Privacy Policy

What we collect

FTBL Exchange is a football recruitment platform for players, agents and clubs, and a person checks every account before it goes live. We collect the information you give us when you sign up and complete your account (your name, contact details including a WhatsApp number with its country code, and role; for players, your Transfermarkt page and a link to your highlights; for clubs, the club and your role there; for agents, whether you are a FIFA licensed agent, an intermediary or a scout, and for FIFA licensed agents a licence number and, if you choose to give it, a copy of the licence card) and, for players, the professional profile data we lawfully source from Transfermarkt, Sofascore and FotMob under legitimate interest, with Wyscout statistics where an export has been uploaded.

We keep every WhatsApp number your account gives us, on your account, on your own player profile or on the page of an agency you run, including a number you later replace, with the date we first recorded it and the last date it was on your account, profile or agency page, so that changing your number never erases the old one.

If we wrote to you and you have no account

We write to people working in professional football about FTBL Exchange. A business contact address reaches us in one of two ways: it was given to us directly, usually in person through working in the game, or it is published by an agency or a club as a contact for that business. We hold the address, a name where we have one, the organisation, and a record of what we sent and whether it was opened or clicked.

We never buy lists, and we do not use these addresses for anything but writing to you about FTBL Exchange. Every message carries a one-click unsubscribe, which stops all of it immediately. You can also reply and ask to be removed, or write to info@agencyfour.app, and we will delete the record, keeping only your address on our list of addresses we must not email, so that we never write to you again unless you open an account with us. Ask us at any time what we hold about you.

Lawful basis

Account data for players, agents and clubs: consent (you signed up). Player profile data: legitimate interest, for career visibility to approved clubs, agents and players on FTBL Exchange and to the people they share it with by link, together with the agent's warranty that he represents the player and, where the player registered himself, the player's own consent. The record of the WhatsApp numbers an account has given us, and the identity record we keep after an account closes: legitimate interest, in detecting and preventing fraud and misuse of FTBL Exchange and in establishing, exercising or defending legal claims. The record of a removal request: legitimate interest, in being able to show that we carried it out and in establishing, exercising or defending legal claims.

Who sees your data

Approved players, agents and clubs, and our admins, can see players' profiles, including the contact details on them, and agents' profile pages. Nothing is listed publicly, but a profile or a request can be opened without an account by anyone holding a share link to it. A player, his agent, whoever posted a request he was proposed to, and our admins can send such a link, and whoever posted a request can share the request itself without the club's name. Search engines are told not to crawl profiles.

The WhatsApp number on a player's profile is the number on the account that owns the profile: the player's own account if he has one, otherwise the account of the agent who added him. A profile with no owner account, such as one our admins added, shows the number entered on the profile itself, if one is. The number is never taken from an agency, or from another agent who represents him. Members see it when they tap for it, and so does anyone who opens the profile through its own share link, which the player, his agent or our admins send; on the profile, only the account it belongs to sees it without a tap. We record every time it is shown that way, who asked for it if they were signed in, and whether it was through a share link. There is a daily limit on how many numbers one account can reveal, and on how many can be revealed through share links from one internet address, for one profile and in all. Through its own share link, a profile shows the same contact details members see: the agent or agency, the email on file and the WhatsApp number on a tap. To anyone who is not a member, a profile opened from a list of the players proposed to a request shows no contact details at all.

A club or agent who posted a request can be shown the WhatsApp number on the account of whoever put a player forward to it, so they can ask about that player. We record every time a number is shown and who asked for it.

An agent's page shows no WhatsApp number. An agency's page shows the WhatsApp number given for the agency, with a Contact on WhatsApp button, to every approved player, agent and club and to our admins.

Only our admins can see the record of the numbers an account has given us, the identity record we keep after an account closes, and the record of a removal request. None of them is ever shown to other members, on a profile or on any other page they can open, or through a share link. We pass them on only where the law requires us to, or where we need to for the reasons we keep them: to our legal advisers, a court or the other side in a legal claim, or to the police or a football authority when we report fraud or misuse.

Messages

Messages sent through FTBL Exchange are deleted automatically 90 days after they are sent. We do not read them in the ordinary course of running the platform, and we access a conversation only where the law requires it or one of the people in it reports the other. If you delete your account, the messages you sent are deleted with it.

Storage & security

Data is stored on Supabase (Postgres, encrypted at rest) in its Seoul region, outside the EU and the UK. Row-level security policies restrict access by role. FIFA licence images are private and only visible to the licence holder and FTBL Exchange admins.

Your rights

You may ask for a copy of your data, or for it to be deleted, at any time. A copy includes the WhatsApp numbers we hold for your account. Signed in, you can ask for your account and your profile to be removed on the Remove my profilepage, and we process it within 7 days. A request is taken only from the account it is about, so nobody can ask for somebody else's profile to come down. If an agent added a profile about you and you have no account, sign up as a player to claim it, or write to us at the address below and we will check who you are before removing it.

When we remove an account, we delete its data, whether you asked us to or we removed it ourselves. The one difference is the record of the email we sent. When you ask, we delete it by your account and by your email address. When we remove an account ourselves, we delete the records linked to the account, but not those we hold only against an email address, such as a delivery report or an email sent before the account was opened, because anyone can type any address when signing up; whoever holds that address can ask us to delete them. We may keep one copy of the data we delete, messages included, for no more than 30 days, so that a removal made in error can be reversed or a dispute answered. After that the copy is deleted.

If you are an agent, removing your account does not remove the player profiles you added, because each is the player's, or the page of an agency you ran. The WhatsApp number on your account stops showing on those profiles. A profile no account owns then shows the number entered on the profile itself, if one is, and that number and the other contact details you put on them, such as an email address, stay with them. Say so in your request if you want the profiles removed too, or your details taken off them.

What we keep after a removal

There are three exceptions to that deletion. The first is a short identity record, kept for every account that closes, whether it belonged to a player, a club, a FIFA licensed agent, an intermediary or a scout, and whether you asked us to remove it or we removed it: the name and email addresses on the account, every WhatsApp number we held for it (on the account, on its own player profile or on the page of an agency it ran) with the dates described above, the FIFA licence number on the account when it closed, if it had one, the account's identifier, whether it was a player, a club or which kind of agent, and the date it closed and why.

The second is a request to remove data, whoever made it, with an account or without one: the name and email address it gave, what it asked us to remove and the reason given, if any, and what we did about it and when.

The third is an email address on our list of addresses we must not email, because it unsubscribed or asked us to stop, a message to it bounced or it reported one as spam. The address stays on that list, so that we never email it again: after a removal you asked for, with the date, the reason and whether it stopped all our email or only marketing, and nothing else; after a removal we made ourselves, as it was, because the list is kept against the address and not the account. Our lawful basis is our legitimate interest in respecting that choice and in not sending email that is unwanted or cannot be delivered.

We keep the identity record for six years from the date the account closed, and the removal request for six years from the date we dealt with it, and then delete them. We keep the identity record to detect and prevent fraud and misuse of FTBL Exchange, for example an account we removed registering again under another name, the removal request to show that we carried it out, and both to establish, exercise or defend legal claims. Only our admins can see them. Our lawful basis is our legitimate interest in those purposes.

Contact

Privacy questions: info@agencyfour.app