Privacy Policy

This Privacy Notice (“Notice”) provides you with the information required under applicable UK data protection laws about how Corporate Sports Leagues Ltd (“CSL”, “we”, “us”) collects, uses, discloses, transfers, stores, retains, or otherwise processes information about you.

When that information identifies you, or can be used to identify you as an individual separate from others, it is considered “personal data” under applicable UK data protection laws.

This Notice applies when you:

• Visit or interact with our websites or official pages on social networks
• Register to take part in our events or participate in those events
• Contact us in any other way, including through customer support, surveys, or service reviews
• Use our websites, services, or documents that reference this Privacy Notice 

This Notice explains: 

• Who is responsible for your data 
• Personal data we collect about you, when, and legal basis  
• Social media pages
• Categories of recipients of your personal data 
• Data transfers outside of the EEA 
• How long we keep your data 
• Keeping your data safe
• Your privacy rights
• Support 
• Changes to this Notice 

Who is responsible for your data 

For the purposes of this Privacy Notice, the “controller” of your personal data is Corporate Sports Leagues Ltd, a UK company with a registered address at Flat 4, 39 Grandsen Avenue, London, E8 3QA, United Kingdom. 

This means we decide why we collect your personal data (“Purpose”), how we handle it (“Processing”), and under what legal grounds we do so (“Lawful Basis”).

Personal data we collect about you, when, and legal basis 

We collect different types of personal data depending on whether you are a player, attendee, website visitor, or company/organisational contact. All of the data listed below is collected by CSL in carrying out our activities.

If we intend to use your personal data for any purpose other than those described below, we will inform you of the new purpose and provide any relevant details. This may be done by updating this Privacy Notice, or, in the case of significant changes, by notifying you directly via email or other communication channels.

Social Media Pages

When you visit or interact with our official social media pages, your personal data may be processed jointly by CSL and the respective social media platform providers. 

In these instances, we act as joint controllers for certain processing activities, while the platform primarily determines the purposes and methods of processing. Our ability to influence these activities is limited. Some processing may fall outside the scope of this Privacy Notice, and we refer you to the privacy notices of the respective platforms for further information.

Any content you post on our social media pages, such as comments, videos, images, likes, or public messages, is published by the platform. We do not use this data for purposes beyond managing our pages and may delete content where necessary. In certain circumstances, we may share your content on our website if permitted by the platform. 

We may also employ social media plug-ins on our website, such as “Like,” “Share,” or “Follow” buttons. These plug-ins may collect information including your IP address, browser type, device details, and interactions with the plug-in, even if you are not logged in to the social media platform. Such data is processed by the platform, and we only receive information that the platform chooses to share with us.

Our social media pages are also used for advertising purposes. Additionally, we may utilise conversion tracking tools, including pixels or tags, on our website to measure the effectiveness of social media campaigns. You may manage your cookie preferences and consent at any time via our consent management system.

Categories of recipients of your personal data 

In the course of carrying out our activities, we may share your personal data with certain third parties and service providers. These recipients process data on our behalf and are bound by contractual obligations to safeguard your personal data in line with UK data protection laws. They include, for example:

• Website hosting providers 
• Analytics providers
• CRM systems 
• Jersey suppliers
• IT support and maintenance providers
• Freelancers engaged to support our activities, including web design, marketing, and legal services.

These recipients only access personal data as necessary to perform their tasks and may not use it for their own purposes.

Data transfers outside of the UK and EEA 

In the course of carrying out our activities, we may share your personal data with our service providers and other third parties located outside the UK and the EEA. In such cases, we will ensure that appropriate safeguards are in place, such as an adequacy decision by the UK Government or Standard Contractual Clauses, to protect your personal data.

How long we keep your data 

We will retain your personal data in line with UK data protection laws for as long as necessary to fulfil the purposes for which it was collected, or to comply with our legal obligations. 

Retention periods are determined on a case-by-case basis, taking into account the type of data, the context in which it was provided, and our legal or regulatory requirements. Once the applicable retention period has expired, we will either delete your personal data or anonymise it so that it can no longer be used to identify you.

Keeping your data safe

We are committed to safeguarding your personal data and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. We also require our service providers and partners to apply adequate security measures through contractual arrangements. Please note, however, that the transmission of personal data over the internet is never entirely risk-free, and we cannot guarantee the absolute security of your data at all times.

Your privacy rights

Under UK data protection laws, you have certain rights in relation to your personal data. These rights apply provided the legal requirements are met. They include:

• Right to be informed

You have the right to be informed about how we process your personal data. We provide this information through this Privacy Notice and will also respond to your enquiries if you contact us directly.

• Right of access

You can request confirmation as to whether we process your personal data, and if so, obtain a copy of that data along with information about how we process it (such as the purposes, categories of data, recipients, storage periods, and your related rights). The first copy will be provided free of charge; further copies may be subject to a reasonable fee.

• Right to rectification

If your personal data is inaccurate or incomplete, you can request that it be corrected or completed.

• Right to erasure (“right to be forgotten”)

You may request the deletion of your personal data in certain circumstances, for example if: the data is no longer needed for the purposes for which it was collected; you withdraw consent (where consent was the legal basis for processing); you object to processing and there are no overriding legitimate grounds; the data has been unlawfully processed; or erasure is required to comply with a legal obligation.

• Right to data portability

Where processing is based on your consent or on a contract, you can request to receive the personal data you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another controller, where technically feasible.

• Right to object

You may object at any time to processing of your personal data that is based on our legitimate interests or on public interest grounds. We will stop processing unless we can demonstrate compelling legitimate reasons that override your interests, or where processing is necessary for legal claims.

You always have the right to object to processing for direct marketing purposes, including profiling related to such marketing.

• Right to restrict 

You may request that we restrict the processing of your personal data in certain circumstances. This may apply if you dispute the accuracy of the data (while we check it), if the processing is unlawful but you prefer us to keep the data rather than delete it, if we no longer need the data but you require it for legal claims, or if you have objected to our processing and we are considering whether our legitimate grounds override yours. During a restriction, we may store your data but will not use it further unless you consent, it is required for legal claims, or there are important public interest reasons.

• Right to withdraw consent

Where we rely on your consent (for example, for newsletters or marketing), you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

• Right not to be subject to automated decision-making

If applicable, you have the right not to be subject to decisions based solely on automated processing, including profiling, if those decisions have legal or similarly significant effects on you.

• Right to lodge a complaint

You have the right to raise questions, concerns, or complaints about how we process your personal data directly with your local supervisory authority. To find details on how to contact the UK Information Commissioner’s Office (ICO), please visit https://ico.org.uk/global/contact-us/. 

Support 

For any questions about how we process your personal data, to exercise your rights, or for support, please contact us at info@corporatesportsleagues.com

Changes to this Notice 

We reserve the right to update this Notice at any time. Updated versions will be posted on our website, and for any significant changes, we may also notify you by email.