Privacy Policy

1 Introduction

Global Soccer Pathways LLC ("GSP," "we," "us," or "our") is committed to protecting the privacy of all users of our platform, with special attention to the protection of minors. This Privacy Policy describes how we collect, use, store, and share information when you access or use the Global Soccer Pathways platform, website, and related services (collectively, the "Platform").

By using the Platform, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform. We encourage parents and guardians to review this policy with their children before allowing them to use the Platform.

2 Information We Collect

We collect information that you voluntarily provide, as well as information generated through your use of the Platform. This may include:

• Identity Information: Full name, email address, age or birth year
• Soccer Profile: Playing position, graduation year, club team affiliation
• Performance Data: Soccer statistics, game performance data, training data, and skill ratings
• Media: Game film, video files and video links you send us for evaluation or coaching
• How you found us: If you choose to tell us, how you heard about GSP, plus the website or campaign link that brought you to gspsoccer.com. We use this only to see which outreach works.
• Academic Information: GPA, intended major, academic goals (where provided)
• Device & Technical Information: Browser type, IP address, device type, pages visited, session duration, and usage patterns

We do not collect payment card information directly. Payments are processed by Stripe under its own privacy and security terms.

3 How We Use Information

We use the information we collect for the following purposes:

• Responding to you: To reply to inquiries, referrals and intro-call bookings, and to send the acknowledgment and follow-up you asked for
• Delivering programs: To provide evaluations, mentorship and College Pathway guidance, including reviewing film and preparing feedback and recruiting plans
• Recruiting support: With your permission, to share recruiting information with college coaches on your player's behalf
• Improving the website: To understand, in aggregate, how visitors use the website so we can improve it
• Communication: To send program updates and, only if you opt in, occasional tips and news

We will not use your information for purposes materially different from those described above without your prior consent.

Cookies and analytics

We use Google Analytics to understand how visitors find and use gspsoccer.com, for example which pages are visited and whether an inquiry form or booking was completed. Google Analytics uses cookies and collects information such as pages viewed, approximate location, device and browser type. We use IP anonymization, we do not send your name, email or form answers to Google Analytics, and we do not use it for advertising.

You can block analytics cookies in your browser settings or install the Google Analytics opt-out add-on. The website works the same without them.

When you open a review

When you open a review we send you, we record when it was opened, whether the video was played and about how much of it, and whether the written evaluation was opened. We use this only to know when to check in with you. We never sell or share it.

Connected Gmail accounts

GSP Film Room offers an optional Gmail connection for the GSP administrator's own mailboxes. Families do not need to connect Gmail. With the administrator's authorization, the app uses read-only Gmail access to find soccer video links and attachment notices, match a sender to an existing client, and check for family replies before sending a follow-up through our transactional email provider.

The app reads relevant message content and metadata. It saves candidate video links, subjects, dates, message identifiers, mailbox identifiers, matched client identifiers and processing status in the private Film Room. It does not save complete email bodies. Gmail authorization tokens are stored encrypted. Gmail access does not allow Film Room to send, delete, label or mark messages read.

Google data is used only for these visible Film Room features. Netlify and Supabase process it to host and store the service. We do not use Google data for advertising, sell it, or use it to train general-purpose AI models. Our use and transfer of Google data follows the Google API Services User Data Policy, including its Limited Use requirements.

The administrator can revoke the connection in their Google Account permissions. To request removal of saved connection or imported records, contact drewgspsoccer@gmail.com. Revoking access stops future mailbox access; it does not itself remove records already saved for the coaching workflow.

4 COPPA Compliance: Children Under 13

We do not knowingly collect personal information from children under 13 without first obtaining verifiable parental consent. If a parent or guardian believes that their child under 13 has provided personal information to us without proper consent, they should contact us immediately at drewgspsoccer@gmail.com.

Parents and guardians may:

• Review the personal information collected from their child
• Request correction of inaccurate information
• Request deletion of their child's information
• Withdraw consent for further collection or use

All such requests should be submitted to drewgspsoccer@gmail.com. We will respond within 30 days and will delete or correct the information as requested, where technically feasible.

