Last updated: 23 September 2026
Who we are
This website is run by Cliff Ballers, a youth basketball academy and a brand of Cliff Sport & Fitness Hub, located at No 10 Arc Ajayi Close, Nigerian Army Post Housing Development Scheme Phase 1, Kurudu, Abuja, Nigeria 900109. We are the data controller for the personal data described here.
Questions or requests about your data: call or WhatsApp 0817 291 6655, or visit us at the address above.
What we collect and why
- Registration form — player or parent name, a phone number or email, chosen program and preferred schedule. Used to contact you and arrange training.
- Online payments — payer name, email, phone (optional), the program and tier paid for, the amount, payment status and reference. Used to confirm payment, issue your receipt and gate pass, and keep financial records. If your email or phone matches a registration, we link the two.
- Gate check-ins — when a pass is scanned, we record which pass and the date and time. Used to enforce single-use and once-per-day passes and as an attendance record.
- Security data — your IP address is used briefly to limit repeated form submissions and sign-in attempts (spam and abuse protection). It is deleted automatically within about a day.
- Staff accounts — for coaches and admins only: email, a securely hashed password, their role, and a log of changes they make in the admin console.
We do not use advertising or analytics trackers, and we do not sell or rent personal data.
Card payments
Payments are processed by Paystack. You enter card or bank details on Paystack's own secure checkout page — we never see or store your card details. We receive only a payment reference, the amount, the status and the payment method. Paystack handles your payment data under its own privacy policy and sends your email receipt.
Children
Many of our players are under 18. Registrations and payments for a minor should be made by a parent or guardian, whose contact details we then use. We collect only what is needed to run training and do not publish players' personal details. Photos shared on this site or our social media are of academy activities; if you would like a photo of your child removed, contact us and we will take it down.
Legal basis
Under the Nigeria Data Protection Act 2023 we process your data because it is needed to provide the training or service you asked for (contract), to meet legal and accounting obligations, and for our legitimate interest in keeping the site and payments secure. Where we rely on consent, you can withdraw it at any time.
Where your data is stored
- Supabase — our database, staff sign-in and uploaded photos. Hosted in London, United Kingdom.
- Vercel — runs and serves this website; keeps short-lived server logs (which can include IP addresses) for troubleshooting.
- Paystack — processes payments (see above).
This means your data is transferred outside Nigeria. We use providers that apply industry-standard security, including encryption in transit and access controls, and we limit access to our own staff: registrations, payments and check-ins are visible only to authorised admins.
How long we keep it
- Payment records: as long as needed for accounting and legal requirements.
- Registrations and check-ins: while you train with us and for a reasonable period after.
- IP addresses used for abuse protection: about a day.
You can ask us to delete your data sooner, subject to records we must legally keep.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your data, or restrict how we use it;
- send your data to you or another provider in a usable format;
- stop processing that relies on our legitimate interests or your consent.
Contact us using the details above and we will respond promptly. If you are unhappy with our response, you can complain to the Nigeria Data Protection Commission (NDPC).
Cookies
We use only the cookies needed for staff to sign in. See our Cookie Policy for details, including the Google Maps embed on our contact page.
Changes to this policy
We may update this policy as the site changes. The date at the top shows when it was last updated.
