1. Who is responsible
Last Cone is operated by Last Cone Ltd, a company registered in England and Wales (company number 17473002). Its registered office is Gorsefarm, Newbourne Road, Waldringfield, Suffolk, IP12 4PS, United Kingdom.
Last Cone Ltd is the controller of personal information processed to operate the Last Cone app and this website. Contact us at support@lastcone.co.uk, or by post at the address above.
Coaches and clubs may separately be controllers of information they choose to enter about their players. They are responsible for having an appropriate reason and authority to use that information.
2. Information we process
Coach and account information
Name, email address, country, preferred language, coaching role, sign-in provider identifiers, team memberships and invitation status.
Team and player information
Team name, age/category, season and playing format; player name, surname, shirt number, status and football position preferences. Last Cone V1 does not ask coaches to enter player email addresses, home addresses, telephone numbers or medical diagnoses.
Fixture, Matchday and report information
Opponent, date, venue text, squad selection, formation, match timer, playing-time periods, substitutions, goals, assists, saves, cards, injuries recorded as match status only, penalties, awards and generated reports.
Technical information
Authentication/session data, synchronisation status, security and audit events, device-local app data and diagnostic information supplied with a support request.
3. Where information comes from
Account information comes from the coach and, where selected, Google or Apple sign-in. Player and team information normally comes from an authorised coach or club representative rather than directly from the player.
4. Why we use it and our lawful basis
- Provide the service: to create accounts, organise teams, run Matchday, synchronise data and produce reports. This is necessary to perform our agreement with the account holder.
- Operate safely: to secure accounts, control team access, recover data and investigate faults. We rely on our legitimate interests in providing a secure and reliable service.
- Support and administration: to answer requests and communicate important service information. This is necessary for the service and our legitimate interests.
- Meet legal obligations: to respond to lawful requests, protect rights and keep necessary compliance records.
Last Cone does not use V1 match information to make solely automated decisions that have legal or similarly significant effects on players or coaches.
5. Children and player information
Last Cone is designed for adult coaches and club representatives, not for children to create their own accounts. A coach may enter limited player information, including information about youth players, only where the coach or club is authorised to do so.
We deliberately minimise player fields and do not create public player profiles. Coaches should avoid entering unnecessary or sensitive information in free-text fields.
6. Storage, offline use and sharing
Last Cone stores working Matchday information locally on the coach’s device so essential match functions can continue with an unreliable connection. Authorised data is synchronised to our hosted service when connectivity is available.
We use specialist providers to operate the service, including Supabase for authentication, database and related infrastructure; Google and Apple when their sign-in options are used; Expo/EAS for authorised app build and distribution services; Resend to send service emails such as team invitations and password resets; Cloudflare to host this website and handle app links; and RevenueCat to manage subscription and free-trial status (we never see your card details, as payments are handled by Apple or Google). We may also disclose information where required by law or to protect users and the service.
We do not sell player or coach personal information.
7. International processing
Our main database is hosted by Supabase in the European Union (Stockholm, Sweden). Some providers, such as Apple, Google, Expo, Resend, Cloudflare and RevenueCat, may process information in the United States or other countries. Where personal information leaves the UK, we rely on UK adequacy regulations or the safeguards those providers offer, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
8. How long we keep information
We keep information only for as long as it is needed:
- Account, team and match information: kept while your account is active and authorised coaches reasonably need it.
- Deleted match records: permanently removed 90 days after deletion.
- Account deletion: completed within 30 days of a verified request.
- Security and audit logs: kept for up to 12 months, unless needed for longer to deal with a legal claim or security incident.
9. Security
Last Cone uses access controls, encrypted network connections, provider-managed authentication, device secure storage and restricted team membership. No internet service can promise absolute security, so coaches must protect their device and sign-in details and report suspected unauthorised access promptly.
10. Your choices and rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or receive your information and to object to certain uses. You can also withdraw consent where consent is the basis used.
Your right to object: you may object to processing based on legitimate interests. Tell us your circumstances and we will consider the request.
Email support@lastcone.co.uk or use our account-deletion page. We may need to confirm your identity before acting.
11. Complaints
Please contact us first so we can try to resolve the concern. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.
12. This website
This public website does not use advertising cookies or analytics in its initial release. Your browser and hosting provider may process basic connection information required to deliver and protect the site.
13. Changes to this notice
We will update the date and version when this notice changes. If a change materially affects app users, we will provide an appropriate notice through the app or registered contact details.