1. Introduction

This Privacy Policy explains how PLYAZ Ltd (“PLYAZ”, “we”, “our”, or “us”) collects, uses, stores, and protects your personal information when you access or use the PLYAZ website, mobile application, and related services (collectively, the “Platform”).

PLYAZ is committed to protecting your privacy, ensuring transparency in data use, and complying with all applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

Current Platform Scope: At this stage, PLYAZ operates as a community and networking environment only. Users can create verified profiles and engage with other members of the football community.

No financial transactions, campaign funding, or payments are currently active.

PLYAZ Ltd acts as the data controller responsible for your personal data.

2. Scope of This Policy

This Privacy Policy applies to all users of the Platform, including:

• Released or semi-professional players;

• Licensed agents and intermediaries;

• Professional football clubs, academies, and governing bodies;

• Supporters and verified football professionals.

PLYAZ does not accept users under the age of 18.

By registering for an account, you confirm that you are at least 18 years old.

3. Data We Collect

We collect the minimum personal data necessary to operate our community platform securely and lawfully.

3.1 Information You Provide Directly

• Account and Profile Information: Name, email, phone number, date of birth (for age verification only), nationality, location, club or organisation affiliation, and role (e.g., player, agent, club representative).

• Verification Data: Government-issued ID, agent licence, or proof of professional affiliation.

• Profile Content: Photos, videos, biographies, achievements, and general information you choose to share.

• Communications: Messages, support requests, and emails exchanged with PLYAZ.

3.2 Information Collected Automatically

• Device and log data (IP address, browser type, device identifiers, operating system).

• Usage data (page interactions, time spent, access times, navigation patterns).

• Cookies and tracking technologies (see Section 10).

3.3 Information from Third Parties

• Verification and licensing data from the FA, FIFA, or equivalent governing bodies.

• Referrals or introductions from verified partners.

Note: PLYAZ does not currently collect any payment data or receive AML/KYC information. These functions will be managed solely by FCA-regulated payment partners once transactional features are introduced.

4. How We Use Your Information

We process your personal data for the following lawful purposes:

Purpose	Legal Basis
To create and manage your user account	Performance of a contract
To verify identity, licensing, and eligibility	Legal obligation / legitimate interest
To maintain platform security and compliance	Legitimate interest / legal obligation
To provide customer support and respond to enquiries	Legitimate interest
To communicate service updates and changes	Legitimate interest
To share anonymised insights and community statistics	Legitimate interest
To send marketing materials (only with your consent)	Consent

PLYAZ does not engage in automated decision-making that produces legal or significant effects on users.

5. How We Share Your Information

PLYAZ does not sell your personal data.

We share limited information only where necessary and under strict legal and contractual safeguards:

• Verification Providers: For identity and licensing checks.

• Technology & Hosting Providers: For secure operation and storage using GDPR-compliant infrastructure.

• Compliance & Regulatory Bodies: If required for legitimate investigations or regulatory checks.

• Legal & Law-Enforcement Authorities: When required by applicable law or court order.

All third parties handling your data must meet UK GDPR and confidentiality standards.

Note: Payment partners and KYC processors are not yet active. When introduced, PLYAZ will update this section to identify those partners and describe the associated data-sharing processes.

6. Data Retention

PLYAZ retains personal data only as long as necessary for the purposes outlined in this Policy or as required by law.

Data Category	Retention Period
Account and profile data	While account is active + 24 months after closure
Communications and support logs	12 months from resolution
Anonymised analytics	Indefinite (non-personal data only)

As the Platform does not yet process financial transactions, no financial or payment data is collected or stored.

When retention periods expire, data is securely deleted or anonymised.

7. Data Security

PLYAZ implements robust technical and organisational controls to safeguard your information, including:

• Encrypted data transmission (SSL/TLS);

• Encrypted storage and restricted access by role;

• Continuous security monitoring and regular audits;

• Incident response and breach-notification procedures.

In the event of a data breach, affected users and the Information Commissioner’s Office (ICO) will be notified as required by law.

8. International Data Transfers

All personal data is stored and processed within the United Kingdom or European Economic Area (EEA).

If data must be transferred outside these regions, PLYAZ ensures protection through:

• UK Government adequacy decisions; or

• Standard Contractual Clauses (SCCs) approved by the ICO.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Access: Obtain a copy of your data.

• Rectification: Correct inaccurate or incomplete information.

• Erasure: Request deletion of your data when legally permissible.

• Restriction: Request limited processing under certain conditions.

• Portability: Receive your data in a machine-readable format.

• Objection: Object to certain processing activities.

• Withdraw Consent: Withdraw consent for marketing at any time.

To exercise these rights, contact privacy@plyaz.net.

PLYAZ will respond within one calendar month, in accordance with UK GDPR.

10. Cookies and Tracking Technologies

PLYAZ uses cookies and similar technologies to:

• Enable essential site functionality;

• Analyse usage and performance;

• Enhance user experience;

• Maintain session security.

You can control or disable cookies in your browser settings. Some functions may not operate properly if cookies are disabled.

Further details are provided in our Cookie Policy.

11. Marketing Communications

PLYAZ may contact you for legitimate operational reasons such as account updates or service notifications.

Marketing or promotional emails are sent only with your explicit consent.

You may opt out at any time via the unsubscribe link in our emails or by contacting privacy@plyaz.net.

12. Third-Party Links

The Platform may include links to third-party websites or tools.

PLYAZ is not responsible for their privacy practices or content.

We encourage you to review their privacy policies before providing personal information.

13. Changes to This Policy

PLYAZ may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes.

Any updates will appear on this page with an updated “Effective Date”.

Material changes will be communicated to users via email or in-platform notice.

14. Contact Information

Data Controller: PLYAZ Ltd Registered Office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Registered in England and Wales – Company No. 14963617

📧 Email: help@plyaz.co.uk

🌐 Website: https://plyaz.net

If you have concerns about our data practices, you may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk or by phone at 0303 123 1113.