Privacy Policy

Effective date: 1 July 2027

COPA Corporate ("we", "us") operates the COPA Corporate Football Championship and this website. We process personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its implementing regulations. This policy explains what we collect, why, and the rights you hold.

Data we collect

Registration data: company details, commercial registration information, and the names, email addresses and phone numbers of designated contacts such as team captains and HR representatives.

Player verification data: each registered player's name, date of birth, national ID or Iqama details, and evidence of active employment with the registering company. This data is required to enforce squad eligibility and matchday accreditation.

Website and communications data: contact-form submissions, media and sponsorship inquiries, and standard technical data generated when you browse this site.

Why we process it

We use personal data for three purposes only: verifying eligibility (confirming companies are registered entities and players are active employees within the 18–55 age range), protecting safety (medical readiness, accreditation and incident management on matchdays), and communications (registration status, fixtures, results and official championship updates).

Legal basis

We process data on the basis of your consent given at registration, the performance of the participation agreement between COPA Corporate and your company, and our legitimate interest in operating a safe, fair and verified national competition. Where PDPL requires explicit consent — such as for identity verification — we obtain it before processing.

Retention

Verification documents are retained only for the duration of the edition and a limited audit period after the final, after which they are securely deleted. Competition records — results, standings and honours — are retained as part of the championship's historical record. Contact data is retained while your company remains engaged with the platform.

Sharing

We share verification data with vetted identity- and employment-verification providers solely to perform eligibility checks, and with competition officials where needed to govern matchdays. We never sell personal data, and we do not share it with third parties for their own marketing.

Security

Personal data is protected with access controls, encryption in transit, and role-based access limited to staff who need it to run the championship. Verification documents are stored separately from general contact data and are subject to stricter controls.

Your rights

Under the PDPL you may request access to the personal data we hold about you, correction of inaccurate data, deletion where retention is no longer required, and withdrawal of consent. Withdrawing consent for verification data before or during the championship may affect a player's eligibility to compete.

Contact

For any privacy request or question, contact us at hello@copacorporate.sa. We respond to verified requests within the timelines required by the PDPL.