1. Who we are

SCOUTVERSE is operated by Noahsure Group LTD, 1 Canada Square, Canary Wharf, London, E14 5AA, United Kingdom ("we", "us"). We are the data controller for personal data processed through scoutverse.aisure.uk. For any privacy request, contact admin@noahsure.co.uk or use our contact form.

2. Data we collect

Player accounts: name, email address, date of birth, nationality, playing position and secondary positions, height, preferred foot, current club and league, club history, availability status, performance attributes and season statistics, scouting notes, and highlight media (images and video links) that you choose to upload. Where you are aged 16 or 17, we also collect your guardian's name and email address for the purpose of obtaining verifiable consent.

Club, scout and federation accounts: name, work email address, organisation name, job role, country, shortlists, briefs submitted to the AI agent, generated reports, seat invitations, and billing records.

Automatically collected: authentication identifiers, session data, IP address (used for security and anti-abuse rate limiting), and basic usage logs.

Payment data: card details are collected and processed by Stripe. We never see or store full card numbers; we retain a customer reference, subscription status, plan and billing period only.

3. Lawful basis (UK GDPR and EU GDPR)

Contract — creating and running your account, providing the talent index, AI briefs, shortlists and subscriptions.
Consent — publishing a player profile to the public index, highlight media, and guardian consent for players aged 16 or 17. Consent can be withdrawn at any time by unpublishing your profile or deleting your account.
Legitimate interests — platform security, fraud and bot prevention, service improvement, and contacting clubs about their subscription.
Legal obligation — accounting, tax and safeguarding records.

4. Children and players under 18

We do not accept accounts from anyone under 16. Where a player is 16 or 17, their profile cannot be published to the index until a parent or guardian confirms consent through an emailed verification link. Verified under-18 profiles carry a visible "Minor — guardian-verified" badge so clubs and scouts know consent is in place. A guardian may withdraw consent at any time by contacting us, which immediately removes the profile from the index. Contact details of minors are never exposed to clubs; approaches are routed through the platform.

5. How we use your data

Operating your account and displaying published player profiles to subscribers.
Generating AI scouting briefs, fit scores and reports from indexed data.
Processing subscriptions, trials, renewals and cancellations via Stripe.
Sending service emails (account, guardian consent, billing, support replies).
Preventing fake accounts, scraping, and abuse of player data.

We do not sell personal data. We do not send marketing emails to players without their consent.

6. Sharing

Published player profiles are visible to subscribing clubs, scouts and federations. We share data with processors who act on our instructions: Supabase (database and authentication hosting), Stripe (payments), Cloudflare (hosting and delivery), and our email delivery provider. AI briefs are processed by our model provider; player data included in a brief is not used to train third-party models.

7. International transfers

Some processors, including Stripe, operate in both the EU and the United States. Where personal data leaves the UK or EEA, it is protected by the UK International Data Transfer Addendum and/or the EU Standard Contractual Clauses, together with additional technical safeguards such as encryption in transit and at rest.

8. Retention

Active accounts: for as long as the account exists.
Closed accounts: deleted within 30 days, except records we must keep for legal or accounting reasons.
Billing records: 7 years (UK statutory accounting retention).
Guardian consent records: retained until the player turns 18 plus 12 months.
Contact form messages: 24 months.

9. Your rights

You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. Email admin@noahsure.co.uk and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.

10. Security

Data is encrypted in transit and at rest, access is controlled by row-level security policies scoped to each account, and administrative access is limited to authorised personnel. Sensitive player attributes are hidden from unsubscribed visitors.

11. Cookies and consent

Necessary cookies and local storage run at all times: your sign-in session, security, your cookie choice itself, and the cookies Stripe sets for secure checkout. Nothing optional is stored before you opt in — no category is pre-ticked.

Analytics (Google Analytics 4) and Advertising (Google Ads conversion measurement) load only after you accept them. Google Consent Mode v2 is set to denied by default, so no analytics or advertising storage is used until you choose otherwise. We never send player names, ages, guardian details, search terms, shortlist contents, report text, player identifiers or media links to any measurement provider.

Your choice is stored for 180 days. You can change or withdraw it at any time using Privacy choices in the site footer, and rejecting is exactly as easy as accepting.

12. Guardian consent for 16 and 17 year olds

Players under 16 cannot be listed. A player aged 16 or 17 can build a profile, but it stays private and is excluded from search, club discovery and any advertising audience until a parent or guardian confirms consent through a single-use, expiring link sent to them. Players cannot record that consent themselves — only the verified guardian link can, and we store the confirmation timestamp and an audit reference. Guardians can withdraw consent at any time by emailing admin@noahsure.co.uk, and the profile is unpublished on receipt.

13. Player media

Photos and video are held in private storage. They are served only through short- lived signed links to the player themselves and to entitled subscribing clubs and scouts. Media links are never public, never indexed and never included in analytics.

14. Processors and international transfers

We share data only with the processors needed to run the service: Supabase (database, authentication and storage, EU region), Stripe (payments), Resend (transactional email), Cloudflare (hosting and delivery), ElevenLabs (voice assistant, only if you use it) and, with your consent, Google (analytics and ads measurement). Some of these providers process data outside the UK and EEA; those transfers rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

15. Retention

Account and profile data is kept while your account is open and for 12 months after closure, then deleted. Guardian consent records are kept for 6 years as a safeguarding record. Billing records are kept for 7 years to meet tax law. Analytics data is retained for 14 months. You can request deletion at any time.

16. Changes

We will post any changes to this policy on this page and, for material changes, notify account holders by email.

Privacy Policy