Effective 4 July 2026 · FullPanel (fullpanel.net), operated by Niall O'Neill, Ireland · support@fullpanel.net
Club member data (players, parents/guardians). When a club uses FullPanel to manage its members — names, dates of birth, guardian contact details, team assignments, schedules, RSVPs, plans, messages and membership payments — the club is the data controller and FullPanel is its data processor under the Data Processing Agreement. If you are a player or parent and want to exercise your data rights over club records, your club is the right first contact (usually the secretary or registrar); we give clubs the tools to answer you and we assist them when asked.
Account data. When you create a FullPanel account of any kind — as club staff, an invited parent/player, or a guest using the free scoreboard — FullPanel is the data controller for that account: your name, email address, sign-in records and notification preferences.
| Data | Purpose | Legal basis |
|---|---|---|
| Account details (name, email, sign-in events) | Creating and securing your account; linking you to your club when it invites your email | Contract |
| Club member records (name, date of birth, codes, registration number, guardian contact) | Squad management, age grading, safeguarding and club communication — on the club's instructions | Processed for the club (controller); the club's basis is typically its membership contract and legal duties |
| Vetting register (status, expiry, reference number only) | The club's child-safeguarding duties. We never hold the content of a Garda vetting disclosure | Processed for the club |
| Payment records (fees due/paid, method) | Membership and fundraising collection. Card details go directly to Stripe — we never see them | Contract / processed for the club |
| Messages, schedules, RSVPs, coaching plans | Running the club's teams and communicating with members | Processed for the club |
| Push-notification subscription | Sending you the notifications you switch on | Consent (opt-in, revocable in Account) |
| Assistant & AI-draft prompts | Answering staff questions in-app and drafting plans for a coach to edit | Legitimate interest; don't include personal data you wouldn't put in a plan |
| Scoreboard scores | Stored in your browser only (localStorage) — never transmitted to us | n/a — never leaves your device |
FullPanel is built for clubs whose members include children, and the access rules are fixed, not configurable: under-16s can never log in — only a parent/guardian holds portal access for them; 16–17-year-olds may hold their own login only where the club records guardian consent at invite time; access to children's records inside a club is role-restricted so a coach sees only their own teams, and FullPanel's own support staff are structurally blocked from children's personal data. We collect no more about a child than squad management needs, and never medical data.
Club and member data is stored with Supabase in Ireland (EU), encrypted in transit and at rest, with row-level security so each club can only ever see its own data. We use a small set of sub-processors:
| Provider | Role | Location / transfers |
|---|---|---|
| Supabase | Database & storage | EU (Ireland) |
| Vercel | Application hosting | EU/US — EU SCCs / Data Privacy Framework |
| Clerk | Sign-in & account security | US — EU SCCs / Data Privacy Framework |
| Stripe | Payments (holds card details; we never see them) | EU/US — Stripe's own GDPR programme |
| Resend | Transactional email delivery | US — EU SCCs |
| Anthropic | In-app assistant & AI plan drafting (prompt text only; not used to train models) | US — EU SCCs |
Account data is kept while your account is active and deleted on request. Club member records are kept for as long as the club instructs — clubs can delete a member at any time (Members tab), and payment records may be retained where the club has legal (e.g. financial-records) obligations. The audit trail of administrative actions is kept as safeguarding and GDPR evidence and is not deletable from the app.
Under GDPR you can ask for access to your data, correction, erasure, portability, or object to processing. For club records, ask your club — its admins can export everything held on a member (Admin ▸ Data & GDPR ▸ Member data export) and delete records; we assist the club with anything they can't self-serve. For your FullPanel account itself, email support@fullpanel.net. If you're not happy with our answer you can complain to the Irish Data Protection Commission (dataprotection.ie).
Encryption in transit and at rest, per-user sign-in, database-enforced role restrictions (not just hidden buttons), and a server-side audit log of administrative actions. If a breach affecting personal data occurs we will notify affected clubs without undue delay — and in any case within 72 hours of becoming aware — so controllers can meet their own obligations.
We use only the cookies needed to keep you signed in (set by Clerk, our sign-in provider). No advertising or cross-site tracking cookies, no analytics identifiers sold or shared.
If we make material changes to this policy we'll update this page and note the new effective date; clubs are notified of sub-processor changes under the DPA.