Last updated: 25 August 2026

1. INTRODUCTION

CJ Sports Services SPC, trading as ESG Football Academy («ESG», «we», «us» or «our»), is committed to protecting the privacy and personal data of our students, parents, guardians, website visitors and other individuals who interact with us.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data through our website, registration forms, communications and football academy activities.

We process personal data in accordance with the Personal Data Protection Law issued by Royal Decree No. 6/2022 of the Sultanate of Oman, its Executive Regulation issued by Ministerial Decision No. 34/2024, as amended, and other applicable laws and regulations in the Sultanate of Oman.

Because ESG Football Academy provides services primarily to children and young people, we take particular care when processing children’s personal data.

2. Data Controller

The controller responsible for the processing of personal data is:

CJ Sports Services SPC, trading as ESG Football Academy

Commercial Registration Number: 1380154
Office: Al Raya Tower, Oxford Business Centre, 8th Floor, Ghala, Muscat, Sultanate of Oman
Telephone: +968 935 78568
Email: jay@enhancesportsglobal.com
Website: https://enhancesportsglobal.com/

Personal Data Protection Officer

Personal Data Protection Officer: [INSERT NAME]
Email: [INSERT DATA PROTECTION EMAIL]
Telephone: [INSERT TELEPHONE IF APPLICABLE]

Questions or requests concerning the processing of personal data may be directed to our Personal Data Protection Officer.

3. Personal Data We Collect

Depending on how you interact with ESG Football Academy, we may collect the following categories of personal data.

Student information

When registering a child or young person with ESG Football Academy, we may collect:

• First name and last name
• Date of birth
• Gender
• Current school
• Selected training programme
• Selected training sessions and days
• Attendance and participation information
• Other information necessary to manage the student’s participation in ESG activities

Parent or guardian information

We may collect:

• First name and last name
• Email address
• Telephone number
• Relationship to the student
• Communications and correspondence with ESG
• Registration and payment-related information

Where a second parent or guardian is provided, their contact information may also be collected for academy communications.

Emergency contact information

We may collect information concerning a person nominated as an emergency contact, including:

• First name and last name
• Email address
• Telephone number
• Relationship to the student

The parent or guardian submitting this information is responsible for ensuring that they are authorised to provide the emergency contact’s details to ESG.

Health information

Where necessary for the safe participation of a student in ESG activities, we may request limited health-related information, such as:

• Allergies
• Medication
• Relevant health or medical information necessary to respond safely in an emergency

Health information is considered specially protected personal data under Omani law.

ESG will only process health information where the requirements of applicable Omani law have been satisfied, including obtaining any authorisation from the competent Ministry that may be required for the processing of health data.

Health information will only be accessible to personnel who need it for legitimate safety, safeguarding or emergency purposes.

4. Children’s Personal Data

ESG Football Academy provides football training and related activities to children and young people.

We do not intend to collect or process a child’s personal data without the involvement and explicit consent of their parent or legal guardian, except where processing is otherwise permitted under applicable Omani law in the best interests of the child.

When a parent or guardian submits a registration form, they confirm that:

• They are the child’s parent or legal guardian, or otherwise legally authorised to provide the information.
• They consent to the processing of the child’s personal data for the purposes explained in this Privacy Policy.
• The information provided is accurate and up to date.

We seek to collect only the minimum amount of personal information necessary for the stated purpose.

Parents and guardians may contact us to access, review, correct or update information concerning their child.

We will not disclose or share a child’s personal information with third parties without the explicit consent of the parent or legal guardian unless the disclosure is otherwise required or permitted by law.

5. Why We Process Personal Data

We may process personal data for the following purposes:

• Registering students with ESG Football Academy
• Managing participation in training sessions, programmes, camps, matches or other ESG activities
• Managing academy schedules and attendance
• Communicating with parents and guardians
• Sending information concerning training sessions, schedules, venues, cancellations or other academy matters
• Contacting nominated persons in an emergency
• Protecting the health, safety and welfare of students
• Providing first aid or appropriate assistance in an emergency
• Managing payments and registrations
• Responding to enquiries
• Managing administrative and operational requirements
• Complying with applicable legal and regulatory obligations
• Maintaining the security and proper operation of our website
• Managing requests relating to personal data
• Sending marketing or promotional communications where the necessary consent has been obtained

Personal data will not be used for purposes incompatible with the purposes for which it was collected unless permitted by applicable law.

6. Consent

Where consent is required, ESG will request consent in a clear and understandable manner.

For the processing of children’s personal data, explicit consent must be provided by the parent or legal guardian.

Where separate consent is required for a particular processing activity, such consent will be requested separately.

Consent to receive advertising, promotional or marketing communications is voluntary and will not be made a condition of registering a child for ordinary football academy services where such communications are not necessary for providing those services.

Where marketing consent has been provided, it may be withdrawn at any time by contacting us or by using any unsubscribe mechanism provided in the communication.

Withdrawal of consent does not affect processing lawfully carried out before consent was withdrawn.

7. Photography and Video

ESG Football Academy may from time to time take photographs or videos during training sessions, matches, tournaments or events.

Where images or video identify a child and are intended to be used for promotional, marketing, website or social media purposes, ESG will obtain the appropriate consent from the child’s parent or legal guardian before such use where required.

