Privacy Policy

Effective date: 10 August 2026

Last updated: 14 September 2026

1. Who we are

This website is operated by Odisea Sports Management, L.L.C. (EIN 84-2485509), of 964 High House Road, Cary, NC 27513, United States of America ("Odisea", "we", "us"). We are the data controller for personal data collected through our websites.

We operate under the brands Odisea Sports, FC Odisea, Odisea Golf, and OSM. Our programs in Spain are delivered with our affiliated company Odisea Sport Management, S.L.U. (NIF B42798868), of Calle Honori García García 11, Bajo, 12006 Castelló de la Plana, Spain, which acts as the operating entity for club activities and federative registration in Spain.

Contact for privacy matters: info@odiseasports.com, or either postal address above.

2. Where this policy applies

This policy covers all websites we operate, including:

• odiseasports.com (main site)
• shop.odiseasports.com (online shop)
• academy.odiseasports.com (academy)
• odisea-forms.vercel.app (the enquiry and application forms embedded on the sites above)

For purchases in the online shop, the shop's Conditions of Sale and Return Policy also apply. Shop orders are sold and invoiced by Odisea Sports Management, L.L.C., and payments are processed by Stripe.

It does not cover third-party websites we link to (federations, partners, social networks), which have their own policies.

3. What we collect

• Contact and enquiry data — name, email address, phone number, country, and the content of your message, when you submit an enquiry or contact form.
• Application data — for academy, camp, tour, or program applications: the applicant's name, date of birth, nationality, home address, passport/ID details where required, playing or athletic history (including links to game footage the applicant provides and, where given, a current coach's contact details as a reference), academic information, and parent/guardian contact details and home address for applicants under 18.
• Purchase and account data (shop) — delivery and billing address, order history, and account credentials if you create an account. Payment details are captured directly by our payment processor, Stripe, and are not stored by us.
• Images and media — photographs or video in which you appear, only under a separate, specific image authorization (see section 7).
• Technical and usage data — IP address, browser and device type, pages visited, and referral source, collected through cookies and similar technologies (see section 9).
• Communications — correspondence with us, and your marketing preferences.

We do not intentionally collect special-category data (such as health data) through the public websites. One exception is specific and consent-based: enrolled players may use the club's player forms (hosted on the forms site above) to report daily wellbeing and physio information during the season. That information is collected only under the player's — or, for minors, the guardian's — explicit consent in the Player & Family Consents pack, is stored separately from coaching data, is never used for marketing, and is described in full in that document. All other medical information a program requires is collected under the program's own enrollment documents, not through the website.

4. Why we process it, and on what legal basis

Where the EU General Data Protection Regulation (GDPR) applies, our legal bases are:

For visitors in the United States, we process personal data as described in this policy consistent with applicable US federal and state privacy law.

5. Who we share it with

• Our affiliated company Odisea Sport Management, S.L.U., for delivery of programs in Spain and, where an applicant enrolls as a player, for federative registration (see the separate consent documents provided at enrollment).
• Service providers that host and operate the websites, process payments (Stripe), deliver shop orders (shipping carriers), send our emails, and provide analytics — under contracts that limit their use of the data to our instructions.
• Sports federations, only where required for a registered player and covered by the enrollment consents.
• Authorities, where disclosure is required by law.

We do not sell personal data.

6. International transfers

We operate from both the United States and Spain, so personal data may be transferred between the EU/EEA and the United States between our affiliated companies and to our service providers. Where GDPR applies to such transfers, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses.

7. Images

We publish images of players and customers only under a separate, written image authorization, which is limited in time, revocable, and — for minors — valid only with a parent or guardian's signature. Website browsing never requires it. To revoke a previously granted authorization, write to info@odiseasports.com.

8. Minors

Our websites are not directed at children under 13, and we do not knowingly collect their data through the websites. Program applications for minors must be submitted by a parent or legal guardian. Where Spanish law applies, a minor's own consent to data processing is valid only from age 14 (LOPDGDD Art. 7); below that age, a parent or guardian must consent.

9. Cookies

We use essential cookies (required for the site and, in the shop, the cart and checkout) and, with your consent, analytics and preference cookies. You can withdraw consent at any time through the cookie settings on the site.

10. Retention

We keep personal data only as long as needed for the purposes above, and then delete or anonymize it:

• Enquiries that do not lead to a program or purchase: 24 months.
• Application and enrollment data: for the duration of the relationship, then as required by statute.
• Enrolled player records — the player's roster entry and, where the player uses the club's player forms, the daily wellbeing and physio information reported through them: kept while the player is at the club, then deleted six years after the date the player leaves. Six years is the longest period Spanish accounting law requires us to keep records relating to a player, and it is beyond the five-year minimum Spanish law sets for clinical documentation.
• IP addresses recorded with a form submission: 30 days.
• Transaction records: for the periods required by applicable tax and accounting law (at least five years).
• Marketing preferences: until you withdraw consent.

11. Your rights

You may, at any time: withdraw consent; request access to, rectification or erasure of your data; request portability; and request restriction of or object to processing. Contact info@odiseasports.com to exercise any of these.

If you are in the EU/EEA, you may also lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (www.aepd.es). Depending on your US state of residence, you may have additional rights under state privacy law.

12. Security

We apply appropriate technical and organizational measures to protect personal data. No system is completely secure; if a breach affects your data and the law requires notification, we will notify you.

13. Changes to this policy

We may update this policy. The "Last updated" date shows the current version, and material changes will be announced on the websites.