Privacy policy

Fixtura is school sports scheduling, team selection and communication software. This policy explains what personal information Fixtura handles, why, where it is stored, who helps process it and your rights under the Protection of Personal Information Act (POPIA).

Who is responsible

Each school or club that uses Fixtura decides what information about its pupils, players, parents and staff goes into it, and is the responsible party for that information. Fixtura processes it on the school’s behalf as its operator. For this website, and for the accounts people create on it, Fixtura is responsible. Questions and requests about privacy can be sent to support@streamlabs.co.za.

What Fixtura holds and why

• Accounts: name, email address and a securely hashed password for coordinators, team staff, parents and guardians, and pupils who are given a login. Used to sign you in and show you only what your role allows.
• Pupils and players: name, date of birth, the teams they play in, attendance answers and selections, as entered by the school. Used to organise fixtures and team sheets.
• Parents, guardians and emergency contacts: name, email address, phone number and relationship to the player. Used to ask about availability and to reach families about fixtures and emergencies.
• Medical information: health details a school records for a pupil are special personal information. They are encrypted inside the application, visible only to the staff roles that need them, and every view is recorded in an audit log.
• Messages and announcements: kept so that communication between adults and children stays recorded and overseeable by the school. Messages are never deleted outright, only hidden.
• Support requests: what you write to us when you ask for help.
• Devices: if you turn on notifications, a push subscription for your browser or phone.

A child’s information is handled with the consent of a parent or guardian, collected through the school. Fixtura does not profile children or show anyone advertising, and never sells personal information.

Cookies and analytics

Signing in uses essential cookies that keep you logged in. The product needs these to work.

On the public pages of this website (the home page and this page) we would like to use Google Analytics, which sets cookies (named _ga and _ga_…) to measure how visitors find the site and whether they sign up. Google Analytics does not load unless you click Accept on the cookie notice. If you decline, nothing is sent to Google and everything works the same. Google Analytics never runs inside the signed-in product. You can change your mind at any time with the Cookie settings link at the bottom of the page, which removes the analytics cookies and asks again.

Where it is stored and who processes it

Fixtura’s application and database run in London, United Kingdom. That is a transfer of personal information out of South Africa, which POPIA permits where the recipient is bound by adequate data-protection rules. These providers process information for Fixtura:

• Vercel: hosts the application (London).
• Neon: the database (London).
• Cloudflare: stores uploaded files.
• Resend: sends invitations, notifications and notices by email.
• Ably: delivers live updates inside the app.
• Inngest: runs scheduled and background tasks, such as reminders.
• Sentry: records application errors, with personal details removed.
• Your browser or phone’s push service (for example Google, Apple or Mozilla): delivers notifications you have turned on.
• Google: Google Analytics on the public pages, only if you accept cookies.

How long it is kept

A school’s information is kept for as long as the school uses Fixtura. When a school leaves, it can ask for its information to be exported and deleted, except where safeguarding or the law requires records to be kept. Records of who viewed medical information are kept as a permanent audit trail.

Your rights

You may ask to see the personal information held about you or your child, have it corrected or deleted, or object to it being used. For information a school entered, the request goes to the school and we help it respond. You can also email support@streamlabs.co.za and we will respond within 30 days. You may complain to the Information Regulator of South Africa at inforegulator.org.za.

Security

Every request is checked on the server against your role and school. Medical details are encrypted in the application as well as at rest. Sensitive actions are written to an audit log that cannot be edited. If personal information is ever compromised, the affected schools and people, and the Information Regulator, will be told as POPIA requires.