel with a genuine operational need.

10Your Rights

Under the UAE Personal Data Protection Law, you (or, where you consent on behalf of a Player, the Player) have the following rights:

To exercise any of these rights, please email Info@oryxfa.com. We will respond within thirty (30) days.

11Cookies & Tracking

Our website uses only the minimal cookies required for basic functionality. We do not use advertising cookies or third-party analytics tracking.

Third-party embeds on our website may set their own cookies, specifically:

• Google Maps — used to display our training location on the contact section.
• WhatsApp click-to-chat — used when you click a “WhatsApp Us” button.
• Formspree — used to submit the trial-signup form.

These providers operate under their own privacy policies. You can disable cookies at any time via your browser settings; some site features (such as the embedded map) may not function correctly if all cookies are blocked.

12Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. These measures include:

• Data stored on secured servers with access limited to authorised personnel
• Sensitive data (medical disclosures, payment records) encrypted in transit and at rest
• Written confidentiality obligations for coaches and administrative staff
• Regular review of access rights and revocation on departure of staff

No online transmission is ever completely secure. Where a breach affecting your rights occurs, we will notify you and the UAE Data Office without undue delay, in accordance with the PDPL.

13Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at oryxfa.com/Privacy.html.

Where changes are material — for example, if we start using a new category of provider or process a new type of data — we will notify registered Parents/Guardians by email at least fourteen (14) days before the change takes effect.

14Contact & Complaints

For any privacy question, data-subject request, or complaint about our handling of your personal data, please contact us using the details below. If you are not satisfied with our response, you have the right to lodge a complaint directly with the UAE Data Office.