This policy describes how The Football Association Limited (“The FA”) will make use of your data when you apply for and attend the FA Leadership Academy (“FALA”).

We may collect, use, and store the following types of personal data about you in connection with your relationship with The FA (including, but not limited to):

• Identity Data: such as your first and last name, gender, pronouns, age at time of FALA and date of birth.
• Contact Data: such as your email address, home address, postcode, telephone number(s), emergency contact name, email and telephone number.
• Social Media Data: such as your Instagram or Twitter handles.
• Image Data: such as a photograph or video you are featured in.
• ED&I Data: such as your gender, ethnicity, religion and sexual orientation (this is collected on an anonymous basis).
• Health Data: such as medical conditions, injuries and disabilities.
• Attendance Data: such as allergies, dietary requirements, religious requirements and clothing size.

We also collect such other information as requested from you, or provided by you, as advised at the time of collection at the point of application, and prior to and during you attendance at the FALA.

We will only use your personal data to the extent which is permitted by law. The table below shows some examples of how might use your personal data, and how we have a lawful basis for those uses:

• Assessing and considering your application to the FALA: Necessary to fulfil the contract entered into with us.
• Managing our relationship with you in relation to your application and (if successful) your attendance at FALA, including communicating with you, managing queries you have and assistance you may require: Legitimate interest (running the FALA and conducting our business
• Using information such as photos and footage collected at our events which you attend: Legitimate interest (promoting the FA, FA Youth Counsel, FALA and the game of football in England) Consent (where advised)
• Communicate with you about completing surveys: Necessary for our legitimate interest (to study your experience of the FAYC, improve our processes and the FAYC
• To carry out appropriate monitoring of equal opportunity.Consent

We may share your personal data with various third parties we use to deliver our services and the FALA, including IT providers, event organisers and third-party contractors.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes (unless you have provided your consent) – we only permit them to process your personal data for specified purposes and in accordance with our instructions.

• Successful Applicants: For 12 months following the conclusion of the FALA for the year you attended.
• Unsuccessful Applicants: For 6 months following the conclusion of the FALA for the year you attended.
• Image Data: For 4 years from the date of the event, or such other length of time as indicated at the time footage is captured.

Under certain circumstances, you may have the following rights in relation to your personal data:

1. A right to access personal data held by us about you (commonly known as a "data subject access request"). You can access the personal data we hold about you on The England Football Community by following the guidance here.
2. A right to require us to rectify any inaccurate personal data held by us about you, though we may need to verify the accuracy of the new data you provide to us.
3. A right to require us to erase personal data held by us about you where there is no good reason for us continuing to process it. This right will only apply where, for example, we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 6 below). Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
4. A right to restrict our processing of personal data held by us about you. This right will only apply where, for example, you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but we require the data for the purposes of dealing with legal claims or due to having overriding legitimate grounds to use it.
5. A right to receive personal data, which you have provided to us, in a structured, commonly used and machine readable format. You also have the right to require us to transfer this personal data to another organisation.
6. A right to object to our processing of personal data held by us about you where we are relying on a legitimate interest (or those of a third party), and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
7. A right to withdraw your consent, where we are relying on it to use your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.
8. A right to ask us not to use information about you in a way that allows computers to make decisions about you and ask us to stop.

If you have any questions about this policy or any other data protection queries you can contact The FA’s Data Protection Team using dataprotection@thefa.com or by writing to Data Protection Officer, Wembley Stadium, PO Box 1966, London, SW1P 9EQ.

If you wish to make a data privacy request, you can do so via our online form, which can be found here.

You also have the right to lodge a formal complaint with the UK Information Commissioner's Office. Full details may be accessed on the complaints section of the ICO's website. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.