Consent for promotional photography and video should be requested separately from consent necessary to register a child for football training.

Parents or guardians may withdraw consent for future use by contacting ESG.

Withdrawal does not necessarily require ESG to withdraw materials lawfully published before consent was withdrawn where applicable law permits their continued use.

8. Marketing Communications

ESG may send marketing, advertising or promotional communications only where the required consent has been obtained.

Marketing consent may cover communications by methods such as:

• Email
• SMS
• Telephone
• Messaging services
• Other electronic communications

Recipients may request that marketing communications stop at any time and without charge.

Operational communications necessary to manage a student’s registration, training sessions or participation are not considered promotional communications.

9. Disclosure of Personal Data

Personal data may be disclosed only where necessary and in accordance with applicable law.

Possible recipients may include:

• Authorised ESG staff and coaches
• Personnel responsible for administration or safeguarding
• IT, hosting and website service providers
• Email or communication service providers
• Payment or accounting service providers
• Professional advisers
• Medical or emergency services where necessary to protect a student
• Government authorities or regulatory bodies where required by law

Access is limited to persons or organisations that require the information for legitimate purposes.

Where a child’s personal data is to be shared with a third party and parental consent is required under Omani law, ESG will obtain the explicit consent of the parent or guardian before doing so.

10. International Transfers

Some technology providers or service providers used by ESG may process or store information outside the Sultanate of Oman.

Where personal data is transferred outside Oman, ESG will comply with the requirements applicable to international transfers under Omani data protection legislation.

Where required, this includes:

• Obtaining explicit consent before the transfer
• Assessing the protection provided by the overseas recipient
• Ensuring that the recipient provides an adequate level of protection
• Evaluating the risks associated with the transfer
• Applying appropriate contractual, technical and organisational safeguards

Personal data will not be transferred outside Oman where such transfer would violate applicable law or prejudice the rights of the data subject.

11. Data Retention

ESG retains personal data only for as long as reasonably necessary for the purpose for which it was collected and in accordance with applicable legal, contractual, accounting, safeguarding and regulatory requirements.

Retention periods may vary according to the type of information and the purpose of processing.

When information is no longer required and there is no lawful reason for retaining it, it will be securely deleted, destroyed or anonymised.

ESG maintains appropriate records concerning its personal data processing activities and retention arrangements.

12. Security

ESG takes appropriate technical and organisational measures designed to protect personal data against:

• Unauthorised access
• Unlawful processing
• Accidental loss
• Destruction
• Alteration
• Disclosure
• Misuse

Access to student and health information is restricted to authorised persons who require access for legitimate operational, safeguarding or emergency purposes.

Although reasonable security measures are implemented, no internet transmission or electronic storage system can be guaranteed to be completely secure.

13. Personal Data Breaches

If a personal data breach occurs, ESG will assess the nature and potential impact of the incident and take appropriate corrective action.

Where required under Omani law, ESG will notify the competent authority within the applicable time limit.

Where a breach may cause serious harm or a high risk to affected individuals, ESG will also notify those individuals within the period required by law.

14. Your Rights

Subject to the requirements and limitations established by Omani law, individuals may have the right to:

• Withdraw consent to the processing of their personal data
• Request access to their personal data
• Request correction or updating of inaccurate data
• Request blocking or restriction where applicable
• Request deletion of personal data
• Obtain a copy of their personal data
• Request transfer of personal data where applicable
• Request that processing be stopped while a rights request is being considered
• Object to certain processing where permitted by law

Parents and legal guardians may exercise applicable rights in relation to their child’s personal data.

Requests can be submitted to our Personal Data Protection Officer using the contact information provided in this Privacy Policy.

We may request reasonable information to verify the identity and authority of the person making the request.

ESG will respond to valid requests within the period required by applicable Omani law.

15. Complaints

If you have concerns about the way ESG processes personal data, please contact our Personal Data Protection Officer first so that we can investigate the matter.

You may also have the right to submit a complaint to the competent department of the Ministry of Transport, Communications and Information Technology of the Sultanate of Oman in accordance with applicable data protection legislation.

16. Cookies and Website Technologies

Our website may use cookies and similar technologies for technical, functional, analytical or other purposes.

Non-essential cookies and technologies involving the processing of personal information will be used in accordance with applicable consent requirements.

Further information is available in our Cookie Policy.

17. Third-Party Websites and Services

Our website may contain links to external websites, social networks or third-party services.

ESG is not responsible for the privacy practices of independent third-party websites. Users should review the privacy policies of those services before providing personal information.

18. Changes to this Privacy Policy

We may update this Privacy Policy where necessary to reflect changes in our activities, technologies or legal obligations.

The latest version will always be published on our website together with the date of the most recent update.

Where a material change affects the way we process personal data, we will provide appropriate notice or obtain new consent where required.

19. Contact Us

For questions concerning privacy or the exercise of personal data rights, please contact:

ESG Football Academy
CJ Sports Services SPC
Commercial Registration Number: 1380154
Al Raya Tower, Oxford Business Centre
8th Floor, Ghala
Muscat, Sultanate of Oman

Personal Data Protection Officer: Jay Wynter
Email: jay@enhancesportsglobal.com
Telephone: +968 935 78568