Privacy Policy

Section 1

About this policy

This policy explains how International Sports Alliance ("ISA", "we", "us") collects, uses and protects your personal information when you use our website at internationalsportsalliance.com and the ISA Athlete Passport app (together, our "Services"). It also explains your rights and how to use them.

Please read it together with our Terms and Conditions. If you are registering a young athlete, please read it on their behalf and explain the main points to them.

Section 2

Who we are

The company responsible for your personal information (the "data controller") is:

ISA Europe AB, organisation number 559308-3883, Abiskovägen 30, 162 58 Vällingby, Sweden.

Our group company in the United States supports our relationships with organisations in the United States and handles personal information only on our instructions.

• Privacy questions: privacy@internationalsportsalliance.com
• Our representative in the United Kingdom: privacy@internationalsportsalliance.com. Members in the UK can contact our representative about anything to do with their personal information.

Section 3

Information we collect

When you join

• Login details: your email address and password.
• Who the membership is for: whether you are registering yourself or someone else. If a parent or guardian registers a young athlete, we also collect the parent or guardian's name and contact details.
• Personal details: first and last name, date of birth and age, gender, mobile phone number, postal address and country of residence.
• Language: the app language you choose.
• Sport details: your primary sport, club or team, and level.
• Health details (optional): any medical conditions (such as asthma, diabetes, epilepsy, a heart condition or ADHD), allergies (such as pollen, nuts, dairy, insect stings or medication), and injuries (such as a past concussion or a knee, ankle, shoulder or back injury) you choose to tell us about, and whether you are currently in rehabilitation. See section 7.
• Your choices: whether you want to receive news and updates by email, and the date you accepted our terms, confirmed you had read this policy and made each choice.

When you use the app

• Membership and purchases: your membership plan, status and renewal dates, upgrades, shop purchases (such as merchandise and coaching sessions), coaching bookings and purchase history. Payments are handled by Revolut. We do not receive your full card details.
• Insurance: your policy details (plan, policy number, coverage region, status and renewal date) and any claim you make for injury, rehabilitation or loss of earnings. Claims can include health information and, for loss of earnings, information about your work and income. See section 8.
• Face scan health check (optional): the scan, your answers to the face scan health questions (including your sex at birth, height and weight), your results and your scan history. See section 6.
• Athlete Connect: the athlete details we share with our recruiting platform provider to create your Athlete Connect profile, and whether you have switched on US college recruiting. See section 9.
• Partner discounts: the discount codes you generate.
• Messages: what you send us and our replies.
• Technical and usage information: device type, operating system, app version, crash reports, IP address, and how you use the Services, such as which news, videos and training content you view.

When you use our website

• Contact and forms: if you contact us or fill in a form on our website, your name, contact details and message.
• Technical information and cookies: your IP address, browser and device type, the pages you visit, your cookie choices, and cookies and similar technologies (see section 16).

From other people and organisations

• A parent or guardian, if they register you.
• Revolut, which tells us whether a payment was successful.
• Our insurer and insurance broker, about your insurance cover and any claim.

What you must give us

To become a member, you must give us your login, personal and sport details, and accept our Terms and Conditions. Without them we cannot provide your membership or your insurance cover. Everything described as optional in this policy is your choice.

Section 4

How we use your information, and our legal reasons

The law requires us to have a legal reason (a "lawful basis") for each way we use your information. We use different reasons for different purposes. We ask for your consent only where the use is truly optional for you.

Where we rely on legitimate interests, we have balanced our interests against yours, and you can object (see section 14). Where we rely on consent, you can withdraw it at any time. This does not affect anything we did before you withdrew.

When you join, you confirm that you have read this policy and accept our Terms and Conditions. Confirming that you have read this policy is not a consent. Receiving news and updates by email is a separate choice, which starts switched off. Saying no to any optional choice never stops you joining or using the Services.

Section 5

Automated recommendations

If you use the face scan health check, the app automatically creates personalised feedback, tips, recommendations and product suggestions from your results. This is done only with your consent and only to give you suggestions inside the app. We do not make decisions about you based only on automated processing that have legal effects or similarly significant effects on you. Your results are never used to decide your membership, your insurance cover, its price or any claim.

Section 6

Face scan health check (optional)

