How KorfCoach uses personal data

KorfCoach is run by James Conde Maltes. It doesn't sell anyone's data, show advertising, or use data for anything but what this notice describes.

Each club that uses KorfCoach decides what it records about its own players, coaches and matches, so each club is responsible for that data (its controller, in data protection terms), and James looks after it on the club's behalf. James is responsible for the rest: the accounts, the security records and the requests people send.

• Players: name, gender (korfball teams are mixed, so lineups and some reports need it), the clubs they've been a member of, with dates, shirt numbers and team, and the matches they played.
• What happened in each match: goals, shots (where from, what kind), assists, rebounds, turnovers, fouls, cards and the like, each credited to a player, and the reports, rankings and strengths and focus areas worked out from them. They're entered in KorfCoach, or imported from a team's own stats spreadsheet in Google Sheets, which the club shares with KorfCoach by its link, and KorfCoach keeps which account entered or imported each one. The matches themselves are videos on YouTube, put there by the clubs; KorfCoach only links to them.
• Coaches' notes on players, teams, matches and drills, with their replies and any pictures or files attached.
• Drills and training sessions, and any videos or pictures added to a drill, which may show players.
• Games: each round played, with its score and what was done on each turn, by the account that played it and its club, and whether that account shows on its club's leaderboards.
• Awards: the awards an account has earned for what it's done in KorfCoach (entering matches, publishing drills, playing the games, sending feedback and the like), and when. They're worked out from what KorfCoach already holds, and kept while the account is.
• Accounts: name, email address, role, club, the player the account belongs to (if any), and a securely scrambled password. Also when and from which internet (IP) address each account last signed in, and when it was last active.
• Records kept for security: sign-ins and failed sign-in attempts, what each signed-in person changed, when, from which IP address and browser, and each record's history of changes.
• Requests sent to KorfCoach: problem reports and feature or change requests, with the page and browser they came from, and privacy requests.

Pictures and videos added to KorfCoach (to a drill or a note) have the location a phone records in them, where they were taken, removed as soon as they're added.

Players from other clubs can be named in a match a club records.

KorfCoach holds no data about anyone under 18: no player records, accounts, notes, pictures or videos. If you think it holds some, tell us through the Contact about your data form and it will be erased.

Match records stay while the club uses KorfCoach; security records and change history are deleted after set periods, which we'll give you on request.

Clubs record matches to coach their players and teams better: to see what each player does well and what to work on, and to plan training. The law calls this a legitimate interest, which clubs weigh against the interests of the people recorded. Players and their opponents can expect a club to analyse the matches it plays in.

Accounts and their sign-in details are there to let people use KorfCoach and to keep it secure, and the security records to find out what happened if something goes wrong. Privacy requests are kept to answer them and show they were answered, as the law requires.

A club may also share one of its match reports by link, with its players and their families, say, to show them how a match went, or one of its teams' season reports, so its players can follow their season without an account. That's part of the same legitimate interest: a match report's link lasts six months at most and a team report's a year, and the club can stop either working at any time.

The games are there for players and coaches to practise and enjoy, and the club leaderboards to make that a friendly competition within the club: a legitimate interest too. Being on them is the default, as a leaderboard needs people on it to mean anything, and anyone can take themselves off in Your profile or on a game's page, at any time.

Awards are there to make KorfCoach a little more fun to use, and to encourage the work, like entering matches, that makes its reports worth reading: a legitimate interest too. They only say what an account has done, which KorfCoach holds already, and nobody but the account and the site admins sees them.

The rankings in the reports are for coaches to read (and, on a team report shared by link, the team's players too). KorfCoach never decides anything about anyone by itself, and selection is always a coach's decision.

Nothing in KorfCoach is public except this notice, the Features page, and the drills, match reports and team reports a coach shares by link. Everything else needs a sign-in, and accounts are only made by club and site admins.

KorfCoach counts how many times each of those links is opened, and when it last was, for the coaches who can share it, so they can tell if it's gone further than they meant. It never records who opened one.

