PITCH — Privacy Policy

Version 2.9 · 4 October 2026

In one paragraph. Pitch keeps a record of a footballer's development. For anyone under 16, a parent or guardian creates it, approves it, sees all of it, approves every change to it, and can pause or delete it at any time. Clubs can see a player — that is how pathways work — but nobody can contact a child through Pitch, and no club ever gets a child's phone number or email address. We do not track anyone's location, we do not profile children, we do not advertise, and we never sell anybody's information. Some clubs pay us. That changes nothing about any child.

Last updated: 4 October 2026 · Version: 2.9 · Applies to: everything at www.pitchfootball.com.au

---

Who we are

Pitch Football is a registered business name of EBSD Enterprises Pty Ltd, an Australian proprietary company.

Two domains, and we say so rather than leaving it to be noticed. Our website is www.pitchfootball.com.au and our email comes from pitch-football.com. They look different because they are different registrations. Anything genuinely from us will only ever link to pitchfootball.com.au — if a message claiming to be from Pitch sends you anywhere else, it is not from us, and you can tell us at the address above.

There is no postal address on this page, and that is deliberate. Our registered office is our accountant's, which is normal for a small company and is on the public ASIC record if you ever need it. But a complaint about a child should not wait for somebody else's mail run. Email reaches the person who actually deals with it, on the day you send it. If you would rather write to us on paper, ask by email and we will give you an address.

Why we spell that out. You will see "Pitch" on the screens and "Pitch Football" on anything to do with money. The legal person behind both is EBSD Enterprises Pty Ltd, and that is the entity that holds your child's information, that you can complain about, and that the rights further down this page are exercisable against. A trading name is not a legal person, and you should not have to work out who you are dealing with.

We are a small Australian company. Under the Privacy Act 1988 (Cth) a business under a turnover threshold is not automatically bound by the Australian Privacy Principles, and at present we are under it. We have chosen to handle personal information as though the Principles applied to us from the first day, and we intend to formally opt in under section 6EA of that Act. We say that plainly rather than implying an obligation we do not yet carry, and this page will be updated when we opt in.

What we collect, and why

We collect the least we can. If a field is not necessary for a player's development record or for keeping children safe, we do not ask for it.

If you are a player

What is deliberately absent from an under-18 page: your school. It used to be a field and we removed it. School plus age group tells a stranger where a named 14-year-old is on a Tuesday morning, and it sat on the page that every shared link opens. School football is real football and the record is poorer without it. We took that trade. The field returns at 18.

If you are a parent or guardian

Your name, email address, mobile number, and your stated relationship to the child. Two separate contact channels, because that is how we check a real adult is approving a child's profile rather than the child approving it themselves.

Once clubs are using Pitch we also check a child's details against their club's own registration record — we send the club a name and date of birth we already hold and get back a yes or a no. We never receive a list of children. It is the strongest confirmation available to us that a child is who they say they are and that you are the adult responsible for them, and it means we never ask a family for identity documents.

If you are a coach

Your name, the clubs you have coached and when, your credentials, your coaching philosophy, and a record that your club has confirmed you hold a current Working With Children Check.

About that check: what we hold is your club's confirmation, not the number itself where we can avoid it — and we never display a number anywhere, to anyone, at any tier. Verifying a coach's entitlement to work with children is the legal responsibility of the club engaging them. Nothing on Pitch discharges it, and we will never suggest otherwise.

If you run a club

Your club's details, crest, philosophy, pathway, teams, trial notices, and administrator contacts. If your club subscribes, a billing contact and the fact of your subscription.

What we do not collect, from anybody

• No location tracking. No GPS, no "near me", nothing that follows where you are. One exception, named rather than buried: because accounts can only be created in Australia, we work out which country a visitor is in so we can send people outside Australia to the waitlist instead of the sign-up page. We do not keep it, and we do not keep the IP address it came from.
• No behavioural or analytics tracking on any account belonging to someone under 18.
• No health, injury or medical information.
• No government identity documents. We will never ask a child or a parent to photograph a licence or a passport.
• No card numbers. See Paying us, below — they go straight to Stripe and never touch our systems.
• No information about anyone's race, religion, politics, or anything else the law calls sensitive.

How a child's record works

The part most parents want, set out in full.

A child under 16 does not have a live profile until you approve it. Your child can build their page first — choose positions, add their season, pick clips — and then it waits for you. Until you approve it, that page is visible to exactly two people: your child, and you. It is in no search, reachable by no link, invisible to every club, and it is deleted automatically after 14 days if you do not approve it.

When you approve, you are also accepting these terms on your child's behalf, and we record which version and when.

