How We Handle
Your Data

1. Who we are

Sportrail Football is a trading name of Sportrail Unipessoal LDA, the entity that operates this website and provides the coaching education services referenced on it. Sportrail Unipessoal LDA is the data controller for personal information collected through sportrailfootball.com.

Course payments are processed by Stripe (Stripe Payments Europe, Limited in Ireland and Stripe, Inc. in the USA) under Stripe Managed Payments. Stripe acts as Merchant of Record for all course purchases: it is the legal seller of the transaction, collects payment, issues the receipt in its name, and registers, collects, and remits any applicable VAT, sales tax, or GST in your jurisdiction. Sportrail Unipessoal LDA is the underlying service provider that delivers the course you've purchased. Stripe's privacy notice applies to the payment transaction itself.

2. What we collect

We only collect data you give us directly. Specifically:

• Inquiry sign-ups: name, email, phone (optional), coaching license tier (UEFA, U.S. Soccer, USC, AFC or equivalent federation diploma), club/organisation, course of interest and message.
• Course enrolments: name, email, billing address, club or organisation (if provided), license level, and payment details processed by our payment provider (we do not store card numbers).
• Email correspondence: anything you send us when you email info@sportrailfootball.com.
• Automatic server logs: IP address, browser type, and pages visited, stored briefly by our hosting provider for security and abuse prevention.

Cookies and analytics. We use Google Analytics 4 (GA4) to understand how visitors find and use this site so we can improve it. GA4 sets first-party cookies on your device and shares pseudonymous usage data with Google. No cookies are set and no data is sent until you accept the consent banner shown on your first visit. Declining keeps your visit untracked. You can change your decision at any time by clearing this site's data in your browser. We do not use advertising cookies, retargeting pixels, or cross-site trackers.

3. How we use it

• To send you waitlist updates, course launch announcements, and your free Match Analysis Framework guide.
• To deliver the courses you sign up for (calendar invites, session links, recordings, certificates).
• To process payments and issue receipts or invoices required for club reimbursement.
• To respond to your questions.
• To comply with legal, tax, and accounting obligations in Portugal and other applicable jurisdictions.

We will never sell your data, and we will not send unrelated marketing emails.

4. Legal basis (GDPR)

If you are in the United Kingdom, European Economic Area, or Switzerland, our legal basis for processing is:

• Consent for waitlist sign-ups and marketing emails (you can withdraw any time).
• Contract for delivering the courses you purchase.
• Legal obligation for tax, accounting, and consumer-protection records.
• Legitimate interest for basic server logs, fraud prevention, and error monitoring (so we can keep the site working).

5. Third parties

We use a small number of service providers to operate the website. They process data strictly on our instructions:

• Vercel Inc. (hosting and content delivery).
• Resend (Resend, Inc., USA) — transactional email delivery for inquiries, pre-registrations, and course communications. DKIM-aligned with sportrailfootball.com.
• Google Fonts (web font delivery via CDN).
• Google Analytics 4 (Google LLC, USA) — site analytics, only after you accept the consent banner. Configured with IP anonymisation and Consent Mode v2.
• Stripe (Stripe Payments Europe, Limited in Ireland and Stripe, Inc. in the USA) — Merchant of Record for course purchases under Stripe Managed Payments. Handles checkout, card processing, receipts, and global VAT/sales tax collection and remittance.
• Sentry (Functional Software, Inc., USA) — error monitoring for the website and serverless functions, so we can detect and fix bugs that affect coaches signing up or paying. Event data is hosted in Sentry's Frankfurt (EU) region. We have configured Sentry not to capture IP addresses, cookies, or form contents by default; only the error itself and the page or function it occurred on.

6. International transfers

Some of these providers are located in the United States. When your data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses or equivalent safeguards.

7. Retention

• Waitlist emails: kept until you unsubscribe or until 24 months of inactivity, whichever comes first.
• Enrolment records: kept for as long as required by Portuguese tax and accounting law (currently 10 years).
• Server logs: kept for a maximum of 30 days.

8. Your rights

You can ask us to access, correct, delete, export, or restrict the processing of your personal data. You can also object to marketing emails at any time by using the unsubscribe link or by emailing info@sportrailfootball.com.

California residents (CCPA/CPRA): you have the right to know what personal information we collect about you, to request deletion of that information, and to opt out of any "sale" or "sharing" of personal information. We do not sell your data and do not share it for cross-context behavioural advertising. To make a request, email info@sportrailfootball.com with "CCPA Request" in the subject line.

EU/UK residents: you also have the right to lodge a complaint with your national data protection authority (in Portugal, the CNPD — cnpd.pt).

9. Children

Our courses are designed for licensed adult coaches. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us information, contact us and we will delete it.

10. Changes to this policy

We will update this page if our practices change. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be announced by email to waitlist and active enrolment members.

11. Contact

Questions about this policy or about your data: info@sportrailfootball.com.