Legal

Privacy Policy

Last Updated 22/08/2025

This Privacy Policy describes how Crystal Talent Agency (“Crystal”, “CTA”, “we”, “our”, or “us”) collects, uses, discloses, and protects personal information when you visit crystaltalentagency.com (the “Site”), interact with our social channels, apply to our Soccer Academy, submit a player/artist/model profile, engage our representation services, or otherwise communicate with us (collectively, the “Services”).

By using our Services, you acknowledge that you have read and understood this Policy. If you do not agree, please do not use the Services.

Who we are & scope

Controller: [Crystal Talent Agency Legal Name], [registered address], [country].


Contact for privacy matters: privacy@crystaltalentagency.com


Applicable laws: We seek to comply with the Nigeria Data Protection Act (NDPA)/NDPR, and where applicable, the GDPR/UK-GDPR, and similar data-protection rules in territories where we operate or target users.

Information We Collect

a) Information you provide directly
  • Identity & contact: name, email, phone/WhatsApp, address, nationality.
  • Talent/Academy applications: date of birth/age bracket, height/weight, position/role, stats, links to highlight videos, photos, CV/resume, parent/guardian details (for minors), medical/fitness disclosures you choose to provide.
  • Professional/representation: contract details, payment/billing contact, bank or payout info (processed via secure third-party providers), availability status, travel/visa documents (where necessary for trials).
  • Marketing & comms: newsletter sign-ups, event RSVPs, survey responses, competition entries.
  • Support & correspondence: messages you send us, records of communications.
Please avoid including sensitive information unless requested (e.g., detailed health data, religion, or other special-category data). If such data is required (e.g., fitness readiness), we will process it only with your explicit consent or where permitted by law.
b) Information collected automatically
  • Usage & device data: IP address, device identifiers, browser type, OS, pages viewed, links clicked, time on page, referring URLs.
  • Cookies & similar technologies: see our Cookie Policy for details.
  • Media embeds: interactions with embedded third-party players (e.g., YouTube/Vimeo) may generate data for those providers.
c) Information from third parties
  • Scouts, clubs, partners, referrers: verification, performance stats, references.
  • Analytics & advertising partners: aggregated insights, audience segments.
  • Social media platforms: if you interact with our pages, or connect via social sign-in (if enabled).

How we use your information (purposes & legal basis)

We process personal information for the following purposes (legal bases in brackets):
  1. Deliver the Services: create accounts, process Academy applications, manage representation, display player profiles, schedule fixtures, share highlights. (Contract; Legitimate interests)
  2. Communications: respond to enquiries, send service updates, trial schedules, or policy changes. (Contract; Legitimate interests)
  3. Marketing (with your choice): newsletters, event invites, new opportunities; you can opt out anytime. (Consent; Legitimate interests—where permitted)
  4. Safety & compliance: fraud prevention, safeguarding minors, legal obligations, regulatory requests. (Legal obligation; Legitimate interests)
  5. Improve Site & Services: analytics, performance, A/B testing, research. (Legitimate interests)
  6. Showcase success stories: with your consent, we may feature names, images, bios, or achievements in case studies and social content. (Consent)
  7. Payments & invoicing: via secure processors; we do not store full card/bank details on our servers. (Contract; Legal obligation)

Sharing & disclosures

We do not sell your personal information. We may share it with:
  • Clubs, scouts, coaches, sponsors, event organizers—for trials, placements, endorsements (as appropriate and, for minors, with parental consent).
  • Service providers/Processors—hosting, CRM, email delivery, analytics, payment processing, file storage, background checks (where lawful).
  • Legal & compliance—to comply with law, enforce our terms, protect rights, safety, or prevent fraud.
  • Business transfers—in the event of a merger, acquisition, or asset sale (you will be notified).

International transfers

Your data may be transferred to and processed in countries outside your home country. Where required, we implement appropriate safeguards (e.g., Standard Contractual Clauses for GDPR) and ensure processors provide adequate protection.

Data retention

We retain data only as long as necessary for the purposes described, including to meet legal and accounting requirements. Typical examples:
  • Academy applications: up to 24 months after decision (unless admitted, then retained for the training relationship duration + statutory period).
  • Representation files/contracts: contract term + 6–7 years (local law dependent).
  • Marketing data: until you withdraw consent or opt out.
  • Site analytics logs: typically 12–26 months, aggregated thereafter.

Children & minors

We are committed to safeguarding young people.
  • Parental/guardian consent is required for applicants under 18.
  • We do not knowingly collect data from children without verifiable consent.
  • Parents/guardians may review, manage, or request deletion of a minor’s data by contacting us.

Security

We use administrative, technical, and physical measures (access controls, encryption in transit, secure hosting, staff training). No system is 100% secure; please notify us immediately of any suspected breach or account compromise.

Links & third-party services

Our Site may contain links or embeds (e.g., YouTube, Instagram). We are not responsible for third-party privacy practices; please review their policies.

Automated decision-making & profiling

We do not make decisions with legal or similarly significant effects solely by automated means. We may use limited profiling (e.g., segmenting by age group/position for trials) to better match opportunities; human review applies.

Changes to this Policy

We may update this Policy from time to time. The “Last updated” date will change and, where required, we will provide additional notice.

Contact us

Email: privacy@crystaltalentagency.com
Postal: [Privacy Officer/DPO], [Crystal Talent Agency], [Address], [Country].