Privacy policy

Who we are

This policy covers Croatian Football Academy Asia and the CFA companies and partners that run our programmes in each country, including CFA Malaysia (together, "CFA", "we", "us"). It applies to our website, our academies, camps in Asia, Croatia tours and Club Boarding, school programmes and partner programmes.

The CFA company you register or book with is responsible for your personal data for that programme. If you're not sure which one that is, ask us at info@croatianfootballacademy.com.

The laws we follow

We handle personal data in line with the data protection laws of the countries where we operate. Depending on the programme, these include Malaysia's Personal Data Protection Act 2010, Singapore's Personal Data Protection Act 2012, Thailand's Personal Data Protection Act 2019, Vietnam's Decree 13/2023 on personal data protection, the laws of Cambodia, and the EU General Data Protection Regulation (GDPR) for programmes in Croatia.

What we collect

We collect the information you give us when you register, enquire, book, order kit or join a waitlist. This can include:

• Parent or guardian details: name, email, phone number, city and country.
• Player details: name, date of birth or age, gender, school, club, position, playing level and nationality.
• Health information: medical conditions, allergies and dietary needs you tell us about.
• Travel details for Croatia programmes: passport nationality, departure city and travel arrangements.
• Signatures and consents, such as waivers and photo consent.
• Payment records, such as invoices and payment confirmations.
• Photos and videos taken at sessions, matches and camps.
• Basic website data, such as pages visited and device type.

How we use it

We use personal data to:

• run our programmes safely, including grouping players and briefing coaches on medical needs;
• reply to enquiries and manage registrations, bookings and payments;
• arrange travel, accommodation and host families for Croatia programmes;
• assess players for camps and the pathway, with the family's agreement;
• keep families informed about sessions, camps and changes;
• send news and offers about CFA programmes, if you've agreed to receive them;
• meet our legal, safeguarding and insurance obligations.

We never sell personal data.

Children's data

Most of our players are under 18. We collect children's details from their parents or guardians, and only what we need to run our programmes safely. Where the law requires parental consent, we ask for it before collecting or using a child's data.

Health information

Health information is sensitive. We only use it to keep players safe, share it only with the coaches and staff who need it, and keep it no longer than necessary.

Photos and video

We take photos and videos at sessions, matches and camps. We only publish images of children with their parent's or guardian's consent, and never alongside personal details such as school or address. You can withdraw consent at any time, and we'll stop using those images in new materials.

Who we share it with

We share personal data only when we need to, with:

• CFA companies and partners running the programme your child joins;
• Croatian clubs, host families and tournament organisers, for Croatia programmes and trials, with the family's agreement;
• schools, for school programmes they've arranged with us;
• service providers who help us operate, such as our website and form host, payment, messaging and email providers;
• authorities, insurers or medical services, where the law requires it or a player's safety depends on it.

International transfers

Because our programmes run across several countries, personal data may be transferred between them, for example from Malaysia to Croatia for a tour. When we do this, we take steps to protect it in line with the laws that apply.

How long we keep it

We keep personal data while your child is taking part in our programmes, and afterwards only as long as we need it for legal, safeguarding, insurance or accounting reasons. We then delete or anonymise it.

Keeping it safe

We use appropriate technical and organisational measures to protect personal data, and limit access to the people who need it.

Your rights

Depending on where you live, you can ask to access, correct or delete your personal data or your child's, withdraw consent, object to marketing, or ask us to limit how we use it. Email info@croatianfootballacademy.com and we'll respond within the time the law requires. You also have the right to complain to the data protection authority in your country.

Our website, cookies and tracking

Forms on this website are processed by our website host, Netlify, on our behalf.

We use Google Tag Manager to manage the tools below, which may set cookies or similar technologies in your browser:

• Google Analytics 4, to understand how visitors use the site and improve it.
• Meta Pixel, to measure the results of our adverts on Facebook and Instagram and to show relevant adverts to people who have visited the site.

When you submit a form, we record that a form was submitted, which form it was and, for camps, which city. We do not send your name, email address, phone number or your child's details to Google or Meta through these tools. You can block or delete cookies in your browser settings, and you can control how Meta uses your activity for adverts in your Facebook and Instagram ad settings.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.

Contact us

Questions about privacy? Email info@croatianfootballacademy.com or message us on WhatsApp on +60 11-5368 0069.