Data Protection Policy

Principles

• Personal data is processed lawfully, fairly and transparently.
• Data is collected for specified purposes and not used incompatibly.
• Only the minimum data needed is collected.
• Data is kept accurate and up to date.
• Data is retained no longer than necessary.
• Data is kept secure against unauthorised access, loss or damage.

Roles

PHB acts as a data controller for its own enquiry and business records, and may act as a processor where it handles participant data on behalf of a commissioning organisation. Data protection responsibility sits with Founder/Head Coach. 

Practical controls

• Registers and participant information are held securely and only accessible to staff who need them.
• Devices used for delivery records are password protected.
• Paper records are stored securely and destroyed confidentially when no longer required.
• Photography and video are only taken with appropriate written consent obtained via the commissioning organisation. 

Breach response

Suspected personal data breaches are recorded, contained and assessed immediately. Reportable breaches are notified to the Information Commissioner's Office within 72 hours of becoming aware, and affected individuals are informed where there is a high risk to their rights and freedoms.

Subject access requests

Requests to exercise data rights are acknowledged and responded to within one calendar month. Requests should be sent to info@prohoopsblueprint.com.

Review and contact

This document is reviewed at least annually, or sooner following an incident, a change in legislation, or a change in PHB's delivery. Date of last review: 7th Sep 2026. Date of next review: 7th Sep 2027.

Questions about this document should be directed to Pro Hoops Blueprint at info@prhoopsblueprint.com