01
Who We Are
BuaHQ
Tipperary, Ireland
Email: sales@buahq.com
BuaHQ is not required to appoint a Data Protection Officer under Article 37 GDPR. All privacy queries are handled by the BuaHQ team at the email above.
Legal
Privacy Policy
Last updated: 27 June 2026
02
Our Commitment
BuaHQ is committed to:
- Transparency in how data is used.
- Responsible and lawful data processing.
- Protecting personal information.
03
Data We Collect
3.1 Client Data
- Name
- Phone
- Organisation
3.2 Match & Player Data
- Video footage
- Tactical and performance data
May include identifiable individuals and, in some cases, minors.
3.3 Communications
- Emails
- Messages
04
Source of Data
We collect Client Data directly from the Client. Match and Player Data is typically provided to us by the Client (for example, a club, county board, or coaching staff) rather than collected directly from the individuals appearing in the footage.
Where required by Article 14 GDPR, the Client is responsible for informing players, staff and any other identifiable individuals that their data may be shared with BuaHQ for tactical analysis purposes.
05
Data Roles
| Role | Applies To |
|---|---|
| Controller | Client data |
| Processor | Match and player data |
06
Legal Basis
We process data under:
- Contractual necessity — to deliver the Services.
- Legitimate interest — to operate, secure and improve BuaHQ.
- Consent — where applicable, and which can be withdrawn at any time.
- Legal obligation — where we are required by law to retain or disclose data.
07
Use of Data
We use data to:
- Deliver Services.
- Generate tactical analysis and reports.
- Communicate with the Client.
- Improve our offerings.
08
Automated Decision-Making & AI
BuaHQ uses artificial intelligence to process match footage and generate tactical analysis. AI is used as an analytical tool only; every report is reviewed by a member of the BuaHQ team before delivery.
BuaHQ does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect any individual within the meaning of Article 22 GDPR. All tactical recommendations are advisory; final decisions rest with the Client.
09
Data Sharing
We do not sell data. Data may be shared with:
- Our internal team.
- Trusted service providers.
- Legal authorities where required by law.
10
Subprocessors
We may use third-party providers, including:
- Cloud storage and hosting platforms.
- Communication systems.
All subprocessors are required to protect data in line with applicable law.
11
International Transfers
Where data is processed outside the European Economic Area (EEA), appropriate safeguards are applied, such as Standard Contractual Clauses or transfers to jurisdictions with an adequacy decision.
12
Cookies & Analytics
The BuaHQ website uses only the strictly necessary cookies required for the site to function (for example, session and security cookies).
We do not use advertising cookies, third-party tracking pixels, or cross-site behavioural profiling. Any privacy-respecting analytics we use are limited to aggregate, non-identifying metrics about how the site is used.
If this changes, we will update this policy and request consent where required by law.
13
Data Retention
| Data | Retention |
|---|---|
| Match data | Short-term |
| Client data | Duration of relationship |
| Financial data | 6–7 years |
| Communication | Up to 24 months |
14
Data Security
We use:
- Access control systems.
- Secure storage.
- Encryption where appropriate.
While we take reasonable steps to protect personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.
15
Data Breach Procedures
In the event of a breach:
- An investigation will be conducted.
- Mitigation steps will be taken.
- Required notifications will be made to affected parties and authorities.
16
Data Subject Rights
You have the right to:
- Access your data.
- Correct inaccurate data.
- Request deletion.
- Restrict processing.
- Object to processing.
- Data portability.
- Withdraw consent at any time, where consent is the legal basis for processing.
- Lodge a complaint with a supervisory authority (see Section 20).
To exercise any of these rights, contact sales@buahq.com. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
17
Children's Data
We do not collect data directly from minors.
Clients must ensure:
- Appropriate parental or guardian consent has been obtained.
- All processing is lawful.
18
Data Deletion
Data may be deleted upon written request, unless retention is required by law or for legitimate business purposes.
19
Changes
We may update this policy from time to time. The latest version will always be available on this page with an updated “Last Updated” date.
20
Complaints
You can raise a complaint with us at any time, or directly with the supervisory authority:
21
Contact
For any privacy-related questions, contact sales@buahq.com.