Legal

Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how the Aditi Chauhan Foundation (a Section 8 not-for-profit company registered in India), which operates the She Kicks ecosystem and the website shekicksfa.com ("She Kicks", "we", "us", "our"), collects, uses, shares and protects your personal information. It is written to meet both India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the EU/UK General Data Protection Regulation (GDPR), since our website is accessible worldwide.

By using this website or submitting an enquiry, you agree to the practices described here. If you do not agree, please do not use the site.

1. Information we collect

We keep data collection to a minimum. We collect:

• Information you give us through the contact form: your name, email address, phone number and the message you send. You choose what to put in the message.
• Information you send us directly by email, phone or social media when you contact us.
• Basic technical data automatically logged by our hosting provider (Cloudflare Pages) for security and reliability, such as your IP address, browser type and the pages requested. We do not use this to build a profile of you.

We do not run advertising networks, sell your data, or use behavioural profiling.

2. How and why we use your information

• To respond to your enquiry and communicate with you about the academy, club, league, partnerships or the Foundation.
• To process academy or league registrations you request.
• To keep the website secure, working and free of abuse.
• To meet legal, accounting and regulatory obligations.

3. Legal basis for processing

Under the DPDP Act, we process your personal data on the basis of the consent you give when you submit the form or contact us, and for certain "legitimate uses" permitted by the Act. Under the GDPR, our lawful bases are your consent, our legitimate interests in responding to you and running our programmes, and compliance with legal obligations. You can withdraw consent at any time (see "Your rights").

4. Children's data and parental consent

She Kicks works with girls and young players, so we take children's data seriously. If you are under 18, please do not submit your personal information yourself. Registrations and enquiries for anyone under 18 must be made by a parent or legal guardian, who consents to us processing the child's data for the purpose of the enquiry or registration.

In line with the DPDP Act and GDPR, we do not knowingly process a child's personal data without verifiable parental consent, and we never carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has given us data without a guardian's consent, contact us and we will delete it.

5. Who we share your information with

We do not sell or rent your data. We share it only with service providers ("data processors") who help us run the website, and only as far as needed:

• Web3Forms — delivers our contact-form submissions to our inbox.
• Google (Gmail) — the inbox where we receive and reply to your enquiry.
• Cloudflare Pages — hosts and serves the website.
• Google Fonts — serves the website's fonts; your browser requests these from Google, which may receive your IP address.
• Google Analytics — measures anonymous, aggregated website usage. This runs only if you accept analytics cookies (see our Cookie Policy). If you decline, Google Analytics does not run.

We may also disclose information where required by law or to protect our legal rights.

6. Cookies and analytics

Our website does not set any tracking or advertising cookies by default. We use Google Analytics only after you give consent through our cookie banner. You can change or withdraw your choice at any time using the "Cookie settings" link in the footer. Full details, including the specific cookies used, are in our Cookie Policy.

7. How long we keep your data

We keep enquiry and registration data only as long as needed to deal with your request and for a reasonable period afterwards for our records, or as required by law, after which it is deleted. You can ask us to delete it sooner.

8. International transfers

Some of our service providers process data on servers outside your country, including outside India and the EU/EEA. Where this happens we rely on the providers' own safeguards and contractual protections to keep your data secure and treated in line with this policy.

9. How we protect your data

The website is served over HTTPS and we apply reasonable technical and organisational measures to protect your information. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Your rights

Under India's DPDP Act, you have the right to access a summary of your data, to correction and updating, to erasure, to grievance redressal, and to nominate another person to exercise your rights in the event of death or incapacity.

Under the GDPR (for EU/UK/EEA visitors), you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details below and we will respond within the timelines required by law.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. Significant changes will be reflected on this page.

12. Grievance and contact

For any privacy question, request or complaint, contact our grievance point of contact:

You can also reach us any time via our contact page.