How We Protect Your Data
XI Ready data security is the set of access, storage, and privacy practices used to handle player and staff information.
Encryption in Transit
All data sent between your device and XI Ready servers is encrypted using HTTPS/TLS. No unencrypted data is transmitted at any point in the platform.
Role-Based Access Control
Access to athlete data is restricted by role. Athletes can only see their own data. Coaches see data for athletes on their squad. Club admins see aggregate data for their organisation. No data is shared across unrelated clubs or squads.
PCI-Compliant Payments
All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment provider. XI Ready never stores card numbers or payment credentials — Stripe handles every transaction securely.
Minor Athlete Data
We treat data for athletes under 18 with extra care. Access is restricted to authorised coaches and staff. Clubs are responsible for obtaining appropriate parental consent for minor athletes. See our privacy policy for full detail on how we handle minor data.
Data Retention and Deletion
Athletes and coaches can request data deletion by contacting us at info.groundforcestrength@gmail.com. We will process deletion requests in line with applicable data protection regulations.