Safeguarding first. Data protection by design.

Safeguarding

Built for youth sport first.

• DBS-checked onboarding for coach admin
• Consent flows built into every athlete profile
• Guardian View opt-in per athlete
• Age-appropriate defaults (under-18 profiles are private by default)
• Integrated reporting channel for concerns

Data protection (GDPR)

Controllers, processors, and your rights.

• SHOT Clubhouse Ltd is the data controller for marketing data
• Clubs act as data controllers for athlete data; SHOT is the processor
• ICO registration available on request
• Data Processing Agreement available on request
• Data stays with the athlete — portable, exportable, deletable
• Full Subject Access Request support

Full privacy policy →

Where your data lives

Hosted in the UK, encrypted end-to-end.

• Hosted on AWS eu-west-2 (London)
• Encrypted at rest (AES-256) and in transit (TLS 1.3)
• Daily backups
• Sub-processors: AWS, Supabase, Resend, Vercel. Full list on request.

Access controls

Role-based, audited, timed out.

• Role-based access: coaches, athletes, guardians, admins
• Single Sign-On available for school and enterprise plans
• Session timeout controls
• Activity audit log for club admins

For schools (Ofsted-aligned)

Evidence for personal development.

• Personal development impact reporting
• Pupil-level progress evidence
• Multi-sport, multi-term data
• Aligned with Ofsted's personal development judgement