KIPURA takes the protection of personal data seriously, especially that of the young goalkeepers it coaches. For each use, this policy explains what data is processed, why, on what legal basis, who receives it, how long it is kept and how to exercise your rights.
KIPURA, a French SAS with a share capital of 1,500 €, 87 quai Colbert, 76600 Le Havre, France, Le Havre Trade Register 105 975 346, represented by its President, Gilles Fouache. Contact for any question about your data: gilles.fouache@kipura.fr.
Data: name, phone, email, information about your practice entered in the form or the assistant (profile, region, date of birth, level, club, goal, kit size, postal address for a registration request), page of origin, IP address of the submission. Speaking requests: requester's identity and position, organisation, stated need.
Purpose: answering your enquiry, contacting you, preparing a proposal.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR); for the IP address, KIPURA's legitimate interest in protecting itself against abusive submissions (Art. 6(1)(f)).
Retention: 3 years after your request if no service is ordered; the IP address is erased after 12 months.
Data: identity and contact details of the client and the participant, participant's date of birth and club, kit size, postal address, identity of the legal guardian and certification of parental authority for a minor, optional practical information, service and price chosen, proof of acceptance of the terms of sale (date, time, version), payment status. KIPURA never has access to card details, which are entered directly with Stripe.
Purposes: performing the service, preparing the participant's attendance, collecting payment, invoicing, evidencing the contract.
Legal basis: performance of the contract (Art. 6(1)(b)) and legal accounting and tax obligations (Art. 6(1)(c)).
Retention: 10 years for accounting records; 5 years after the end of the service for evidence of the contract; free-text practical information is erased 3 months after the service.
Data: name, email, phone, optional message, requested session.
Purpose: telling you if a place becomes available, for that session only.
Legal basis: steps taken at your request (Art. 6(1)(b)).
Retention: 12 months at most; you may ask to leave the list at any time.
Data: player record (identity, contact details, club, position, sporting information), profile photo, coaching documents (video analyses, reports, profiles, certificates), videos and photos taken during sessions for technical analysis and, for a coaching programme, the signed agreement and its annexes (identity of the legal guardians, any guarantor).
Purposes: providing the coaching, making documents available to the participant in a secure area, managing the contract.
Legal basis: performance of the contract (Art. 6(1)(b)).
Access: profile photos and documents are stored in locations closed to any direct access from the Internet; they are only served to KIPURA (back office), to KIPURA coaches logged into the staff area (personal email and code), and to the participant logged into his or her area (email and personal code). The code printed on a participation certificate lets a third party check its authenticity: only the first name, the initial of the surname and the session are then displayed.
Retention: documents and media uploaded for a session are deleted automatically 90 days after it; the participant's record and photo are kept during the programme and at most 3 years after the last service; an agreement is kept for 5 years after it ends (limitation period).
Publication: no photo or video in which a participant can be identified is published without separate, revocable written consent (article 13 of the terms of sale).
A testimonial is published only with the written consent of its author (and of the legal guardians for a minor), with his or her name and, if desired, photo. Legal basis: consent (Art. 6(1)(a)), which may be withdrawn at any time; the testimonial is then removed from the site.
KIPURA processes data about the independent contractors it works with: identity, contact details, status, sports coaching qualifications and professional card, insurance certificate, social security certificates. Legal bases: performance of the contract; legal verification obligations (French Sports Code, articles L. 212-1 et seq.; due-diligence obligation under article L. 8222-1 of the French Labour Code). Supporting documents are stored outside the public part of the site, for the duration of the collaboration and then 5 years.
Only to the extent necessary:
No data is passed on to a club, a sports agent or a scout without the prior written consent of the adult participant or of his or her legal guardians.
Data is hosted in France. Two providers may transfer some data to the United States: Stripe (payment processing) and Meta (advertising trackers, only if you accept them). These transfers are covered by the European Commission's adequacy decision on the EU-US Data Privacy Framework, to which these companies adhere, and by standard contractual clauses.
Strictly necessary cookies. They make the site work: keeping your session during a booking or in your area, remembering your tracker choice and chosen language (“kp_lang” cookie, one year). They are not used for any advertising tracking and do not require your consent.
Fonts. They are hosted on our own server: no connection is made to Google or any other provider when pages are displayed.
Videos. YouTube or Vimeo videos embedded in the site are only loaded if you click “Play video”; before that click, no connection is made to the platform. Afterwards, it may set its own cookies under its own policy.
Site audience measurement. We count pages viewed to learn what interests our visitors and fix what does not work. This is done with our own tools, on our own hosting, and sets no cookie. No IP address is stored: it is only used to compute a technical fingerprint, recalculated every night with a new key, which makes it impossible, even for us, to link your visits from one day to the next. The data produced is strictly statistical and is passed on to no one. In line with CNIL guidance, this measurement does not require consent. Data is kept for fourteen months at most. If you enable your browser's “Do Not Track” option, nothing is recorded.
Recognising successive visits (with your consent). If you accept trackers, a randomly generated identifier is stored in your browser. It contains no information about you and is only used to know how many times the same person visits the site before booking. It is only used on kipura.fr and disappears as soon as you decline trackers, and at the latest after six months.
Meta advertising (with your consent). When we run campaigns on Facebook and Instagram, we use the Meta pixel, under two identifiers (camps and masterclasses), to: measure which ads lead to bookings; show KIPURA ads to people who have visited the site (retargeting); build audiences of people with similar profiles (lookalike audiences). The information sent is the pages viewed, the opening of a booking form, the completion of a booking with its amount and the sending of a speaking request, together with Meta's technical identifiers. No identifying data (name, email, phone, order reference) is sent. Automatic collection of additional information by the pixel is disabled.
KIPURA and Meta Platforms Ireland Limited are joint controllers for the collection and transmission of this data to Meta; Meta is solely responsible for its further use, described in its privacy policy. You may exercise your rights with KIPURA or with Meta.
These trackers are only set after your explicit consent, given in the information banner. Until you answer, or if you decline, nothing is sent to Meta and the site remains fully usable. Your choice is kept for six months, then you are asked again. Meta cookies are deleted if you withdraw your consent. If you are under 15, ask one of your parents before accepting.
Change your choice at any time: . The same “Cookies” link appears at the bottom of every page. See also the CNIL's guidance on cookies and other trackers.
The site is served over HTTPS. Access to the back office is protected by a one-time code sent by email; the participant and staff areas limit login attempts; documents, photos and supporting documents are kept in locations closed to any direct access and are only served to authorised persons.
You have the rights of access, rectification, erasure, restriction, portability and objection (articles 15 to 21 GDPR), the right to withdraw any consent at any time, and the right to give instructions on what happens to your data after your death. For a minor participant, these rights are exercised by the legal guardians. Write to gilles.fouache@kipura.fr or 87 quai Colbert, 76600 Le Havre, France; you will receive a reply within one month. Proof of identity may be requested in case of reasonable doubt.
If you believe your rights are not respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
Last updated: 11 October 2026. The French version of this policy is the authoritative one.
