Privacy Policy

1. Who We Are

AMSC Performance ("we," "us," or "our") is an athletic performance training company based in Kenya. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at amsc-performance.vercel.app (the "Site").

2. Legal Basis

We process personal data in accordance with the Kenya Data Protection Act, 2019 (DPA) and, where applicable, the EU General Data Protection Regulation (GDPR). Our lawful bases for processing are:

• Your consent (e.g., submitting an application form)
• Legitimate interest (e.g., improving our services and website)
• Performance of a contract (e.g., delivering training programs you enrol in)

3. What Data We Collect

We collect personal information through the following channels:

a) Application Form (Tally.so)

When you apply for a training program, we use a third-party form service, Tally.so, to collect information such as your name, email address, phone number, sport, and training goals. Tally.so processes this data on our behalf. Please review Tally.so's Privacy Policy for details on their data handling.

b) Instagram Feed (Behold.so)

Our Site displays a live Instagram feed using a widget provided by Behold.so. This widget may load content from Instagram's servers and Behold's CDN. It does not collect your personal data, but your browser may make requests to these third-party servers. See Behold.so's Privacy Policy.

c) Program Waitlists (e.g. AMSC Off Pitch)

When you join a program waitlist, we collect your first name, email address, WhatsApp number, playing position, level and age range, and, if you choose to give them, your Instagram handle and whether you want to be considered for early access. We also record how you reached the page (for example, the Instagram app or a link with a campaign tag), the website that referred you, and your country as detected from your connection. We do not store your IP address.

We only contact you with your consent. Joining a waitlist requires ticking a box agreeing to be contacted by email and WhatsApp about that program (build updates, early access and launch news) and to have your number added to that program's early access WhatsApp community. A separate, optional box lets you also be contacted about other AMSC Performance programs and services. We record which wording you agreed to and when. For anyone under 18, we also ask for confirmation that a parent or guardian has agreed before they join.

Every email we send includes an Unsubscribe link. Using it stops all further waitlist and marketing emails and WhatsApp messages; we keep a record that you unsubscribed so that you are not contacted again, and we remove you from the WhatsApp community. You can also leave the WhatsApp community, or ask us to stop messaging you there, at any time. WhatsApp is operated by Meta: other members of a WhatsApp community may be able to see your number and profile depending on the community's settings and your own WhatsApp privacy settings. Waitlist data is stored with our database provider, Supabase, and emails are sent through Resend. Both act as processors on our behalf and may store data on servers outside Kenya. Waitlist data is only accessible to AMSC staff.

d) Hosting & Server Logs (Vercel)

Our Site is hosted on Vercel. Vercel may automatically collect technical data such as your IP address, browser type, and access times for security and performance purposes. See Vercel's Privacy Policy.

4. How We Use Your Data

• To process and respond to your training program applications
• To communicate with you about our services
• To improve the Site and our offerings
• To comply with legal obligations

5. Data Sharing

We do not sell your personal data. We share data only with the third-party service providers listed above (Tally.so, Behold.so, Vercel, Supabase, Resend) as necessary to operate the Site and process applications. These providers act as data processors on our behalf or as independent controllers for their own services.

6. Cookies & Tracking

Our Site itself does not set first-party cookies. However, the third-party services embedded on our Site (Tally.so and Behold.so) may use cookies or similar technologies. You can manage cookies through your browser settings or via the cookie preferences banner on our Site.

7. Data Retention

Application data submitted through Tally.so is retained for as long as necessary to process your application and for a reasonable period thereafter for record-keeping. You may unsubscribe from our emails and WhatsApp messages at any time using the link in any email, and you may request deletion of your data at any time by contacting us.

8. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

• Be informed about how your data is processed
• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability

To exercise any of these rights, contact us at the details below.

9. Data Security

We use industry-standard measures to protect your information, including HTTPS encryption in transit and secure third-party platforms. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our youth training programs may involve minors. We require parental or guardian consent before collecting personal data from individuals under 18. If you believe a minor has submitted data without consent, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

12. Contact Us

For privacy-related enquiries or to exercise your data rights, contact AMSC Performance via Instagram at @amscperformance.