Privacy Policy

1. Data controller (who we are)

The data controller responsible for the processing of your personal data is:

ScoutNow ("we", "us", "our") is a hockey scouting platform connecting hockey players, coaches, clubs, and agencies. We comply with the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

2. Data we collect

We collect the following personal data that you voluntarily provide:

Account data: email address, password (hashed), full name, date of birth, user type (player, coach, club, or agency).

Player profile data: nationality, secondary nationality, city, position, height, weight, shoots preference, current club, bio, highlight video URLs, EliteProspects link, agent details, expectations, career history, and badges (national team, professional experience, international experience).

Coach profile data: coaching role, nationality, secondary nationality, country, city, current club, years of experience, bio, coaching philosophy, EliteProspects link, certifications (PDF uploads), past teams résumé, private training availability and location, agency details if represented.

Club profile data: club name, country, city, league, club level, website, contact email, contact phone, EliteProspects link, and bio.

Agency profile data: agency name, country, city, website, contact email, contact phone, bio, founded year, languages, services offered, markets served, and EliteProspects link.

Optional profile media: profile photo, club/agency logo, video links (YouTube/Vimeo).

Communications data: messages exchanged between users on the platform.

Technical data: IP address, browser type, device type, log of consent acceptance, and analytics on platform usage (e.g. profile views).

3. How we use your data

We use your data to:

— Provide the ScoutNow platform and its features

— Display your profile to other users according to your settings and visibility preferences

— Enable search and discovery of players, coaches, clubs, and agencies

— Send transactional emails (login links, notifications, important platform updates)

— Generate AI-assisted bios when you request this feature

— Maintain audit logs of consent for legal compliance

— Improve our platform and user experience

4. Legal basis (GDPR)

We process your data on the following legal bases:

Consent (Article 6(1)(a) GDPR): for the creation of your profile and processing of personal data described above. You can withdraw consent at any time by deleting your account.

Contract performance (Article 6(1)(b) GDPR): for processing necessary to provide the platform features you request (account login, messaging, search).

5. Data storage and security

Your data is stored on servers located in Frankfurt, Germany (EU), operated by Supabase. All data is encrypted in transit (TLS) and at rest. We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Sub-processors

We use the following sub-processors to operate ScoutNow. Each is bound by GDPR-compliant Data Processing Agreements (DPAs):

7. Data retention

We retain your personal data for as long as your account is active. When you delete your account:

— Profile data, photos, and content are deleted within 30 days.

— Backups containing your data are purged within 90 days following deletion.

— Consent audit logs are retained for 5 years to comply with legal obligations.

— Anonymous aggregated analytics (with no personal identifiers) may be retained indefinitely.

8. Your rights

Under GDPR, you have the following rights:

Right of access: obtain confirmation of whether we process your data and a copy of it.

Right to rectification: have inaccurate data corrected.

Right to erasure: request deletion of your data ("right to be forgotten").

Right to restriction: restrict processing under certain conditions.

Right to data portability: receive your data in a structured, machine-readable format.

Right to withdraw consent: at any time, with effect for the future.

To exercise any of these rights, contact us at info@scoutnow.eu. We will respond within 30 days.

9. Right to lodge a complaint

If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with the supervisory authority in Slovenia:

10. Age requirement

ScoutNow is only available to users who are 18 years of age or older. We do not knowingly collect data from individuals under 18. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Cookies and tracking

We use essential cookies only — for authentication and session management. We do not use advertising or third-party tracking cookies.

12. International data transfers

Your data is primarily stored within the EU (Frankfurt, Germany). Some sub-processors may transfer data outside the EU for limited purposes; in such cases, transfers are protected by EU Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR.

13. Changes to this policy

We may update this Privacy Policy from time to time. When material changes are made, we will notify users via email or in-platform notification and update the version number above. Continued use of ScoutNow after such changes constitutes acceptance of the updated policy.

14. Contact

For any privacy-related questions or to exercise your rights, contact us at info@scoutnow.eu.