What approval means, precisely:

• Clubs and coaches can see your child's profile. That is the point — it is how a player gets a trial.
• One route reaches your child, and only if your family opened it. There is no messaging on Pitch — not from a coach, not from a club, not from another player, not from us. The single exception: a verified club your child registered interest with may send one invitation to trial. It arrives in your account and your child's at the same moment, it is one message and not a conversation, and nothing your child writes back reaches the club until you approve it (D-153).
• No club ever receives your phone number or email address. Not when they invite your child, not afterwards. If a club wants your child at a trial, the invitation appears inside your Pitch account and your child's — we send you both a bare notification saying something is waiting, carrying no club message, no player name and nothing about your child. You reply in the app. If you then choose to give a club your own contact details, that is your decision about your own information.
• Your child is in no search. Under-16s do not appear in any search result on Pitch. Their CV is reached only by a link, and you hold it.
• The link expires. A child's CV link stops working after 90 days. Until your child turns 16, you can renew it in one tap or replace it so the old one stops working. At any age, you can switch a link off or pause the whole profile.
• Your child can ask to share; you do the sending. Under 16, the share button on your child's own screen sends the request to you.
• Every change comes back to you. Once you have approved a page, any edit your child makes waits for you before it goes live. A club holding a link keeps seeing the last version you approved — never an unreviewed edit, and never a blank page.
• You see everything your child sees.
• You can undo all of it, any time, in one action, from Settings.

At 16, your child can be found by clubs and coaches we have verified — not by the public, not in any open search. We tell you 30 days beforehand and you hold the switch. Contact still comes to both of you, and edits become theirs to make.

At 18, the account becomes theirs. Your visibility ends automatically. They may choose to give it back.

If your child is 16 or 17

They hold their own account, and they are not findable by anyone until you say so.

• Discoverability starts off. Until you turn it on, no club and no coach can find your child on Pitch — not by searching, not by browsing, not at all. Your child can ask you to turn it on. You decide, and you can turn it off again whenever you like, without explaining why.
• Turning it on means one thing only: clubs and coaches we have verified can find them. It is never general search, never the open internet, and never anybody we have not checked.
• It does not change who can contact them. There is still no messaging on Pitch at any age under 18, and an invitation is still the only route in. It now arrives with you and your child together, and you approve the reply before it goes — at sixteen and seventeen as well as under sixteen (D-153).
• You keep seeing everything they see, for as long as they are under 18.

We start this off rather than on, and we want to be straight that it is a trade. A sixteen-year-old is here to be seen, and a switch you never get round to pressing leaves them unseen. We would rather ask you once than decide for you — but if your child is looking for a pathway, this is the switch that matters, and it is one tap.

Registering interest in a trial

When a club has posted a trial and your child wants to be considered:

• Under 16, you press send. Your child composes it; you see which club, which trial, exactly what is about to go, and the note your child wrote — and you are the one who sends it. At 16–17 the player sends and you are notified every time. At 18 they send alone.
• If there are two of you, either can send — and the other one can undo it. The guardian who did not send is told immediately and, for 24 hours, can switch that link off with one tap from the notification. We do it this way round because a send that waits for two people often never goes at all, and the child it hurts is the one whose second parent is hardest to reach. Being straight about the limit: switching the link off stops the club opening the page. It does not un-send the email, and we will not pretend otherwise.
• We keep a record of who each send went to, and you can see it in full. Your child sees the club's name and the date, not the address. We keep it because your right to switch a link off is worth nothing if we cannot tell you who received it.
• A club cannot reply to a send. There is no route from a club back to you or your child through Pitch, at any tier, for anybody. Sending a CV gives a club no way to answer you. If a club wants your child at a trial, it must invite them — and that is only open to a club your child registered interest with, arriving in your account and your child's together.
• What the club receives: your child's name, age, current club, the squad they are interested in, a preferred position, one short line they wrote, and a link to the page you approved. Not a file, not a copy of the record, not your contact details.
• You can undo it. Revoking the link or deleting the profile ends the club's access at that moment, removes the note as well as the link, and shows the registration as withdrawn.
• There is no download. A club works its list inside Pitch. It cannot export a spreadsheet of children, because a spreadsheet would survive you switching the link off — and that would make everything above untrue.
• No club ever tells your child no through Pitch. There is no rejection, no status, no progress bar. If a club wants your child, you and they hear from it together.
• Every send is recorded — who sent it, about whom, to which club, for which trial, when, and under which version of this policy.

Who else sees the information

If Pitch is ever sold. We are a small company and it would be dishonest to write "never, no exceptions" and then transfer the business one day. So: if Pitch is acquired or merged, information may pass to the new owner as part of the business — and the new owner is bound by this policy as it stands on the day of transfer, we will tell you before it happens, and you will have the chance to export everything and delete first. Changing how a child's information is handled after that requires fresh consent from the guardian. It cannot be done by quietly updating a page.

