Privacy policy

This policy applies to the Hefti Football Academy website, online registration requests and related administrative services. Hefti Football Academy is responsible for the personal data collected through these channels.

We process personal data for the purposes described here and in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

The data collected depends on the service requested. A registration request requires information needed to review the request and prepare the player’s file.

• Guardian information, including identity, contact details, address and identity document information.
• Player information, including identity, date and place of birth, gender, age group and an optional photo.
• File data and documents, including a birth certificate, medical certificate, registration forms and required administrative documents.
• Technical data needed to secure and troubleshoot the website, such as IP address and essential security logs.

We only use personal data for clear purposes connected with academy services and the relationship with families and players.

• Receive, validate and review a registration request and communicate about its progress.
• Create the player record and manage membership, attendance and administrative and sporting follow-up.
• Generate the registration form, J6 document and related administrative documents.
• Meet legal and regulatory duties and protect players and the website.
• Prevent misuse, review security events and resolve technical incidents.

Depending on the situation, processing is based on guardian consent, steps needed before registration and during the relationship with the academy, a legal duty, or a legitimate interest that does not override the individual’s rights.

Data relating to a minor player must be provided by a guardian or another legally authorised person. Uploading a player photo during the request is optional.

Access is limited to authorised academy users, including administration, coaches and supervisors, according to their responsibilities. Hosting and technical providers may process data only as needed to operate and secure the service.

We do not sell personal data. We only disclose it when necessary, with appropriate permission, to meet a legal duty, or in response to a competent authority.

We keep data for as long as needed to review the request, manage the player record, meet legal duties or resolve disputes. It is then deleted or anonymised when it is no longer required.

We use access controls, limited permissions, protection for sensitive files, backups and security monitoring. No electronic transmission or storage method can guarantee absolute security.

Under Law No. 09-08, the individual or the player’s guardian may exercise applicable rights after identity and legal authority are verified.

• Ask for information about the purposes of processing and the recipients of the data.
• Request access to personal data or correction of inaccurate or incomplete information.
• Object to certain processing for serious and legitimate reasons where the law allows it.
• Withdraw consent where processing relies on it, without affecting earlier lawful processing.

To exercise a right or ask a privacy question, contact us at contact@heftiacademy.com or use the contact methods published on the website. We may request limited information to verify identity or guardian authority.

We may update this policy when the website, academy procedures or legal requirements change. The updated version will be published on this page with a revised date.