• A match's lineup, events and statistics: the club that recorded it, any club it chooses to share it with, and the site admins.
• A match report shared by link: anyone who has the link, until it expires (after the week, month, three months or six months the club's coach picked) or the coach stops sharing it. It names both teams' players, the other club's included, with what each did in the match, and links to the match's video on YouTube.
• Team and season reports: anyone with an account, counting only their own club's matches.
• A team's season report shared by link: anyone who has the link, until it expires (after the week, month, three months, six months or year the club's coach picked) or the coach stops sharing it. It names the team's players with their statistics for the season, including the team's leaders and who's among the best fifth of the squad in each, lists every match's result, and links to the matches' videos on YouTube. It's kept up to date as matches are entered. It never shows a player's own report or anyone's notes.
• A player's own report: the coaches and club admins of the clubs they've played for, the site admins, and the player (if their account is linked to them).
• Coaches' notes: the coach who wrote the note, whoever they share it with, and KorfCoach's owner (James, the super admin), who can read every note. Anyone a note is about can ask to see it (see Your rights).
• Seeing KorfCoach as you do: to help with a problem, KorfCoach's owner (James, the super admin) can view KorfCoach as your account sees it. It's read-only, so nothing can be changed or sent in your name; it lasts an hour at most at a time; and it's never done as a site admin. Every page opened that way is recorded in the security records, with whose view it was, and is in your data if you ask for it (see Your rights).
• A game's leaderboards: the accounts of your club see your name and your best score in each game, unless you've unticked "Show me on my club's leaderboards". Your own rounds and bests are yours, and the site admins'.
• Your awards: you, and the site admins. Nobody else, your club included.
• Drills: anyone with an account, once its author publishes it (a draft is theirs and the super admin's alone); a drill shared by link, with its videos and pictures, is visible to anyone who has the link, until the link expires (after the week, month, three months or year the coach picked) or the coach stops sharing it.
• Accounts and the security records: the site admins. Club admins see their own club's accounts.
• Problem reports and feature or change requests: whoever sent each one, and the site admins.
• Privacy requests: only James.

KorfCoach uses a few services to run. Each handles data only to provide its service.

• DigitalOcean hosts KorfCoach: its servers, database and stored files are in London.
• Amazon Web Services sends KorfCoach's emails (password resets, and notices of privacy requests to James) from Ireland.
• YouTube (Google) and Vimeo show the videos linked to a drill on its page, and YouTube plays a match's video on the screens for entering what happens in it. Both come from the services' privacy-enhanced players (YouTube's without cookies until the video plays, Vimeo's with do-not-track).
• Google Sheets holds the stats spreadsheet a club may keep for a team, in the club's own Google account. When one of the club's coaches imports it, KorfCoach reads it from its link, with no Google account of its own, and keeps the match records it makes from it, not the file.

KorfCoach uses only the cookies it needs to work: one that keeps you signed in while you use it and protects its forms, and a “Remember me” cookie if you tick that box when you sign in. Your browser also remembers a few choices on your own device, such as whether a match video is showing and where it was up to. There are no advertising or tracking cookies, and no analytics.

You can ask:

• to see the personal data KorfCoach holds about you, including notes about you;
• to correct anything that's wrong;
• to erase it. Match statistics are part of a team's record, so a player who has played is usually kept as an anonymous “Former player” in them, with their name, shirt numbers, notes and history removed;
• to stop or limit its use, or to object to it;
• for a copy of what you gave KorfCoach, in a form you can take elsewhere.

Use the Contact about your data form: you don't need an account. You'll have a reply by email within one month (a complex request can take up to two months more, and you'll be told why). Before sharing or deleting anything, we may ask you to confirm who you are.

If you're unhappy with how KorfCoach handles your data, please tell us first through the same form, and we'll acknowledge it within 30 days. You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint, or 0303 123 1113.

This notice was last updated on 11 October 2026. When it changes, the date here changes with it.