StarAthlete Privacy Policy

StarAthlete ("StarAthlete", "we", "us", "our") operates the website at starathlete.co and the StarAthlete platform, a professional network and marketplace that connects semi-professional athletes with scouts, clubs, agents, coaches, and camp organizers across basketball, volleyball, and handball.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA), among other applicable data protection laws. StarAthlete is a global platform, and as our user base grows internationally we may update this Policy to address additional regional requirements. The version below reflects the protections currently in place as of 19 June 2026.

Data controller: StarAthlete B.V., Eerste Kostverlorenkade 11-4, 1052 EM Amsterdam, Noord-Holland, the Netherlands. KvK: 89389557.
Contact: contact@starathlete.co

StarAthlete is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe someone under 18 has created an account, please contact us at contact@starathlete.co and we will remove the account and associated data.

Depending on how you use StarAthlete, we may collect:

• Account information: your name, email address, and password (stored in encrypted form), and your account role (athlete or scout).
• Athlete profile information: position, current club and club country, height, weight, dominant hand, career history and season-by-season statistics, profile photo, highlight video links, competition details (used to determine which competitive division an athlete participates in), skill ratings (self-reported ratings out of 10 for shooting, playmaking, defense, and motor, clearly labeled as self-assessed), standardized athletic testing data (vertical leap, 3/4 Court Sprint, and wingspan, where provided), representation details (agent name, where provided), previous coaches (names and professional context, where provided), and a short biography.
• Sensitive profile information you choose to provide: date of birth, salary expectations, and contract details (status and expiration).
• Scout profile information: organisation, role, and other credibility details you provide. In addition, scouts may provide an organization name and organization type (scout, agent, coach, club, or camp organizer), which is displayed publicly on opportunities they post.
• Opportunities: if you are a scout, the details of opportunities you post (title, description, type, location, dates, salary or cost information, and position sought). If you are an athlete, records of opportunities you have applied to and the status of those applications.
• Notification preferences: your saved search criteria and whether you have opted in to email digest notifications for new athlete matches.
• Communications: messages you send to other users through the platform, and any contact you have with us directly.
• Usage and technical data: how you interact with the platform (for example searches, profile views, and expressions of interest), along with standard technical information such as your device type and approximate location derived from your IP address.

StarAthlete is a discovery platform, so some of your information is meant to be seen by others.

• Information on your athlete profile, including your name, photo, position, club, career history and statistics, is visible to other registered users. If your profile is set to Visible, it is also visible to the public and may be indexed by search engines so that scouts can find you.
• Your sensitive information, including date of birth, salary expectations, contract details, agent contact details, and previous coach contact information, is only ever shown to verified scouts. It is never shown to the general public or to other athletes.
• Club identity details, including your current club, club country, and the team and league names in your season-by-season career history, are only shown to registered users. Logged-out visitors see these fields as blurred placeholders.
• You control whether your profile is Visible or Hidden at any time in your settings. Setting your profile to Hidden removes it from discovery and public view.
• Organization name and organization type provided by scouts are displayed publicly on opportunities they post, as this is their intended purpose.
• Opportunity listings posted by scouts are visible to all registered users. Application records are visible only to the scout who posted the opportunity and the athlete who applied.

We process your personal data on the following legal bases under the GDPR:

• To perform our contract with you, to create and operate your account, display your profile, enable search and discovery, and allow expressions of interest and messaging between athletes and scouts.
• With your consent, for example, when you choose to make your profile public, or provide optional sensitive information. You can withdraw consent at any time.
• For our legitimate interests, to keep the platform secure, prevent fraud and abuse, understand how the service is used, and improve it. We balance these interests against your rights.
• To comply with legal obligations, where we are required to retain or disclose data by law.

We use your data to: create and manage your account; display your profile to the appropriate audience; power search, filtering, and matching between athletes and scouts; enable expressions of interest and messaging; send you service-related notifications (such as new messages or interest received); maintain the security and integrity of the platform; and analyse and improve our service.

• Other users: as described in Section 4. Athlete profiles are shared with scouts and, if Visible, with the public; messages are shared with the user you are communicating with.
• Service providers (processors): we use trusted third parties to operate StarAthlete, including our cloud hosting and database provider and our email delivery provider. These providers process data only on our instructions and under appropriate data protection agreements.
• Legal and safety: we may disclose data where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the public.

We do not sell your personal data.

Our infrastructure providers may store and process data on servers located in the European Union. Where personal data is transferred outside the European Economic Area, we ensure it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

We keep your personal data for as long as your account is active. When you delete your account, your profile and associated personal data are removed from the platform. Some limited information may be retained where we are legally required to do so, or to resolve disputes and enforce our agreements.

Under the GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of your data; restrict or object to certain processing; receive your data in a portable format; and withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at contact@starathlete.co. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to know what personal data we collect, use, and disclose about you (see Section 3 and Section 7 above).
• Right to delete your personal data, subject to certain legal exceptions.
• Right to correct inaccurate personal data we hold about you.
• Right to opt out of the "sale" or "sharing" of personal data. We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
• Right to limit use of sensitive personal information. We only use sensitive information you provide (such as date of birth, salary expectations, or contract details) to operate the Service as described in this Policy, for example restricting it to verified scouts, and not for unrelated purposes.
• Right to non-discrimination for exercising any of these rights.

To exercise any California privacy right, contact us at contact@starathlete.co. We will verify your request using the information associated with your account before acting on it.

We use technical and organisational measures to protect your data, including encrypted connections, access controls, and database-level security rules that restrict who can access which information. No system is completely secure, but we work to protect your data and to respond promptly to any security issues.

We use only the cookies and local storage necessary to keep you signed in and to operate the platform. We do not use third-party advertising cookies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

For any questions about this Privacy Policy or your personal data, contact us at contact@starathlete.co.