Privacy Notice

The data controller for this website is Bruce De Rouche BG Holding Ltd. Bruce De Rouche BG Holding Ltd is a private limited company registered in England and Wales under company number 16893112, incorporated on 5 December 2025. Its registered office is 11 Garman Close, London, N18 1XH, United Kingdom. fEuzion is a division of that company.

For anything in this notice, write to admin@brucederouche.com or to the registered office above.

This is the section most privacy notices get wrong, so it comes first. It is short because this site does very little.

This website is a marketing site. It does not have user accounts, a login, a members area or a shop. It does not run analytics. Its enquiry form is not yet connected to anything: nothing you type into it is transmitted, received or stored. Booking an assessment happens by email or telephone, not through this site.

• No accounts. There is no sign-in, no members area and no profile on this site.
• No analytics. We do not use Google Analytics or any other analytics or tracking product. We do not build a profile of you, and we do not advertise to you.
• No cookies. This site sets no cookies at all — see our Cookie Policy.
• No payments. You cannot pay through this site.
• The enquiry form is not connected. It validates what you type so the page behaves properly, and then stops. Nothing is sent to us and nothing is stored. It never shows a false “message sent” confirmation.

When the form is connected to a backend, or if analytics is ever added, this notice and the Cookie Policy are updated before that goes live, not after.

If you email or telephone us, we hold what you send: your name, your contact details, and whatever you tell us about your child and your enquiry. We use it to answer you. That is all.

We do not add you to a marketing list because you made an enquiry. If you want updates, you have to ask for them, and you can stop them at any time.

An assessment is a much bigger piece of processing than anything this website does, and it happens off this site — by email, by telephone and in person. In outline we collect:

• Identity and contact details for the athlete and for the parent or guardian, including emergency contacts.
• Health information — medical history, current injuries, medication and allergies. This is special category data under UK GDPR and is handled accordingly.
• Performance data — the measurements taken during testing.
• Behavioural and psychological observations recorded by the assessor.
• Video of technical and athletic testing, which is consented to separately and can be declined without declining the assessment.

Every consent is recorded separately: consent to be assessed, consent to video, and consent to share a report with a club, a scout or a school. You can withdraw any of them, and a withdrawal is recorded immediately.

Most of the people we assess are children, so this is the part of the notice we take most seriously.

• High-privacy defaults. Nothing about a child is shared, published or used beyond delivering their assessment unless someone has actively agreed to it. Silence is never taken as agreement.
• The ICO's Age Appropriate Design Code is the standard we work to for anyone under 18, including its expectations on data minimisation, default settings and clear explanations.
• Under-13s do not sign themselves up. A parent or guardian enrols them, and that adult is the person we contract with.
• Under-16s are not sent marketing without parental consent. Marketing consent from a young person is not sufficient on its own.
• Age-appropriate assent. Whatever an adult has agreed, we explain to the young person what is going to happen in terms they can follow, and we stop if they do not want to continue.
• Plain English. A child, or a parent reading with a child, should be able to understand what we hold. If any part of this notice fails that test, tell us and we will rewrite it.

• Legitimate interests — answering an enquiry you sent us.
• Contract — delivering an assessment or a programme you have booked.
• Consent — video capture, sharing a report with a third party, and marketing. Each is asked for separately and each can be withdrawn.
• Explicit consent — health information, which is special category data and needs its own basis.
• Legal obligation — where the law requires us to keep or disclose something, including a safeguarding disclosure.

Where we rely on consent, withdrawing it is as easy as giving it, and withdrawing it does not affect anything we lawfully did beforehand.

Most rows in this table say “nothing”, because this site collects almost nothing. That is the honest position today and it will change when the form is connected.

Only people who need it for their role, under the permissions you have recorded.

• Our assessors, to deliver and quality-check the assessment.
• A club, scout or school — only where you have given separate, specific consent, and only the report you agreed to share.
• Suppliers who host or process data on our behalf, under contract, and only for that purpose.
• Anyone the law requires, including where a safeguarding concern must be reported.

We do not sell your data. We do not share it for advertising. We do not use it to train third-party AI models.

This site is a set of static files served over HTTPS. It holds no database and no personal data, so there is nothing on it to breach.

Assessment data held off this site is kept on access-controlled systems, available only to people who need it for their role.

Under UK GDPR you have eight rights:

• To be informed — to know what we do with your data, which is what this notice is for.
• Of access — to get a copy of what we hold about you.
• To rectification — to have anything inaccurate corrected.
• To erasure — to have it deleted, where no legal obligation requires us to keep it.
• To restrict processing — to have us pause what we do with it while a question is resolved.
• To data portability — to receive it in a portable format, or have it sent elsewhere.
• To object — including to processing based on legitimate interests, and to direct marketing at any time.
• Not to be subject to automated decision-making, including profiling, that has a legal or similarly significant effect on you. We do not make automated decisions about athletes: every assessment outcome is a human judgement.

To exercise any of them, write to admin@brucederouche.com. We respond within one month. A parent or guardian may exercise these rights on behalf of a child, and an older child may exercise them themselves.

Exercising a right is free, and we will not treat you differently for it.

If you are unhappy with how we have handled your data, tell us first at admin@brucederouche.com and give us the chance to fix it.

You also have the right to complain to the Information Commissioner's Office at any point. You do not have to come to us first.

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

For now, data protection questions go to admin@brucederouche.com and are answered in writing.