• What it is: a 60-second scan using your phone's camera, which analyses small changes in skin colour caused by blood flow.
• What it measures: wellbeing measures such as heart rate, heart rate variability, breathing rate, blood pressure, stress, energy, sleep quality and general fitness, with scores for physical health, mental health, and sleep and energy.
• Health questions: to work out your results, we ask for your date of birth, sex at birth, height and weight, and whether your parents have high blood pressure, and ask about your sleep, physical activity, smoking, balance, everyday activities, stress and mood. Some of these questions relate to your mental health.
• What you get: an overview of your results, feedback and tips, personalised recommendations, suggested products and inspiration, and a history of your scans so you can follow your progress. We suggest a new scan every 4 weeks.
• Not a medical diagnosis: the results are estimates for general wellbeing. They do not replace medical advice, examination, diagnosis or treatment. Always speak to a doctor about any health concern.
• Your consent: your scan and results are health information, which the law treats as especially sensitive. We ask for your explicit consent in a separate step before your first scan. The face scan is optional, and your membership does not depend on it.
• Who handles it: the face scan is hosted by our app platform provider in Denmark, which processes your scan and results only on our instructions. Face scan data is not transferred outside the EU/EEA.
• Performance coaches: the app suggests talking to an ISA Performance Coach, who can turn your results into a plan. Coaches cannot see your face scan results. If you want a coach to use them, you choose what to show them.
• What we never do with it: we never share your face scan results with our insurer, our insurance broker, brands, partners or any recruiting organisation, except where the law requires it. We never use them for your insurance cover, price or claims, and we never sell them.
• Age: the face scan is blocked for members under 18. It is available only to members aged 18 or over.
• Stopping and deleting: you can delete individual results, or withdraw your consent, at any time in the app or by emailing us. After you withdraw, you cannot use the face scan unless you consent again, and we delete your face scan data within 30 days.

Section 7

Health details you give when you join (optional)

When you join, you can choose to tell us about medical conditions, allergies, and injuries or rehabilitation. This is optional and needs your explicit consent, which you give in a separate step.

• Why we ask: to help keep you safe when you take part in ISA services and events, and so that you have this information to hand if you need to make an insurance claim.
• Who sees it: only ISA staff who need it for these purposes. We do not share it with our insurer or insurance broker unless you choose to include it in an insurance claim. We never share it with brands, partners or recruiting organisations.
• Changing your mind: you can update or remove these details in your profile, or withdraw your consent by emailing us, at any time.

Section 8

Insurance

ISA SafePlay insurance cover is a mandatory part of ISA membership. The insurer is Chubb (the Chubb company named in your insurance documents), and the cover is arranged through our insurance broker. You can see your policy, its terms and the Insurance Product Information Document in the app.

• To arrange your cover, we share your name, date of birth, contact details, address, country of residence and membership details with Chubb and our insurance broker.
• Claims: you can make and follow a claim for injury, rehabilitation or loss of earnings in the app. We pass your claim and the information you include, such as health, injury, work and income details, to Chubb and our insurance broker so it can be assessed and paid.
• Their own responsibility: Chubb and our insurance broker use your information for insurance purposes as independent data controllers, under their own privacy policies, which you can find in your insurance documents.

Section 9

Athlete Connect and US college recruiting

Athlete Connect is ISA's recruiting profile and is part of your membership. You decide who sees it: athletes share their Athlete Connect profile with college coaches for recruitment purposes. US college recruiting is a separate, optional step that makes your profile available to colleges and recruiting partners in the United States.

• Our recruiting platform provider: Athlete Connect runs on a recruiting platform operated by our recruiting platform provider, a company based in Europe. When you join, we automatically share your athlete details with them to create your Athlete Connect profile. Your profile is stored in Europe. On the platform you can add more to your profile, such as photos, videos, results and academic information.
• Athlete details we share: your name, date of birth, gender, contact details, country, sport, club or team, and level.
• What we never share: your health details, your face scan results or your insurance information.
• Sharing with college coaches: you share your Athlete Connect profile with college coaches for recruitment purposes. Coaches see your profile only when you share it with them, and they use it only to consider you for recruitment.
• US college recruiting (optional): if you switch this on, you can share your Athlete Connect profile with college coaches in the United States, and we may introduce you to US recruiting partners, such as college associations and college scouting services, for recruiting into US college sport. Your details will then be available in the United States (see section 11).
• Fees: ISA may receive a fee from recruiting partners if you enrol in their programmes after we introduce you.
• Their own responsibility: our recruiting platform provider and US recruiting partners each use your information for recruiting under their own privacy policies. We will tell you who they are if you ask.
• Your choices: you can switch US college recruiting off at any time in Your Profile. We will then stop sharing and tell our recruiting platform provider and US recruiting partners. If you do not want an Athlete Connect profile at all, you can close it in Your Profile or by emailing us, and we will ask our recruiting platform provider to delete it. Recruiting partners handle information they have already received under their own privacy policies, and you can also ask them directly to delete it.
• Young athletes: for athletes under 18, only a parent or guardian can switch on US college recruiting or share the athlete's profile with college coaches.

Section 10

Who we share your information with

We do not sell your personal information. We share it only with the types of organisations below. If you would like the names of the organisations that have received your information, ask us and we will tell you.

• Our app platform provider in Denmark, which builds, hosts and supports the app and the face scan on our instructions, under a data processing agreement, using only subcontractors based in the EU.
• Revolut, which processes card and Revolut Pay payments. If you choose to use Revolut Pay or open a Revolut account, Revolut's own terms and privacy policy apply to that.
• Chubb and our insurance broker, for your insurance (section 8).
• Our recruiting platform provider, which runs Athlete Connect; college coaches you choose to share your Athlete Connect profile with for recruitment; and US recruiting partners only if you switch on US college recruiting (section 9).
• Performance coaches, who receive your name, contact details and booking information when you book a coaching session. They cannot see your face scan results or health details, unless you choose to show them yourself.
• Our group company in the United States, on our instructions (section 2).
• Partner brands: when you generate a discount code or visit a partner's shop, you leave the ISA app and the partner's own privacy policy applies. We do not send your personal information to partners.
• Other service providers that help us run the Services, only on our instructions and under contract. These include our website hosting, content delivery and security providers, our font provider, our cookie consent provider and email delivery. Some of them are based in the United States.
• Authorities, courts and professional advisers, where the law requires it or to protect our rights.
• A new owner, if ISA is reorganised, merged or sold. They must continue to protect your information in line with this policy.

