Privacy notice

Review this with your own adviser before launch. It describes what this site actually does.

Who we are

Pick The Win is run by Back Office Boss Ltd. Contact: hello@pickthewin.co.uk.

What we collect

Your username, email address, a securely hashed password and your match picks. When you confirm you're 18 or over and live in the UK, we record that you did and when. We record your email choices: game updates, and offers from sponsors. We also briefly record IP addresses of failed log-ins and sign-ups to block abuse. These records are deleted after an hour.

If you signed up through a friend's invite link, we record who invited you, so they can earn a Score Boost once you've played two weeks. They see your username on their Me page. If you came from one of our adverts, we record which one (for example "facebook"), only to see which adverts work.

If you add a profile picture or a mini-league logo, everyone who can see that table can see it. We shrink it to a small square and remove hidden details such as where a photo was taken. You can remove it any time from the Me page (or the league page), and it's deleted with your account.

If you choose Continue with Google, Google tells us your email address and name and confirms the email is yours. We keep the email and a Google account number so we can recognise you next time. We never see your Google password, and we don't get anything else from your Google account.

Why

To run your account and the game: showing your picks and points, the league tables, and password resets. The age and UK confirmations are needed to check who can win prizes.

Emails

Game updates (deadline reminders, results and news about the game) are on unless you untick them when you sign up or on the Me page. Offers from sponsors are only sent if you tick that box, and you can untick it any time on the Me page. Password-reset emails are always sent when you ask for one. Offers from sponsors are sent by us. We never sell your data or give your email address to sponsors.

Phone reminders

If you tap Turn on reminders on the Me page and allow notifications, your phone gives us a notification address at Google, Apple or Mozilla (whichever runs notifications on your phone) and a code to lock the messages so only your phone can read them. We store these with your account and use them only to send pick reminders. The message passes through that company to reach your phone. We also keep a short record of which reminders we've sent you (so you never get the same one twice), deleted after three weeks. Turn reminders off on the Me page, or turn off notifications for the site in your phone's settings, and we stop. Deleting your account deletes all of this.

Chat

If you use chat, we store your messages on our server with your username and picture, so they show on any device and so we can deal with reports. Messages aren't private between players: we (the site owner) can read them, which is how we keep chat safe. Messages are deleted automatically after 3 months. When a message is reported we keep a copy of it, who reported it and what we decided, plus any cards or bans, for 12 months so we can treat repeat problems fairly. Your chat settings and anyone you've blocked are kept with your account. Deleting your account deletes your messages.

Prize winners

If you win, the claim form asks for your full name, postal address, date of birth, the bank account to pay your prize into and, if you like, a phone number. We use these only to check you're eligible, to make sure each prize goes to a different person (we compare claims with earlier winners to spot one person using more than one account), and to send the prize. Bank details are locked (encrypted) as soon as you send them, and only the site owner can unlock them, to make the payment. Once the prize is paid, the bank details are deleted from the site, unless you've asked us to keep them.

Paying future prizes automatically: if you tick this when you claim, we keep your claim details and locked bank details so you don't need to claim again. You can change or delete them on the Me page at any time. They're also deleted if you close your account or don't log in for 12 months. To spot duplicate accounts we keep a scrambled "fingerprint" of each bank account that's been paid, which can't be turned back into the account number.

For the season prize, and occasionally for others, we may also ask to see photo ID by email; we delete the copy once it's checked and never store it on the site. Winners' details are kept only as long as needed to deliver the prize and keep basic records.

Who can see what

Other players see your username, points and picks once each match has kicked off. Your email address is only visible to the site owner.

We may also share the top of the table and prize winners publicly, for example on social media, using usernames, profile pictures, points and positions only. We never share real names, email addresses or anything from a prize claim. If you'd rather not be shown this way, change your username to something anonymous or remove your picture on the Me page, or contact us.

Cookies

We only use cookies the site needs to work: two keep you logged in (for up to a year since your last visit, unless you log out), and a couple remember small choices, such as hiding a tip you've already read. There are no advertising, analytics or tracking cookies. If that ever changes, we'll update this notice first and ask for your permission before any such cookie is set.

Your rights

You can change your name and password, or delete your account and all your picks, from the Me page. When an account is deleted we keep only a short note for our own records: the username, when it joined and left, how many picks it made, and any reason chosen when leaving. The email address, picks and picture are deleted. If you had won a prize, your picks stay only so that table still shows its winner, as an anonymous "Former player"; your name, email address and picture are removed. For anything else, including a copy of your data, contact us at hello@pickthewin.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).