Privacy Notice
Gloucester City Skittles League · Last updated 20 July 2026
This notice explains what personal information the Gloucester City Skittles League (“the League”, “we”, “us”) collects through its website at www.gloucestercityskittlesleague.com, how we use it, and the rights you have over it. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.
1. Who we are
The Gloucester City Skittles League is the data controller for the personal information described in this notice.
- Controller: Gloucester City Skittles League
- Contact for data protection matters: admin@gloucestercityskittlesleague.com
If you have any questions about this notice or about how we use your information, please contact us at the email address above.
2. The information we collect
Depending on how you interact with the League, we may hold:
Account holders (captains, secretaries, members and administrators who sign in)
- Your name (first name and surname)
- Your email address
- Your telephone number (optional)
- Your postal address (optional)
- A password, which is stored only in an encrypted (hashed) form by our authentication provider - we never see or store your actual password
- Basic sign-in records (whether your email is confirmed, and the date you last signed in)
Players registered to a team
Team captains add their players to the League. For each player we may hold:
- The player’s name
- An optional identifier (used only to tell two players with the same name apart)
- An optional telephone number and postal address
League activity
- Match results and the individual scores of players who took part
- Which players played in which matches
- Any fines recorded against a team
Website administration
- An audit log of significant administrative actions (for example, editing a result or changing a user’s access), recorded to keep the site accountable.
We do not collect any special category data (such as health, ethnicity or similar sensitive information), and we do not use the site for advertising or online tracking.
3. Information that is shown publicly
The League website is a public results-and-statistics service. The following information is visible to anyone who visits the site, which is a normal part of running a sports league:
- Player and team names
- Team rosters (which players belong to which team)
- Match results, individual scores and league tables
- Player and team statistics, and records / hall-of-fame entries
Contact details (email addresses, telephone numbers and postal addresses) are notshown publicly - they are visible only to the League administrators and, where relevant, a player’s own team captain.
4. How and why we use your information (lawful bases)
| What we do | Why | Lawful basis |
|---|---|---|
| Run the League - fixtures, results, tables, statistics | To operate the competition you or your team have entered | Legitimate interests |
| Publish results, names, rosters and statistics on the website | This is the core purpose of a public sports league | Legitimate interests |
| Provide sign-in accounts and the team portal | So captains and officials can manage their teams and submit scores | Legitimate interests / performance of our arrangement with your team |
| Send you League emails - invitations, score-approval and fixture requests, fines notices and announcements | To administer the League and keep members informed | Consent (given when you create an account) and our legitimate interests in running the League |
| Keep an administrative audit log | To keep the running of the League accountable and secure | Legitimate interests |
When you create an account you are asked to agree to receive communication from the League. You can ask us to stop sending you non-essential communications at any time (see Your rights below).
5. Who we share your information with
We do not sell your information, and we do not share it with anyone for marketing. We do use a small number of trusted service providers (“processors”) who handle data on our behalf so the website can function:
- Supabase - hosts our database and manages sign-in / account security. Our data is hosted in the European Union (AWS Europe, Paris -
eu-west-3). - ZeptoMail (Zoho) - delivers the emails the site sends. Emails are sent through Zoho’s European data centre.
- Vercel - hosts and serves the website.
These providers only process personal data on our instructions and under contract. Some of them operate global infrastructure, which may involve transfers outside the UK; where that happens, such transfers are covered by appropriate safeguards (such as the UK’s International Data Transfer Agreement or equivalent standard contractual clauses).
We may also disclose information if we are required to do so by law.
6. Cookies
The website uses only the cookies it needs to work - there are no advertising or tracking cookies:
- A sign-in session cookie, set when you log in, so the site knows you are signed in (strictly necessary).
- Preference cookies (
gcsl_league,gcsl_division) that remember which league and division you were last looking at, for convenience.
Because we use only strictly-necessary and functional cookies and do no tracking, the site does not show a cookie-consent banner. You can delete or block cookies in your browser settings, but signing in to the portal will not work without the session cookie.
7. How long we keep your information
- League records - results, scores, statistics and the player and team names attached to them - are kept as a permanent historical record of the League, in the same way printed league records have always been retained.
- Account and contact details are kept for as long as you have an account or are involved with the League.
- If you ask us to close your account, we will remove your account and personal contact details. Where your name already forms part of a published historical result, we may retain that record; we will discuss options with you on request.
- Audit logs are kept for 12 months and then removed.
8. Children
Players in the League must be 13 years of age or over.
Some players are under 16. Where a player is under 16, we ask the team captain registering them, and the player’s parent or guardian, to be aware that the player’s name and match scores will be shown publicly on the website as part of League results and statistics (contact details are never shown publicly).
If you are the parent or guardian of a player under 16 and you would like their information reviewed, corrected or removed, please contact us at admin@gloucestercityskittlesleague.com and we will help.
9. Your rights
Under the UK GDPR you have the right to:
- Be informed about how we use your information (this notice)
- Access the personal information we hold about you
- Ask us to correct information that is wrong or incomplete
- Ask us to erase your information (subject to the historical-records point above)
- Restrict or object to how we use your information
- Ask for a copy of the information you gave us in a portable format
- Withdraw consent to League communications at any time
To exercise any of these rights, contact us at admin@gloucestercityskittlesleague.com. We will respond within one month. There is no charge for making a request, and exercising your rights will not affect your or your team’s standing in the League.
10. Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put things right. You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO) - www.ico.org.uk - helpline 0303 123 1113
11. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed. Any significant changes will be highlighted on the website.
Gloucester City Skittles League