Privacy
Version 2026-09-15
Who we are
PACIT is being incorporated. Until it is, PACIT is operated by Oliver Cormack, one of its founders, who is responsible for it and for the personal data described here. In these pages, "PACIT", "we" and "us" mean Oliver Cormack operating PACIT. When the company is formed, these pages will name it, and we will tell account holders.
We decide how the personal data described here is used, so for data protection law we are its controller.
The short version
- We collect what we need to run PACIT for football clubs and coaches, and nothing for advertising.
- We never show one club's information to another club.
- A coach's answers go only to the clubs that invited them.
- Professional footballers appear to clubs without their names until both clubs have signed an NDA and a letter of intent.
- You can ask to see, correct or delete your data at any time.
Whose data, what we collect and why
People at clubs who use PACIT
- Your account: name, email address, club, role, and a password we never see in full (our database provider stores it only in a scrambled form).
- What you declare: your club's playing philosophy answers, notes you write, and the reading PACIT produces from them.
- Coaches you invite: the coach's name and email address you give us, the notes you keep on them, and the order you rank them in.
- Verification: the LinkedIn profile you give us, if you do, and our decision on whether we have verified you.
- How you use PACIT: when you sign in, when you open your club page and when you press Contact the team.
- Security codes: the codes we email you to confirm your address or reset your password, stored only as one-way scrambles.
Why, and on what basis: to provide PACIT under our terms with you (performance of a contract). Verification, usage records and security are in our legitimate interests: keeping PACIT for real people at real clubs, stopping anyone using a club's name without permission, and understanding which parts of PACIT clubs use.
Coaches
- From the club that invites you: your name and email address, so we can send you the invitation.
- From you: your account details and your answers to the philosophy questions.
- Created by PACIT: a match number and the biggest differences between your answers and the inviting club's.
- Kept by the club: a copy of the answers you submitted to them, and any notes and ranking the club records about you.
Why, and on what basis: sending an invitation you have not yet accepted is in the inviting club's and our legitimate interests in reaching candidates for a coaching role; you can ignore it and we send nothing else. Once you create an account, we use your data to provide PACIT under the coach terms (performance of a contract).
Professional footballers
- What: name, date of birth, nationality, height, preferred foot, current club, contract and transfer history, market valuations, and performance and movement measures from matches.
- Where it comes from: licensed and openly licensed football datasets. We do not collect it from players directly.
- What we never hold: medical, injury or health information. Nobody under 18 is included.
- How it is used: to score how well a player fits a club's declared way of playing. Clubs see players without names; a name is revealed only after both clubs have signed an NDA and a letter of intent.
Why, and on what basis: in our legitimate interests, and clubs', in evaluating players for professional football, which is within what a professional player can reasonably expect. You can object at any time (see Your rights).
People who contact us or ask for access
Your name, email address, club and message, used to reply to you, in our legitimate interests.
Everyone who visits
Your IP address and technical information from your browser, used to keep PACIT secure: to limit repeated attempts, to tell people from automated scripts, and to investigate misuse. This is in our legitimate interests in protecting PACIT and the people who use it.
Scores and automated comparisons
PACIT produces numbers: a match number between a club and a coach, and a fit score between a player and a club. They compare declared answers or recorded performance with a club's stated way of playing. They are information for people at clubs to consider, not decisions. No hiring, signing, bid or rejection happens automatically.
A person at the club takes part in every decision that uses a score. If a score about you matters to you, you can ask us for information about how it was produced, tell us your view, ask for a person to review it, and challenge it. See Contact us. (In the UK these rights come from Articles 22A to 22D of the UK GDPR; for people in the EU, from Article 22 of the GDPR.)
AI features
Some features for clubs (describing a player you are looking for, searching the market in plain English) send the text you type to our AI provider, Anthropic, to produce the answer. Anthropic's commercial terms prohibit it from training its models on what we send. Please do not type personal information about other people into these boxes unless you need to.
Who receives your data
- Supabase, our database provider, stores PACIT's data.
- Vercel, our hosting provider, runs PACIT and checks for automated scripts.
- Resend, our email provider, sends PACIT's emails.
- Anthropic, our AI provider, processes text typed into AI features.
Each acts on our instructions under a contract. We do not sell personal data. We would disclose it if the law requires us to, or to a buyer of PACIT, who would have to keep these commitments.
Data outside the UK
Our providers are based in, or have staff and systems in, the United States. The safeguards for each are:
- Vercel and Resend: the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge), and standard contractual clauses with the UK Addendum.
- Supabase and Anthropic: standard contractual clauses with the UK Addendum issued by the Information Commissioner.
Ask us for a copy of the relevant safeguards.
How long we keep it
- Club and coach accounts, and what you declared: while the account exists. When you ask us to delete an account we delete it, and the answers and notes attached to it, within 30 days.
- A coach's answers held on a club's board: removed within 30 days of the coach deleting their account.
- Security records: up to 12 months.
- Messages and access requests: up to 24 months after our last contact.
- Player data: while the dataset it comes from is licensed to us and the player is relevant to professional football.
- Backups: deleted data can remain in encrypted backups for up to 30 more days before they are overwritten.
Cookies and browser storage
PACIT uses only the cookies it needs to work: keeping you signed in, keeping PACIT secure, and remembering your language. It also stores small preferences in your browser, such as unsaved philosophy drafts and whether you have seen the cookie notice. We use no advertising or analytics cookies, so there is nothing to opt out of.
Your rights
You can ask us to:
- give you a copy of your data,
- correct it,
- delete it,
- limit how we use it,
- stop using it where we rely on legitimate interests, including player data (you can object at any time),
- give it to you in a form you can take elsewhere, and
- have a person review a score about you.
We answer within one month of receiving your request, or of receiving anything we need to confirm who you are or what you are asking for. For complex or numerous requests we can extend this by up to two further months, and if we do we tell you why within the first month.
Complaints. If you are not happy with how we use your data, you can complain to us (see Contact us) and we will acknowledge your complaint within 30 days. You can also complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.
PACIT is for people working in professional football. It is not intended for anyone under 18.
Contact us
Email contact@dextant.com. We reply within one month, and usually much sooner.
Changes
When this notice changes we update the version above. If a change affects how we use data you have already given us, we tell you by email or when you next sign in.