The programme — Safeguarding & governance
No. 06The foundation, not a feature.
UK junior hockey is under-18 hockey, which means every design decision is a safeguarding decision. RinkTracker starts from the ICO Children's Code and UK GDPR and builds the club around them: minimum data, scoped access, and a record of who looked.
Every look at a sensitive record is logged.
Access
No. 06Access that matches the bench.
Roles run from owner to head coach to assistant to team staff, and every screen respects them. The sensitive things — medical details, safeguarding concerns — are gated to senior roles, so a parent helper scanning attendance never scrolls past an allergy list.
- Role hierarchy enforced across the whole workspace
- Medical records gated to senior staff
- Parents scoped to their own child, after consent
Roles are walls, not labels — the medical record lives in the innermost ring.
Imagery
No. 06Consent is recorded per player and enforced wherever media appears — change it once, it applies everywhere.
Consent that follows the photo.
Imagery consent is recorded per player and enforced where media actually appears — team posts, video clips, shared galleries. Change a consent decision and the platform respects it everywhere, immediately, without a volunteer having to remember which album the photo went to.
- Per-player imagery consent
- Enforced in The Loop, video and media surfaces
Audit
No. 06A record of who looked.
Sensitive records carry a tamper-evident audit history: who opened a medical note, who changed a consent, who published a report. If a question is ever asked — by a parent, a committee or a governing body — the answer is a log, not a shrug.
- Tamper-evident audit history on sensitive actions
- Access events logged, not just edits
Opening a sensitive record is an event — the answer to who saw what is a log, not a shrug.
Isolation
No. 06Isolation is architecture, not a filter someone remembers to apply.
Walls between clubs, by architecture.
Every club is its own isolated workspace, separated at the database layer — not by a filter that might be forgotten. Nobody at another club can see your players; your data leaves only when you export it. The privacy policy and safeguarding policy spell the whole model out in plain English.
- Per-club isolation enforced at the data layer
- Built to align with UK GDPR and the ICO Children's Code
In full
No. 06Everything in this part of the programme
- Role-based access from owner to team staff
- Medical records gated to senior roles
- Consent-gated, child-scoped parent access
- Players get their own safe login
- Per-player imagery consent, enforced in media
- Tamper-evident audit history
- Access logging on sensitive records
- Fully isolated club workspaces
- Passwordless staff invites
- UK GDPR and Children's Code-aligned design
- Published privacy, safeguarding and acceptable-use policies
See it with your club in mind.
A 30-minute walkthrough tailored to your age groups, then an invite code to set your academy up properly.