Privacy & cookies notice
Last updated: May 2026
Who we are
This service is provided by Mike Onslow, trading as MO Goalkeeping. We are the data controller for personal data you give us when you use this booking platform. Contact: mike@mogoalkeeping.co.uk.
What we collect
About you (the parent or guardian):
- Name, email address, and phone number (if you give it).
- Your account login credentials, managed by our authentication provider.
- Your booking history and any account credit balance.
- Payment metadata (last 4 digits, card brand) returned to us by Stripe - we never see or store full card numbers.
About your player:
- First name.
- Date of birth (if you give it).
- Playing position (if you give it).
- Any notes you choose to add, including medical or learning information.
- Which sessions they're booked into, and any attendance, captain, or player-of-the-week record made by a coach.
Why we use it
- To run your account and let you book and cancel sessions.
- To take payment and issue refunds or credit.
- To send transactional emails - booking confirmations, cancellation receipts, and reminders. We do not send marketing emails from this service.
- To run the sessions safely, including making sure coaches know about medical conditions you've shared.
- To keep accounting records for as long as the law requires.
- To investigate complaints, prevent fraud, and meet our safeguarding obligations.
Our legal basis for most of this is performance of a contract (the booking you make with us). For tax and accounting records the basis is legal obligation. For safeguarding and protecting our service we rely on our legitimate interests, and on any guardian who provides health information we rely on explicit consent.
Who we share it with
We only share personal data with the small set of providers we need to deliver the service. These are our processors (or independent controllers where noted):
- Supabase - database and authentication hosting. Data is held in Europe and access is restricted to admins.
- Stripe - card payment processing. Stripe is an independent controller for payment data. See stripe.com/gb/privacy.
- SMTP2GO - sends transactional emails on our behalf.
- Vercel - hosts the application; receives logs and request metadata.
We don't sell personal data to anyone or share it with advertisers. We may have to disclose data if required by law (for example, a court order) or for safeguarding reasons.
International transfers
Some of our processors (notably Stripe and Vercel) process data outside the UK and EEA. Where they do, we rely on standard contractual clauses or other lawful safeguards, and we only use providers with appropriate certifications.
How long we keep it
- Active accounts: kept while you continue to use the service.
- Bookings, payments, and credit ledger: kept for at least 6 years for accounting and tax purposes.
- Closed accounts: personal contact details are deleted on request, subject to the retention period for financial records.
- Session attendance and awards: retained alongside the session record while we operate the service.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you (subject access);
- correct anything inaccurate;
- ask us to delete data, subject to our legal obligations to retain some records;
- restrict or object to certain kinds of processing;
- ask for your data in a portable format.
To exercise any of these, email mike@mogoalkeeping.co.uk. We'll respond within one month. If you're unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use a small number of cookies, all of which are strictly necessary for the service to work. We don't use any cookies for analytics, advertising, or third-party tracking, so we don't show a cookie banner.
| Cookie | Purpose | Set by | Lifetime |
|---|---|---|---|
| Supabase auth session | Keeps you signed in. | This site (via Supabase Auth) | Session / up to 1 week |
| Stripe checkout cookies | Set on Stripe's payment pages to process your card payment securely and prevent fraud. | Stripe (only on the checkout page) | Up to 1 year |
You can clear or block cookies in your browser, but if you block the Supabase auth cookie you won't be able to sign in, and if you block Stripe cookies you won't be able to pay by card.
Changes to this notice
We'll update the "last updated" date at the top of the page when we make a change. For material changes (like a new processor or a different purpose) we'll email you at the address on your account.
Contact
Questions about your data or this notice? Email mike@mogoalkeeping.co.uk.