Clear information about how the website operates.

Privacy Notice

Last reviewed: 21 August 2026.

Gajree Risk Consultancy Group Limited, trading as The GRC Group and operating the COPA proposition, is the controller of personal information collected through this website.

Information we collect

• Contact details and brief enquiry information submitted through the Contact form.
• Contact details, context, selected answers, result band, result headline, primary emphasis, priority flags and tool version when someone chooses to request a COPA interpretation of a Readiness Check result.
• Technical, security and server-request information generated when the website is accessed, including information used by Netlify Web Analytics to provide aggregated website-usage reporting.

How and why we use it

We use enquiry and interpretation information to understand and respond to the request, manage follow-up and, where relevant, take steps requested before agreeing an engagement. We rely on our legitimate interests in responding to genuine business enquiries and operating COPA, and where relevant on steps taken at the request of the individual before entering into a contract.

We use hosting, security and aggregated analytics information to operate, protect and improve the website and understand which pages and resources are useful. We do not use these forms for unrelated email marketing without a separate lawful basis and any choice required by law.

Who may receive the information

Access to information provided through the website or in connection with a COPA engagement is limited to authorised COPA personnel and relevant service providers who need it for the agreed purpose. We handle club information confidentially and apply appropriate controls to its use, storage and access. Netlify provides website hosting, form-processing and server-side analytics services. Other professional or technology providers may receive information only where needed, appropriately controlled and covered by suitable terms.

AI-enabled tools

COPA may use AI-enabled tools to support activities such as research, analysis, drafting, summarisation, design and quality processes. Where personal or confidential information is processed using AI-enabled technology, we apply appropriate confidentiality, data protection, security and access controls.

International processing

Some service providers may process information outside the United Kingdom. Where this occurs, we use contractual or other recognised safeguards as required by UK data-protection law.

How long we keep it

Where no engagement begins, Contact enquiries and Readiness Check interpretation requests are normally retained for 12 months after the last meaningful contact, then deleted from the form system and corresponding mailbox. Where an engagement begins, relevant records move into the controlled client file and are retained under the applicable client-record policy.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your personal information, object to processing, or receive information in a portable form. You may also complain to the Information Commissioner's Office.

To raise a privacy question or exercise a right, email contactcopa@grcgroup.uk.

Cookie Notice

The launch website is designed without advertising cookies, retargeting pixels, session recording or embedded social-media tracking.

Netlify Web Analytics uses server-request data to provide aggregated information such as page views, popular pages, referring sources and broad visitor location. It does not require a browser cookie or additional tracking script.

Strictly necessary hosting, security and form-delivery technologies may operate so the website and requested features work securely.

Because the intended public site does not use non-essential browser cookies, no cookie-consent banner is planned. This position will be reviewed before any new analytics, advertising, embedded media or tracking technology is introduced.

Website Terms and Disclaimer

The website provides general information about COPA, regulated football and governance, risk and compliance operating capability. It does not constitute legal, financial, tax, accounting or other professional advice.

Using the website, completing the Readiness Check, downloading material or contacting COPA does not create a client or professional engagement. Any work is subject to separately agreed scope, responsibilities and terms.

COPA provides structure, challenge and practical support. Clubs retain responsibility for their decisions, approvals, submissions and regulatory obligations. No licensing, compliance, regulatory or commercial outcome is promised or guaranteed.

COPA is independent and is not endorsed by the Independent Football Regulator. Regulatory information can change. Users should check current official sources and obtain relevant professional advice where required.

External links are provided for convenience. COPA does not control the content, security, availability or subsequent amendment of third-party websites.

COPA may use AI-enabled tools to assist in preparing, analysing and developing content and materials. AI supports, but does not replace, professional judgement, and COPA remains responsible for the content it publishes and the services it provides.

Copyright and permitted use

Unless stated otherwise, the website, COPA methodology, COPA Operating Standard materials, written content, graphics and original resources are owned by or licensed to Gajree Risk Consultancy Group Limited. They may be viewed and downloaded for personal or internal organisational use. They must not be reproduced, republished, sold, adapted or used commercially without prior written permission. They must also not be used to train, fine-tune, ground or provide retrieval content for an artificial intelligence or machine-learning system without prior written permission.

Nothing in these terms excludes or limits liability where it would be unlawful to do so.

Company Information

The GRC Group is the trading name of Gajree Risk Consultancy Group Limited. COPA is its football governance, risk and compliance proposition.