Privacy policy
Summary
We collect the minimum personal data needed to run your account and our service. We never sell your data. We never share it with bookmakers or advertisers. UK GDPR and the Data Protection Act 2018 apply to how we handle it.
The full policy below explains what we collect, why, who we share it with (only a handful of essential service providers), and the rights you have.
Who we are
BeatTheBookies is operated from the United Kingdom. We are the data controller for personal data processed through this site and are registered with the UK Information Commissioner's Office (ICO). Contact: hello@beatthebookies.bet. We handle data-protection requests through that inbox and use a business correspondence address for formal matters rather than publishing a private residential address on the site.
What data we collect
When you sign up and use the platform, we hold:
- Email address — for login (magic link) and product emails
- Authentication metadata — login timestamps and session metadata managed securely by Supabase
- Subscription status — whether you are on free or paid tier; managed via Stripe
- Stripe customer ID — if you upgrade, Stripe holds your payment details on their PCI-compliant infrastructure; we hold only the reference ID
- Profit entries — any profits you choose to log: amount, bookie, optional notes, timestamp
- Bookie accounts — accounts you choose to log: bookmaker name, status, optional notes
- Walkthrough progress — stored in your browser's localStorage; we never see it server-side
- Email send log — which onboarding emails have been sent to you, to avoid duplicates
- Support emails — if you contact us, we keep the message so we can reply and handle refunds, complaints, or data requests
We do not collect: bank account details, betting account credentials, gambling history, real-name verification documents, your IP address (beyond standard server logs), or any data from third-party trackers.
Why we collect it (lawful basis)
- Contract: email, subscription status, and account data are necessary to provide the service you signed up for
- Legitimate interests: profit and bookie tracking data lets us provide the features the service exists to provide; onboarding emails help new users get value
- Legal obligation: tax-relevant payment records are retained as long as UK accounting law requires
Who processes your data on our behalf
We use essential third-party processors and service providers to run the site. Each is expected to process data under appropriate privacy and data-processing terms.
- Supabase — hosts our database and handles authentication. EU-hosted. Reads: Supabase Privacy
- Stripe — processes subscription payments. Holds your card details (we never see them). Stripe Privacy
- Resend — sends our product emails (welcome, nudges, transactional). Resend Privacy
- Vercel — hosts the site. Standard server logs (visit time, country, browser type) are retained briefly. Vercel Privacy
- Support mailbox provider — stores support emails you send us, including refund, complaint, and data-rights requests.
- Discord — if you choose to join the members' Discord, Discord processes your Discord account data under its own terms.
International transfers: Some of our providers are based outside the UK, which means some data may be transferred outside the UK. Where this happens, we rely on processor terms and transfer safeguards such as Standard Contractual Clauses, UK addenda, or equivalent lawful mechanisms.
How long we keep your data
- Active accounts: indefinitely while subscription is active or recently active
- Cancelled / inactive accounts: deleted on request, or automatically after 24 months of no activity
- Payment records: retained for 6 years (UK tax law requirement) via Stripe
- Server logs: 30 days, retained by Vercel
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Have your data deleted (“right to erasure”)
- Restrict our processing
- Export your data in a portable format
- Object to processing for legitimate-interests purposes
To exercise any of these rights, email hello@beatthebookies.bet. We will respond within 30 days.
You can also complain to the UK Information Commissioner's Office at ico.org.uk if you are not satisfied with our response.
Changes to this policy
We may update this policy. Material changes will be notified to active users by email. Minor changes (clarifications, formatting) will be reflected with an updated “last updated” date at the top.
Email us directly — data requests, deletion requests, or anything else. hello@beatthebookies.bet · Terms of Service