Privacy Policy

• Contact data — name, email, phone, organisation when you enquire.
• Booking data — event specification, venue, attendee numbers, dietary or accessibility requirements.
• Safeguarding data — parental consent records, age verification where applicable.
• Provider data — institution details and contact people for course listings.
• Technical data — IP address, device type, browser, pages visited (via cookies — see Cookie Policy).
• Media — photographs and video captured at events, subject to Media Consent.

• Contract — to deliver booked events and services.
• Legitimate interests — to respond to enquiries, improve the Site, and ensure security. Balanced against your rights.
• Consent — for marketing email, optional cookies and media use where consent is required.
• Legal obligation — for tax, safeguarding and incident records.
• Vital interests — in genuine safeguarding emergencies.

Where we process special category data (e.g. health information needed for accessibility) or data relating to children under 13 (always with parental consent), we apply heightened controls and minimise data to what is strictly necessary.

• Venues and clients commissioning the event, only where strictly needed.
• Sub-processors (hosting, email, analytics) under written data processing agreements.
• Law enforcement or regulators where legally required.
• We never sell personal data.

Most data is stored in the UK or EEA. Where transfers to other countries occur (e.g. a US sub-processor), we rely on UK Addendum + EU Standard Contractual Clauses or an adequacy decision, and complete a transfer risk assessment.

• Enquiries: 24 months from last contact.
• Event records (contracts, RAMS, safeguarding logs): 6 years for legal/insurance reasons.
• Marketing list: until you unsubscribe.
• Server logs: 90 days.

Under UK GDPR you have the right to: access, rectify, erase, restrict, port, object, and to withdraw consent at any time.

To exercise any right, email privacy@esporting.co.uk. We respond within one month.

You may complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113. We'd appreciate the chance to resolve any issue first.

We use TLS in transit, encrypted storage at rest where supported, access controls, MFA on admin accounts and routine review of sub-processors.

Our Data Protection Lead is [Name, role], contactable at privacy@esporting.co.uk.

We will post any material changes to this policy on this page with an updated effective date.