Privacy Policy — Fulltimer FC

Last updated: 22 July 2026

This policy explains how Fulltimer FC ("we", "us") collects, uses, and protects your personal data when you use fulltimerfc.com (the "Service"), in line with UK GDPR and the Data Protection Act 2018.

1. Who we are

Fulltimer FC is an independent football prediction game. It is not affiliated with the Premier League or any football club. For data protection purposes, the data controller is Fulltimer FC (trading name), contactable at legal@fulltimerfc.com.

2. What data we collect

Account data: email address, password (stored securely, hashed — we never store your password in plain text), display name.
Activity data: your match predictions, table predictions, league memberships, and points/leaderboard history.
Technical data: basic information such as IP address and device/browser type, collected automatically for security and to keep the Service running properly.
Prize-related data: if you win a competition, we may ask for additional information (such as an address, for physical prize delivery) solely to fulfil that prize.

We do not collect more information than we need to run the Service and administer competitions.

3. How we use your data

We use your data to:

Create and manage your account.
Record and score your predictions, and display leaderboards within leagues you belong to.
Communicate essential account information (e.g. email confirmation, password resets).
Administer prize competitions, including verifying and contacting winners.
Maintain the security and proper functioning of the Service.
Send you optional updates or marketing communications, but only if you've opted in — you can withdraw this consent at any time.

4. Legal basis for processing

We process your data on the following bases under UK GDPR:

Contract: processing needed to provide the Service you've signed up for (accounts, predictions, leagues).
Consent: for optional marketing communications, which you can withdraw at any time.
Legitimate interests: for basic security, fraud prevention, and service reliability, balanced against your rights.

5. Sharing your data

We do not sell your personal data.
If you win a sponsored prize competition, we will share the minimum information necessary with that gameweek's sponsor solely to fulfil the prize (e.g. your name and delivery address), and only with your knowledge that this is happening as part of claiming the prize.
We use third-party service providers to run the Service (for example, database hosting and authentication providers, and hosting/deployment infrastructure). These providers process data on our behalf under their own data processing agreements and only to the extent needed to provide their service to us.
We may disclose data if required by law or to protect the rights, safety, or property of Fulltimer FC or others.

6. International data transfers

Some of our service providers may process or store data outside the UK. Where this happens, we rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent UK-approved mechanisms) to ensure your data remains protected to UK standards.

7. Cookies and analytics

We use essential cookies to keep you logged in and the Service functioning. If we use analytics tools, we aim to use privacy-respecting options and will provide clear information and, where required, a way to manage your preferences.

8. Data retention

We keep your account and prediction data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we're required to retain certain records for legal or accounting purposes (for example, records relating to a prize you won).

9. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten"), subject to certain exceptions.
Object to or restrict certain processing.
Request a copy of your data in a portable format.
Withdraw consent for marketing at any time.
Complain to the UK Information Commissioner's Office (ICO) if you believe your data has been mishandled — visit ico.org.uk.

To exercise any of these rights, contact us at legal@fulltimerfc.com.

10. Data security

We take reasonable technical and organisational measures to protect your data, including encrypted password storage and access controls on our database. No system is completely secure, but we work to keep your data safe and will notify affected users and, where required, the ICO in the event of a serious data breach.

11. Children

The Service is intended for users aged 18 and over, in line with our eligibility requirements for prize competitions. We do not knowingly collect data from anyone under 18.

12. Changes to this policy

We may update this policy from time to time. We'll post the updated version here with a new "last updated" date, and notify you of material changes where appropriate.

13. Contact us

For any questions about this policy or your data, contact legal@fulltimerfc.com.