Privacy policy

This policy explains what personal data the KICK IT website collects, why, and what your rights are. KICK IT is a charity football event at UNILAG Field, Akoka, Lagos, on 23 October 2026. We follow the Nigeria Data Protection Act 2023 (NDPA).

Who we are

The data controller is Starlight Consulting, which organises KICK IT and runs this website. Betano is the event sponsor. Betano does not run this website, and we don't give Betano your personal data.

What we collect

• Get involved form (Register, Donate, Volunteer, Sponsor): your name, phone or WhatsApp number, email address (optional), and the answers for the role you choose. That could be how many people are coming, the cash amount or items you'd like to give, where you'd like to help, or your organisation. We also record your consent to be contacted.
• Tickets: your name, phone number and how many tickets you book.
• Directory applications (players, clubs, agents, scouts): the details you enter, any photo or logo you upload, and the consents you give. For a player, this includes their name, date of birth, position, club and football information, plus the parent or guardian's name and contact details.
• On match day: the time you were checked in at the gate.
• Team accounts: username, a securely hashed password, and login sessions for KICK IT team members.
• Technical data: like every website, our hosting provider records basic server logs, such as your IP address, browser type and the pages requested, to keep the site running and secure.

• Raffle tickets: your full name, email, phone (optional), how many tickets you bought, and your confirmation that you're 18 or over. We use these to issue your numbers and to verify a winner. Winners are shown publicly by first name, last initial and number only.
• Online donations: your name (unless you give anonymously), email, phone (optional) and the amount. Your name and amount appear on the public tally, or "Anonymous" if you choose.

Online payments for donations and raffle tickets are handled by Flutterwave on its own secure page. We receive only the confirmation: amount, method, reference and time. We never see or store card or bank details. You can also pledge cash or kit, and the team will arrange it with you directly.

Why we use it, and our lawful basis

• Organising the event: planning numbers, check-in, volunteers and sponsors. Our basis is your consent, and taking the steps you've asked for.
• Following up on donations, sponsorship and volunteering by phone or WhatsApp. Our basis is your consent, given on the form.
• The directory: showing a listing or profile only where you (or, for a child, their parent or guardian) have agreed. Our basis is consent.
• Reporting on the event, such as turnout and total raised, using totals rather than identifying anyone. Our basis is our legitimate interest in reporting on a charity event.
• Keeping the site secure: our legitimate interest.

Children

Many of the players are under 18. We only process a child's personal data with the consent of their parent or guardian, as the NDPA requires. A child's directory profile is published only when a parent or guardian has agreed. A child's photo is shown only with separate photo consent. A child's date of birth and their guardian's contact details are never shown publicly. Agents and scouts are never given children's contact details.

What's public

Only directory listings and profiles that have been agreed to are public. Public player profiles show football information only. Clubs' and agents' contact details are shown only if they ask for them to be. Everything you send us through the forms stays private to the KICK IT team.

Who we share it with

We do not sell your data, and we don't share it with sponsors or anyone else for marketing. We use these services to run the site:

• Our hosting provider (HostAfrica), which stores the website and its database.
• Google Fonts, which supplies the site's headline font. Your browser requests it from Google, which sees your IP address.
• Flutterwave, our payment provider, if you donate or buy raffle tickets online. Flutterwave processes your payment under its own privacy policy.
• Google Maps, but only if you tap "Show map" on the venue section.
• WhatsApp (Meta), but only if you choose to message us or share the event through it.

We may also disclose data where the law requires it.

Cookies

We don't use advertising or analytics cookies. The site sets a csrftoken cookie when you use a form, to protect against forged submissions. Team members also get a sessionid cookie when they log in. Both are strictly necessary for the site to work.

How long we keep it

We keep your data, including event sign-ups, tickets, check-ins and directory listings, until you ask us to delete it. You can ask at any time (see Data protection). A photo from a directory application we reject is deleted straight away.

Your rights

Under the NDPA you can ask to see, correct or delete your data, withdraw your consent at any time, object to or restrict how we use it, and get a copy of it to take elsewhere. See Data protection for how to make a request. If you're unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC).

Changes

We'll update this page if anything changes, and show the new date at the top.