If a club loses its verification

A link you sent keeps working. It was your disclosure, not ours, and we do not reach into a family's decisions and undo them — not even helpfully, because a system that can do that kindly can do it for a worse reason later.

What we do instead, where a club is de-verified because of a concern about children: we write to you, we tell you the club is no longer verified on Pitch, and the message carries the button that switches your link off. One tap. No explanation required of you.

We will not tell you why the club was de-verified. It may be an allegation and it is somebody else's information. We will never make it hard for you to act on it.

Where a club simply lets its paperwork lapse or stops paying, nothing happens to your links and you hear nothing, because nothing has gone wrong.

Some clubs pay us. That changes nothing about your child.

Worth saying plainly, because a parent will wonder.

• Your consent is to a named club seeing your child — not to "clubs who pay". Whether a club subscribes is a fact about its relationship with us. It is not a term of your consent and it never appears in one.
• If a club stops paying, your consent does not lapse and you do not need to give it again. The club simply loses its list.
• A child's protections are identical whether a club pays or not. The same guardian approval, the same revocable link, the same absolute bar on contacting a child. We do not sell child safety, at any tier, and there is no version of Pitch where paying buys more access to a young person.
• Families never pay for anything, ever. A child's own record is free forever, and clause 8.4 of our terms prevents us changing that later.
• A few clubs have their own arrangement with us, and it changes nothing either. A small number of founding clubs agree terms with us individually. Those arrangements confer recognition, never advantage — a founding club's players get no preference, no ranking benefit and no earlier or wider visibility than any other club's, and nothing about how your child's information is handled or who can see it depends on which club they play for. A player at the fortieth club is never worse served because their club was not among the first eleven.

Paying us

Only clubs pay, and only for the Interest Register.

• We use Stripe. You enter your card on a page hosted by Stripe. We never see, receive or store a card number.
• Stripe receives the club's name, a billing contact name and email, the amount, and the card details you give it. Stripe is a United States company and that information is handled overseas under its own terms.
• No information about any child ever reaches Stripe. It sees a club and a card. It never sees a player, a record, a photograph or a link.
• Cancel any time, from your own settings, without contacting us. Access runs to the end of the period you have paid for.
• If a payment fails, we keep access running for 14 days and then suspend the list. Suspension is not deletion — the families in your register are hidden from you, not destroyed. A child is never deleted because a card expired.

Where the information is kept

In Australia. Our database and files are hosted in Sydney, and the parts of our application that handle personal information run there.

Who actually holds it, named:

• Supabase is the database. It runs in Sydney. Everything about a player, a guardian, a coach or a club sits there, and so does the waitlist.
• Vercel serves this website and runs the parts of the application that handle personal information, pinned to Sydney. Vercel is a United States company, so while the data sits here, the company operating the service is overseas.

Four suppliers are overseas, and we should be straight about it:

• Vercel as above. It also gives us visitor counts for this site — how many people came, roughly from where, on what kind of device. It sets no cookie, stores no identifier, and cannot tell one visitor from another or follow anyone anywhere. It is a tally, not tracking, and there is nothing in it that is about you.
• Resend sends our emails and Twilio sends our text messages. They receive a recipient address or mobile, a first name, and a link. We deliberately keep everything else out — a message from us never contains a child's record, their club, their photograph or anything about their development.
• Stripe handles payments, as above, and never receives anything about a child.

Our email comes from a subdomain of this website — send.pitchfootball.com.au. We say so because you should be able to check: mail that is genuinely from us comes from there, and links in it only ever point back to pitchfootball.com.au.

We have contractual protections with each and we remain responsible to you for how they handle it.

Video and other people's websites

When you add a highlight, we store the link, not the video. Nothing loads from YouTube, Instagram or Veo until a viewer chooses to press play — until then, those companies do not know the page was opened. When someone does press play, that is between them and that company.

Sharing a card, and what other people's apps keep

When a CV is shared into WhatsApp, a message or a story, a preview card is created — and those apps keep their own copy, more or less permanently. We cannot reach into WhatsApp and delete it, and neither can you.

So we built the card for that reality. For anyone under 18 it carries a first name, a surname initial, positions, squad number and their own stats. Nothing else. No surname, no club, no age group, no region, no school. And a guardian sees the exact image before it can leave — the child picks a card, you approve it, and only then can it be shared. Cards for adults carry the full detail.

When a link has stopped working

If someone follows a link that has expired, been regenerated or been switched off, they see a page with no name, no photo, no club and no age on it. It looks identical whether the link was revoked or never existed at all.

A verified club — signed in, and confirmed by us as real — can ask for access from that page. The request carries the club's own identity, not typed-in text, and it arrives in your Pitch account, never in an email. Rate-limited to one per club per link per day. You may ignore it, and the club is told nothing at all — not that it was seen, not that it is pending, not that it was declined. Silence is a complete answer and it looks like silence from the other side.

