Privacy Policy

1. Who We Are

British Boxers (britishboxers.uk) is operated from the United Kingdom. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

2. Information We Collect

We collect the following categories of personal data:

• Account data: name, email address, and login method when you register.
• Payment data: subscription status and Stripe customer ID. We do not store full card numbers — all payment processing is handled by Stripe, who are PCI-DSS compliant.
• Usage data: pages visited, features used, and interactions with the site (collected via analytics).
• User-generated content: forum posts, comments, predictions, and any other content you submit.
• Communications: emails you send to us or notifications you opt into.

3. How We Use Your Information

We use your personal data for the following purposes:

• To provide and maintain the service, including your account and subscription.
• To process payments and manage your Pro subscription via Stripe.
• To send transactional emails (account confirmation, subscription receipts, password resets).
• To send marketing emails and push notifications, where you have opted in.
• To improve the site through aggregated, anonymised analytics.
• To moderate user-generated content and enforce our Terms of Service.
• To comply with legal obligations.

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

• Contract: processing necessary to provide the service you have subscribed to.
• Legitimate interests: analytics, security, and improving the service.
• Consent: marketing emails and push notifications (you may withdraw consent at any time).
• Legal obligation: where required by law.

5. Data Sharing

We do not sell your personal data. We share data only with the following trusted third parties:

• Stripe: payment processing. Stripe Privacy Policy
• Manus (hosting platform): server infrastructure and database hosting.
• Email service provider: for sending transactional and marketing emails.

All third-party processors are contractually bound to handle your data in accordance with UK GDPR.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records, which are retained for 7 years under UK tax law).

7. Cookies

We use essential cookies to maintain your login session. We may also use analytics cookies to understand how the site is used. You can control cookie preferences through your browser settings. Disabling essential cookies will prevent you from staying logged in.

8. Push Notifications

If you opt in to push notifications, we will send you alerts about breaking boxing news and fight results. You can withdraw consent and disable push notifications at any time through your browser or device settings, or from your profile page on the site.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your data ("right to be forgotten").
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please use the contact form on the site. We will respond within 30 days.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Payment data is handled exclusively by Stripe and never passes through our servers.

11. Children's Privacy

Our service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on the site. The "last updated" date at the top of this page reflects the most recent revision.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

14. Contact

For any privacy-related queries or to exercise your rights, please use the contact form available on the site.