5 Parental Rights

Parents and guardians of minor users (under 18) retain meaningful rights over their child's data on the Platform. Upon written request to drewgspsoccer@gmail.com, a parent or guardian may:

• Request access to all personal data collected from their child
• Request correction of inaccurate or incomplete data
• Request deletion of their child's account and associated data

We will fulfill all valid parental requests within 30 days of receipt.

6 Data Sharing

We do not sell personal data. We do not share personal data with third parties for their own marketing or commercial purposes.

We may share data only in the following limited circumstances:

• Service Providers: We use Netlify for website hosting and inquiry processing, Supabase for data storage, Resend for transactional emails, Airtable for customer follow-up records, Calendly for scheduled calls, and Stripe for payments. These providers process information needed to deliver those services.
• College Coaches: We may share recruiting profile information (such as soccer stats, video links, and contact information) with college coaches, but only data that the player and/or parent has explicitly submitted through the Platform for recruiting purposes.
• Clips on social media: We only share clips of a player on social media or our website if a parent or guardian (or the adult player) says yes. We use first names only, and you can change your mind anytime by emailing drewgspsoccer@gmail.com. We will stop using the clip in new posts.
• Legal Compliance: We may disclose information if required by law, court order, or governmental authority.

7 Data Retention

• Active Accounts: Data is retained for as long as your account remains active and in good standing.
• Deleted Accounts: Upon a valid deletion request, personal data will be purged from our systems within 30 days.
• Game Film: Film you upload is kept while your player is working with GSP and for 12 months after your program ends, so we can compare progress if you come back. After that the original video files are deleted. You can ask us to delete film sooner at any time.
• Evaluations and Reviews: Written evaluations and review pages are kept while your account is active so you can return to them, and are deleted on request.
• Minor Accounts: Accounts belonging to users under 18 are reviewed annually to ensure data relevance and accuracy, and to ensure continued parental consent where required.

8 Security

We take the security of your personal information seriously and implement the following measures:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using HTTPS/TLS.
• Secure Cloud Infrastructure: Data is stored in secure, access-controlled cloud infrastructure provided by Supabase.

While we implement industry-standard safeguards, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data using commercially reasonable means.

9 Your Rights

All users, regardless of location, have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Data Portability: Request your data in a commonly used, machine-readable format

To exercise any of these rights, email drewgspsoccer@gmail.com. We will respond within 30 days of a verified request.

10 California Users: CCPA

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell about you
• Delete personal information we have collected from you, subject to certain exceptions
• Opt-Out of the sale of your personal information

We do not sell personal information. To submit a CCPA request or ask questions, contact us at drewgspsoccer@gmail.com. We will not discriminate against you for exercising any CCPA right.

10.5 European & UK Users: GDPR / UK GDPR

Who this applies to: account holders in the EEA/UK, as well as professional contacts (coaches, scouts, staff) whose publicly listed roles at football clubs, academies, or leagues in the EEA/UK appear in our Global Soccer Network directory.

Legal basis for processing of publicly available professional role information: our legitimate interests (GDPR Art. 6(1)(f)) in operating a professional directory of soccer coaching roles, balanced against the data subject's reasonable expectation that publicly announced professional roles remain publicly referenceable.

Your rights under the GDPR / UK GDPR:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate data (especially important for coach role listings)
• Erasure: ask us to remove your data ("right to be forgotten")
• Restriction: ask us to limit how we use your data
• Portability: request your data in a machine-readable format
• Object: object to processing based on legitimate interests, including directory listings
• Withdraw consent: where processing is based on consent, withdraw it at any time
• Lodge a complaint with your national supervisory authority (e.g. the UK ICO, the Irish DPC)

How to exercise these rights: email drewgspsoccer@gmail.com with the subject line "GDPR Request." We will respond within 30 days of receiving a verifiable request, free of charge.

International transfers: Global Soccer Pathways LLC is based in the United States. When we transfer personal data from the EEA/UK to the US, we rely on Standard Contractual Clauses or other lawful transfer mechanisms where required.

No automated decision-making: we do not use your personal data for automated decisions that produce legal or similarly significant effects.

Data Protection contact: Global Soccer Pathways LLC acts as its own data controller. For all GDPR inquiries, contact drewgspsoccer@gmail.com.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify registered users via email prior to the change becoming effective.

The "Effective Date" at the top of this page indicates when the current version was last revised. Continued use of the Platform after any changes constitutes your acceptance of the revised policy.

12 Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us: