Privacy Policy · SponsorGrassroots

1. Who we are

sponsorgrassroots.co.uk is operated by The Business Ally Ltd ("we", "us", "our"). We are the data controller for personal data processed through this website. We are based in the United Kingdom and this policy is written to comply with the UK GDPR and the Data Protection Act 2018.

Contact: hello@sponsorgrassroots.co.uk

2. What personal data we collect

When you register an account:

Name and email address
Password (stored as a one-way hash — we cannot read it)
Optional contact details: phone number, address, city, postal code

When you list a club or team:

Club name, description, sport, and location
Club badge / logo images you upload
Sponsorship opportunity details and associated images

Automatically when you use the site:

Session identifiers stored in cookies (see our Cookies page)
Aggregate analytics data via Google Analytics (IP-anonymised)
Standard server access logs (IP address, browser type, pages visited)

3. Why we collect it and our legal basis

Contractual necessity — to create and maintain your account and deliver the service you signed up for.
Legitimate interests — to protect the platform from fraud and abuse, and to understand how the site is used so we can improve it.
Consent — for any optional marketing communications (you can withdraw this at any time).

4. How we use your data

To authenticate you and maintain your session securely.
To display your club, team, and sponsorship listings publicly on the Platform.
To allow platform administrators to manage and moderate listings.
To send transactional emails (password resets, email verification).
To measure aggregate site usage and improve the Platform.

We do not sell your personal data to third parties.

5. Who we share your data with

Hosting provider — our application and database are hosted on servers in the European Economic Area or UK.
Google Analytics — receives anonymised usage data. Governed by Google's Privacy Policy (policies.google.com/privacy).
Email provider — used to deliver transactional emails (e.g. password resets).

All processors are bound by data processing agreements where required by UK GDPR.

6. How long we keep your data

Account data — retained for as long as your account is active, plus up to 12 months after deletion to handle any residual queries.
Club/team listings — retained until you delete them or we remove your account.
Server logs — typically retained for up to 90 days.
Analytics data — governed by Google's default retention settings (26 months for aggregated data).

7. Your rights under UK GDPR

You have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure — ask us to delete your data, subject to any legal retention obligations.
Restriction — ask us to limit how we process your data in certain circumstances.
Portability — receive your data in a structured, machine-readable format.
Object — object to processing based on legitimate interests.
Withdraw consent — where processing is based on consent, you can withdraw at any time without affecting prior processing.

To exercise any of these rights, contact us here or email hello@sponsorgrassroots.co.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted HTTPS connections, hashed password storage, and access controls limiting who within our team can access account data. No internet transmission is 100% secure; you use the Platform at your own risk.

9. Cookies and tracking

For full details of cookies and local storage we use, see our Cookies page.

10. Changes to this policy

We may update this policy from time to time. The date at the top of the page always reflects the most recent version. Continued use of the Platform after an update constitutes acceptance of the revised policy.

11. Contact

Data controller: The Business Ally Ltd · hello@sponsorgrassroots.co.uk

If you have a complaint or data request: contact us here.

Privacy policy.