Privacy Policy

This Privacy Policy explains how McTip IT Limited ("we", "us", "our") collects, uses, shares and protects personal data when you use the Find Me a Ref platform (the "Service"). We are the data controller for the personal data described here. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

McTip IT Limited (company number 07291011), 2B Penn House, Broad Street, Hereford, HR4 9AP. For any privacy question, or to exercise your rights, contact us at [email protected].

What data we collect

Depending on your role (referee, club or league administrator), we may collect:

• Account details: name, email address, password, and role.
• Contact details: phone number, and notification preferences.
• Location data: your base location, travel radius, and fixture venues, used to match referees to nearby games.
• Referee details: date of birth, grading, registration or credential information, availability and unavailability.
• Guardian details (referees under 18 only): a parent or guardian's name, email, phone number, and confirmation of consent.
• Payment details: information needed to process payments and payouts, such as bank account and sort code, or identifiers from our payment provider. For a referee under 18, these belong to their guardian, not the referee. We do not store full card numbers.
• Usage data: fixtures, assignments, messages sent through match-day chat, and activity logs.

How we use your data

• To create and manage your account and provide the Service.
• To match referees to fixtures by grade, distance and availability.
• To process fee and travel payments between clubs and referees.
• To send you notifications about fixtures, assignments and account activity.
• To verify referee credentials where required.
• To keep the Service secure and to comply with our legal obligations.

Our lawful bases

We rely on: performance of a contract (to provide the Service you sign up for); legitimate interests (to operate, secure and improve the platform); consent (for certain communications, which you can withdraw); and legal obligation (for example, financial record-keeping).

Payments

Payments are processed through a third-party payment provider. When you make or receive a payment, relevant details are shared with that provider to complete the transaction. Their handling of your data is governed by their own privacy terms. We retain records of transactions as required for accounting and legal purposes.

Sharing your data

We share personal data only where necessary:

• With clubs, league administrators and referees involved in a fixture, so it can be assigned and fulfilled (for example, a referee's name is shared with the club once assigned).
• With our payment provider, to process payments.
• With service providers who host and support the platform, under appropriate agreements.
• Where required by law, or to protect the rights and safety of users.

We do not sell your personal data.

Data retention

We keep personal data for as long as your account is active and as needed to provide the Service. Transaction and financial records are kept for the period required by law. When data is no longer needed, we delete or anonymise it.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data (you can also delete your account in the app).
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where we rely on it.

To exercise any of these, contact [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Children's data

Club officials and league administrators must be adults. Referees may be aged 14 or over. Where a referee is under 18, we collect a parent or guardian's name, email and phone number, and their confirmation of consent, in addition to the referee's own account details. We rely on parental/guardian consent as our lawful basis for processing a child referee's personal data, alongside the other lawful bases described above for the financial and safety-related parts of the Service.

Fixtures may also relate to youth sport more broadly (young players, not just referees), but we do not knowingly collect personal data directly from child players through the Service. See our Safeguarding page for how youth fixtures and junior referees are supported.

Because the Service is used by children in the referee role, it is likely to fall within the scope of the ICO's Children's Code (Age Appropriate Design Code). This section reflects our current approach; full Children's Code compliance should be confirmed with a solicitor.

Security

We use appropriate technical and organisational measures to protect your data, including secure authentication and access controls. No system is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "last updated" date above.