Yes understand how data can be requested and understand that evidence may be required, but this should be done up front securely on purchase.
I don’t think it’s anything sinister by the club by the way but how is the child ID data via email being used and stored .. just on an outlook file?