Privacy Policy
1. What we collect
- Account details: your name, email address, billing address and the plan you chose.
- Connection details: the Discord server and channel IDs and names, and the Telegram group and topic IDs and title, that you connect, plus your chosen card style and sports. Any Discord webhook link you give us is stored encrypted and treated as a secret.
- Service records: which cards we posted, when, and to which destination, plus error logs, so we can run the service and fix problems.
- Billing records: invoices and payment status. Card details are handled by our payment provider and are not stored by us.
- Support messages: anything you send us.
- Website data: basic technical data such as IP address and browser type, and cookies as described in section 7.
We do not read or store the messages, members or content of your Discord server or Telegram group. The bots only see the commands you type to them.
2. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Provide the service, post cards, support you | Contract |
| Take payment, keep tax and accounting records | Contract; legal obligation |
| Protect against misuse and trace redistributed cards using the identifying code | Legitimate interests |
| Send service notices (renewals, outages, changes) | Contract; legitimate interests |
| Marketing emails, if you opt in | Consent, which you can withdraw at any time |
3. Identifying code on cards
Cards carry a licence strip with a QR code and a code unique to your subscription. The code does not contain your name or email. Only we can match it to your account. We use it solely to protect our rights if cards are found outside your channels, as set out in our Terms of Service.
4. Who we share data with
We do not sell your data. We share it only with providers who help us run the service, under contract:
- our billing and payment providers [WHMCS and PAYMENT PROVIDER];
- Discord and Telegram, to deliver the cards you asked for;
- hosting, network and email providers [HOSTING PROVIDER, CLOUDFLARE, EMAIL PROVIDER];
- professional advisers and authorities where the law requires.
Fixture and broadcaster information comes from third-party data sources. No personal data about you is sent to them. SportDeck is not affiliated with, endorsed by or sponsored by any league, club, competition or broadcaster. Their names are used only to describe events.
5. How long we keep it
- Account and connection details: while your subscription is active. Connection details are deleted when it ends, and within [30] days at the latest.
- Posting records: up to [90] days.
- Billing and tax records: [6] years, as the law requires.
- Support messages: up to [2] years.
6. Your rights
Under UK GDPR you can ask to see, correct, delete, restrict or move your data, and object to processing based on legitimate interests. Email [SUPPORT EMAIL] and we will reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
7. Cookies
Our website uses only [essential cookies for login and checkout / describe any analytics]. [If you add analytics or advertising cookies, add a consent banner.]
8. Security and transfers
Webhook links are encrypted at rest and connect links are signed. We use access controls and keep software up to date. Some providers may process data outside the UK; where they do we rely on approved safeguards such as the UK addendum to standard contractual clauses or an adequacy decision.
9. Children
SportDeck is not aimed at children under 13 and we do not knowingly collect their data.
10. Changes
We will post updates here and email you about material changes.