Automated flags — what a computer decides, and what it does not

Nothing at launch. When coach assessments begin, our system generates two prompts for club staff: one where a player's competency bands have not moved, one where a player consistently reaches the top band for their stage.

These are prompts, not verdicts. A coach confirms or dismisses each one. They compare a player to what is expected at their age stage, never to their team-mates, and always show whether the player is young or old for their age group.

Players never see them. Parents see their own child's progress and targets, never a comparison with other children. No computer on Pitch decides anything about a child's future.

What changes at eighteen

Mostly, restrictions lift. One thing appears: an adult player may, on a paid tier, see which clubs opened their own CV.

That feature can never reach a child, and this is not a matter of settings. No account belonging to anyone under 18 shows any paid feature at all, so it is unreachable rather than switched off. For anyone under 18 we never report opens — not to the player, not to a guardian, not to anybody — and it cannot be bought.

How long we keep things

There is a real document with real numbers — the retention statement — linked from here and from Settings. It states, for each kind of information, how long we keep it, including how long deleted material persists in backups.

The short version: while the account is active, and then as that statement says. Delete an account and the record goes with it, cascading through profiles, photographs, links, registrations and memberships. Two things survive: the consent log — that a consent was given or withdrawn, and when, because we cannot prove we deleted something by deleting the proof — and, for a coach, an anonymised count of how many assessments they wrote. Neither holds anything about your child's football.

Getting your information, correcting it, and deleting it

• See it. As a guardian you already see everything, live. Ask and we will send a copy of anything else.
• Export it. Families and clubs can export their data in a plain, usable format, free. It is in our terms, not just this page. PDF export of a CV is free on every tier.
• Correct it. Most things you edit yourself. A coach's assessment can be edited by that coach for 48 hours; after that a correction appears as a new, visibly linked entry rather than a silent change. If we decline a change you asked for, you may have a short statement of your disagreement attached so anyone reading sees both.
• Delete it. One action, from Settings. A guardian or the child can do it. Where there are two guardians and they disagree, the more cautious choice wins.

We respond within 30 days, usually much faster, and there is no charge.

Emails and texts

Transactional messages only: a request to approve a child's profile; a reminder ten days later if it is still waiting; a request to approve a change; a notification that something is waiting in your Pitch account; a reminder before a share link expires; confirmation of a report; password resets; and, for clubs, payment receipts and renewal reminders.

If you joined the waitlist, we send you nothing until we open. No confirmation, no welcome, no "just checking in". One email, when there is something to open, and it carries an unsubscribe link that works. That is the whole of it.

Text messages are used for one thing: verifying that a real adult is approving a child's profile. Not for alerts, not for reminders, not for anything promotional. Reply STOP to any text.

We do not market to children. Ever. No streaks, no "come back", no promotional message to any account belonging to someone under 18. Messages to children are strictly functional, and anything safety-relevant goes to the guardian and the child together.

We keep track of whether the approval messages arrive — created, sent, delivered, opened, verified, approved — so we can tell a parent who chose not to approve from a parent whose email went to spam. It is about the message, not about you, and nothing like it runs on a child's account.

Cookies

What is needed to keep you signed in and the site secure. No advertising cookies, and no behavioural analytics on any account belonging to a person under 18. The visitor counts described above set no cookie at all.

If something goes wrong

If personal information is lost or accessed without authorisation and it is likely to cause serious harm, we will tell the people affected and the relevant authority, and tell you what happened and what to do. We would rather over-tell you than under-tell you.

Reporting something

Every public page carries a Report this page link. Use it if your child appears in something they should not, or if anything concerns you. No account needed, no reason needed, and you do not need to be certain. We act on reports about children first and fastest — within one business day for anything, and immediately where a child is at risk.

If your child appears in content someone else published, tell us and we will remove it.

Complaints

Email burak.donmez@pitch-football.com with "Privacy complaint" in the subject. It reaches Burak Donmez, who is the Privacy Officer and, today, the whole of Pitch. We acknowledge within 5 business days and respond within 30.

If you are not satisfied you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992. You can report online safety concerns to the eSafety Commissioner at esafety.gov.au. Young people can call Kids Helpline on 1800 55 1800, free, any hour.

Changes to this policy

If we change something that matters we will tell you before it takes effect and, where the change is material, ask you to accept the new version. Old versions stay available. We will not change this policy in a way that reduces the protections applying to a child, or that puts a child's own record behind a payment.

---

Pitch Football · a registered business name of EBSD Enterprises Pty Ltd (ACN 701 879 718) · privacy policy · doc 20 · v2.9 · 4 October 2026 · supersedes v2.4, which is retained unaltered as the version the first consents were recorded against · entity named per D-148