Section 11

International transfers

Your membership, insurance, face scan and Athlete Connect information is stored in the EU/EEA. The app and the face scan are hosted in Denmark.

Some information leaves the UK and the EU/EEA:

• If you switch on US college recruiting, your athlete details are shared with US recruiting partners, and you can share your Athlete Connect profile with college coaches in the United States.
• Our group company in the United States may handle information on our instructions.
• Website hosting, content delivery and security: some of the providers that host, deliver and protect our website are based in the United States, so technical information such as your IP address and browser details may be processed there.

When we send information to a country without an official "adequacy" decision, we protect it with the European Commission's standard contractual clauses and, for information about UK members, the UK International Data Transfer Addendum. You can ask us for a copy.

Section 12

How long we keep your information

When we no longer need information, we delete it or make it anonymous so it can no longer identify you.

Section 13

Children and young athletes

• Members aged 18 or over register themselves.
• Athletes under 18 must be registered by a parent or guardian, who agrees to our terms, makes the choices in this policy on the athlete's behalf and can manage the account.
• The face scan health check is blocked for members under 18.
• For athletes under 18, only a parent or guardian can switch on US college recruiting or share the athlete's profile with college coaches.
• If we find that we hold information about a child without the agreement of a parent or guardian, we will delete it.

Section 14

Your rights

You have the right to:

• get a copy of your personal information
• have incorrect information corrected
• have your information deleted
• limit how we use your information
• receive your information in a format you can take elsewhere, or have it sent to another organisation
• object to uses based on our legitimate interests
• object at any time to direct marketing
• withdraw your consent at any time
• not be subject to decisions based only on automated processing that significantly affect you

Some rights have conditions set by law. For example, accounting records may be retained for six years after the end of the financial year they relate to, or longer where Swedish accounting law requires (section 12), even if you ask us to delete them. To use any right, email privacy@internationalsportsalliance.com or use the options in the app. We reply within one month. If a request is complex, we may take up to two additional months to resolve it. We will inform you within 30 days of your original request and explain why an extension is required. We may need to confirm your identity first. Using your rights is free.

Section 15

Managing your choices and deleting your account

• News and updates: switch this on or off in Your Profile, or use the unsubscribe link in any email. Push notifications can also be switched off in your phone's settings.
• Health details and face scan: remove your details, delete results or withdraw consent in Your Profile, or email us.
• Athlete Connect: switch US college recruiting on or off in Your Profile. For athletes under 18, a parent or guardian makes these choices (section 13). If you do not want an Athlete Connect profile at all, you can close it in Your Profile or by emailing us, and we will ask our recruiting platform provider to delete it.
• Deleting your account: in the app under Your Profile, or at https://internationalsportsalliance.com/delete-account. Cancelling your membership does not delete your account. When you delete your account, we delete your information within 30 days, except records we must keep by law, such as accounting records, and insurance records we must keep under section 12.

Section 16

Cookies

Our website uses cookies and similar technologies, such as small files stored by your browser. Some are needed for the website to work and to keep it secure, for example to protect it against automated bots. These are used without asking. Others, such as analytics, are used only if you agree through our cookie banner. You can accept, reject or choose by purpose, and change your choice at any time through the cookie settings link in the website footer. Our Cookie Policy lists the cookies we use: https://www.iubenda.com/privacy-policy/63908751/cookie-policy

Section 17

How we protect your information

We protect your information with technical and organisational measures. These include encryption when information is sent and when it is stored, hosting in a secure data centre in Denmark, daily backups and a disaster recovery service, and limiting access to people who need it and are trained to handle it. Our app platform provider is certified to the ISO 27001 information security and ISO 27701 privacy standards. No system is completely secure. If a security incident is likely to put you at high risk, we will tell you without delay.

Section 18

Contact us and complaints

Email: privacy@internationalsportsalliance.com

Post: ISA Europe AB, Abiskovägen 30, 162 58 Vällingby, Sweden

UK representative: privacy@internationalsportsalliance.com (marked for the attention of our UK representative)

If you are unhappy with how we handle your information, please contact us first so we can put it right. You also have the right to complain to a data protection authority:

• Sweden: Integritetsskyddsmyndigheten (IMY), imy.se
• United Kingdom: Information Commissioner's Office (ICO), ico.org.uk
• or the data protection authority in the country where you live or work.

Section 19

Changes to this policy

We update this policy when our Services or the law change. The date at the top shows the latest version. If we make important changes, we will tell you in the app or by email before they take effect, and ask for your consent again where the law requires it.