Privacy Policy

sweepup.co (“the service”, “we”, “us”) is operated by [COMPANY_NAME], a private company limited by shares registered in England and Wales (company number [COMPANY_NUMBER]), with registered office at [REGISTERED_ADDRESS].

We are the data controller for personal data processed through this service. For data-protection enquiries contact us at support@sweepup.co.

We collect only what is necessary to run the prediction league service:

• Full name and work email address (company admins and employees)
• Company affiliation (league membership)
• Prediction scores submitted during the tournament

We do not collect payment card details — those are handled entirely by Stripe.

We process your data on two bases:

• Contract performance — processing is necessary to deliver the B2B service your employer has purchased (GDPR Art. 6(1)(b)).
• Legitimate interest — service communications, security monitoring, and fraud prevention (GDPR Art. 6(1)(f)).

We do not use your data for third-party marketing.

Your data is retained for the duration of your employer’s active subscription, plus 90 days following cancellation or expiry. After this period, personal data is deleted or anonymised.

We share data with the following processors only to the extent required to provide the service:

• Supabase — database and authentication (EU data processing; DPA in place).
• Stripe — payment processing (processes billing data on our behalf).
• Sentry — error tracking and diagnostics (may receive anonymised technical data).

No other third parties receive your personal data.

Under the UK General Data Protection Regulation and the Data Protection Act 2018 (Articles 15–20) you have the right to access, rectify, erase, or port your personal data, and to object to or restrict certain processing. To exercise any of these rights, email support@sweepup.co. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).