Privacy Policy

Sports CV ("we", "us") operates the professional network for athletes, coaches, agents and clubs at www.sportscv.co.uk. For privacy questions or to exercise your rights, contact us at privacy@sportscv.co.uk.

• Account data: email address, password (stored hashed, never in plain text), account type and chosen sport.
• Profile data you choose to add: name, username, photo, bio, position or role, club, location, nationality, availability, career and coaching history, qualifications and links.
• Content you post: posts, photos, video links, comments, likes, connections and direct messages.
• Verification and recruitment data: information you submit when applying for verification or responding to opportunities.
• Technical data: sign-in events, failed-login attempts (for brute-force protection) and basic security logs.

• To provide your account, profile, feed, messaging and search features — performance of a contract.
• To keep the platform secure, prevent abuse and investigate misuse — legitimate interests.
• To send service and notification emails relating to your account — performance of a contract or legitimate interests.
• To comply with legal obligations where these apply — legal obligation.

We do not sell your personal data, and we do not use it to train third-party advertising profiles.

Sports CV is a networking platform, so some information is intended to be seen by others. Your profile, posts and media may be visible to other members and, if your profile is public, to visitors and search engines. Direct messages are visible only to the participants. You control profile visibility and the Player of the Week opt-in from your settings.

We use a small number of processors to run the service: Lovable Cloud (application hosting, database, authentication and file storage), an email delivery provider for transactional email, and Cloudflare Turnstile for bot protection on sign-up and sign-in. These providers process data on our instructions only.

Data is encrypted in transit. Database access is protected with row-level security so members can only read and write the records they are entitled to. Passwords are hashed, checked against known-breached password lists, and repeated failed sign-ins are temporarily locked out. Two-factor authentication (TOTP) is available and is required for administrator access. No online service can guarantee absolute security.

We keep your account data for as long as your account is active. If you delete your account, we remove your profile and content from the live service; limited security and audit logs may be retained for a short period, and backups age out on their normal cycle.

You have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent where consent is the basis. Most of this can be done directly in your profile and settings; otherwise email privacy@sportscv.co.uk. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Sports CV is not intended for children under 16. If you believe a child has created an account, contact us and we will remove it.

We will update this page when our practices change and revise the "last updated" date above. Material changes will be highlighted in the app.