Back to home

Privacy policy

Last updated: 20 July 2026

1. Data controller

The SportsIqo service (https://sportsiqo.com) is operated by SportsIQO Ltd, a company incorporated under the laws of England and Wales, registered at Companies House under number 17337566, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. SportsIQO Ltd is the data controller and can be reached at contact@sportsiqo.com.

2. Data we collect

We only collect what the service actually needs to run:

  • Sign-up (required): email address and display name (display_name).
  • Profile (optional): country code (country_code) and phone number in international format (phone_e164).
  • Technical: IP address and user agent, logged on sign-in and payment for security purposes.
  • Payments: transaction reference, amount, currency. Card and bank details pass through our payment provider only and are never stored by us.
  • Usage: teams viewed, AI analyses generated, analysis history.
  • Essential cookies: see our cookie policy.

3. Purposes of processing

  • Provide the football AI analysis service and manage your account.
  • Process payments and manage subscriptions.
  • Prevent fraud, duplicate accounts and abuse.
  • Send transactional messages (payment confirmation, password reset, security alerts).
  • Improve analysis quality and AI accuracy (aggregated, anonymised statistics).

4. Legal basis

  • Performance of a contract: delivering the service you subscribed to, payments, account management.
  • Consent: optional marketing messages, transfers of data outside the UK / EU.
  • Legitimate interests: platform security, fraud prevention, service improvement.
  • Legal obligation: retention of accounting and tax records.

5. Recipients and processors

We do not sell or rent your data. We rely on technical processors:

  • Hosting and infrastructure (US/EU) — application servers, CDN, attack protection.
  • AI provider (US) — generating the analyses.
  • Payment providers — processing card payments.
  • Sports data provider — teams, statistics, fixtures.
  • Social sign-in (US) — authentication through third-party accounts, if you choose that method.

Each of these providers is bound by contract to confidentiality and security obligations.

6. Retention period

Your data is kept for as long as your account is active. After you delete your account, we retain certain records for 3 years to meet tax and accounting obligations (invoices, payment records). Technical logs (IP, user agent) are kept for a maximum of 12 months.

7. Transfers outside the UK / EU

Some of our processors handle data from the United States. Those transfers are covered by standard contractual clauses (the UK International Data Transfer Agreement or the European Commission's clauses), ensuring a level of protection equivalent to the UK GDPR and the GDPR.

8. Your rights

Under the UK GDPR and the Data Protection Act 2018, as well as the EU GDPR where it applies, you have the following rights:
  • Access to your data and a copy of it.
  • Rectification of inaccurate information.
  • Erasure (the « right to be forgotten »).
  • Portability: receiving your data in a structured format.
  • Objection to processing on legitimate grounds.
  • Restriction of processing.
  • Withdrawal of consent at any time, without retroactive effect.

To exercise these rights: contact@sportsiqo.com. We respond within 30 days at the latest.

9. Right to complain

If you believe your rights are not being respected, you may lodge a complaint with the competent supervisory authority:
  • In the United Kingdom (lead authority): the Information Commissioner's Office (ICO, ico.org.uk).
  • In France / the EU: the Commission Nationale de l'Informatique et des Libertés (CNIL, cnil.fr) or the supervisory authority of your country of residence.

10. Security

  • All traffic is encrypted over HTTPS (TLS 1.2+).
  • Passwords are stored hashed (Argon2 / bcrypt).
  • Authentication cookies are HttpOnly, Secure and SameSite=Lax.
  • Access tokens expire after 15 minutes; refresh tokens after 30 days.
  • Restricted, logged access for our technical team.

11. Children's data

The service is restricted to adults (18 and over). Minors may not create an account without the express agreement of their legal guardian. If we find that an account belongs to a minor without parental authorisation, it will be deleted without delay.

12. Changes

We may update this policy. Any material change will be notified by email to the address linked to your account, at least 30 days before it takes effect.

13. Contact

For any question about this policy or your data: contact@sportsiqo.com.