Privacy notice

This notice explains what personal data Match Point Leagues holds, why, who else handles it, and what you can ask us to do with it. It’s written for three groups of people: organisers who run leagues, players whose names and results appear in them, and anyone visiting the site.

Who we are

Match Point Leagues is run by Craig Harvie, a sole trader based in Scotland, who is the data controller for the personal data described here.

Contact: matchpointleagues@gmail.com. A real person reads every message.

What we hold, and why

Organiser accounts. When you sign up we hold your name, email address and profile picture, and which club you belong to and your role in it. We need these to run your account and your club’s dashboard (lawful basis: contract).

Player records. Organisers add players to leagues. A player record holds a first and last name, and sometimes an email address, plus the matches, scores and results that follow from playing. Players don’t have accounts and aren’t asked for consent. We rely on the organiser’s and the club’s legitimate interest in running a league, balanced against the player’s interests, which is why the protections below exist (lawful basis: legitimate interests).

Score submissions. A player can submit a score through a club’s score link. We hold the proposed score and date, and any name the person submitting types in. An organiser has to approve a submission before it counts, and it is deleted once approved or rejected (lawful basis: legitimate interests).

Sign-ups. On a club’s sign-up link, a player enters their name and, optionally, an email address. This is held until an organiser approves or rejects it. Approval turns it into a player record; rejection deletes it (lawful basis: legitimate interests).

Plus subscriptions. If a club subscribes to Plus, Stripe collects the payment details. We never see or store card numbers. We hold the Stripe customer and subscription identifiers and the subscription’s status, so we know whether the club is on Plus (lawful basis: contract).

Keeping the site working. Error reports and a sample of page performance data go to Sentry, with email addresses, private links and account identifiers removed before they leave the browser or server. Visit counts come from Vercel Analytics, which is cookieless and aggregate (lawful basis: legitimate interests).

Messages you send us. If you email us, or report an issue from the dashboard, we hold what you send, including your email address (lawful basis: legitimate interests).

What’s public

League, season and club pages are public. Anyone can see them without an account, and search engines index them. They show players’ names, match results and standings. That’s what makes the leagues work: players can see the table without logging in.

Some protections apply:

• Player profile pages are not listed in search engines. Anyone with the link can still open them.
• Children’s names. When an organiser marks a league as containing children’s names, public pages show a made-up name, such as “Swift Falcon”, instead of the real one. Real names stay visible to the club’s organisers only.
• Email addresses are never public. Only the club’s organisers see them.

Children

Junior leagues are a supported use, so the site can hold children’s names and results. We can’t know a player’s age, because organisers enter players, not the players themselves. Organisers who enter a child must have permission from a parent, guardian or the club, and should turn on the children’s names setting so public pages use made-up names. Parents and guardians can ask us to remove a child’s name at any time (see “Your rights”).

Who else handles the data

We use these services to run the site. Each one handles data only to provide its service to us.

Where data leaves the UK or EU, it’s covered by appropriate safeguards, such as the UK International Data Transfer Addendum or the standard contractual clauses in each provider’s data processing terms.

We don’t sell personal data, and we don’t use it for advertising.

How long we keep it

We keep data for as long as a league, club or account exists, and we don’t delete older records automatically yet. What we do today:

• Organisers can delete matches, seasons, leagues and players with no match history.
• A player with match history can be erased: their name is replaced with “Former player”, and their email is deleted. Their results stay, so other players’ tables don’t change.
• Score submissions and sign-ups are deleted once an organiser deals with them.
• If you close your organiser account, email us and we’ll delete your details.

Your rights

Under UK data protection law you can ask to see the data we hold about you, have it corrected or erased, get a copy to take elsewhere, object to how we use it, or restrict its use. Email matchpointleagues@gmail.com. We’ll reply within a month. If you’re a player, you can also ask your club’s organiser, who can correct or erase your record straight away.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

We only use cookies the site needs in order to work, so we don’t ask for consent.

Vercel Analytics counts visits without cookies and doesn’t identify you.

Changes

If this notice changes in a way that matters, we’ll update the date at the top and say so on the dashboard.