The bang on the head nobody passed on
A knock in a Thursday PE lesson. Her parent logs it in the injury hub.
Saturday, her coach sees it before kick-off, so the return-to-play protocol gets followed.
Security and trust Safeguarding, data protection, and where it all lives
Safeguarding
first.
SHOT is built for youth sport, so safeguarding and data protection are not features sitting on top of the product. They are the shape of it. This page says what we hold, who can see it, and what you can do about it.
What it is for
A policy nobody reads
protects nobody.
Most safeguarding in grassroots sport is a document a club signed once. Ours is structural: it is in how accounts work, what children can and cannot do, and what gets seen by the person who needs to see it. Two examples of what that means on a Saturday.
The incident nobody could find
Something happens at training and a note goes in a coach’s phone, or nowhere.
The safeguarding incident log records it, and the people who need to acknowledge it can. Club administrators and the coaches attached to the team can read it.
Age tiers
Different ages.
Different rules.
Under 13
A parent creates and manages the account, and can set up the young person’s login. A handle is shown rather than a full name, comments from children are off by default, and there are no private messages between adults and children.
13 to 17
The young person uses it themselves, but every account needs guardian approval, and access is cut off if approval is not given. There are no private messages between adults and children.
Parent controls
One parent account covers up to three children, a second parent can be linked by invite, and private details such as emergency contact, medical notes and allergies sit behind the right roles. A safeguarding incident log and an injury hub are built in.
Included on every tier, including free. Safeguarding is not something a club unlocks by paying. A club running SHOT for nothing gets the same age tiers, the same guardian approval and the same controls as anyone else. Incidents can be read by club administrators and the coaches attached to the team.
Your data
Who controls what,
in plain words.
- Clubs act as data controllers for Athlete data. SHOT is the processor.
- SHOT Clubhouse Ltd is the controller for marketing data only.
- An account can be deleted from inside the app.
- Full Subject Access Request support.
- ICO registration and a Data Processing Agreement are available on request.
- Guardian approval is built into every 13 to 17 account, and under-13 accounts are managed by a parent.
UKhosted in AWS eu-west-2, London
Dailybackups
Rolebased access: coach, Athlete, guardian, admin
Sub-processors: AWS, Supabase, Resend, Vercel. Full list on request.
For schools
Evidence for
personal development.
Pupil-level progress evidence across every sport the school offers, multi-sport and multi-term, aligned to the personal development judgement rather than to participation counts. The data comes from lessons and sessions that happened, not from a survey at the end of term.
Free tier.
Same protection.
No card required, and safeguarding and data protection included on every tier.