Privacy Policy.

1. Who we are

The data controller for personal data collected through the Platform is Sportalcom 2026 Limited, a company registered in England and Wales with company number 17113507 and registered office at 10 Far Croft, Breaston, Derby, England, DE72 3HL, trading as Sportabal (“Sportabal”, “we”, “us” or “our”).

If you have any question about how we handle your personal data, or wish to exercise your rights, contact us at hello@sportabal.com. We have not appointed a Data Protection Officer because we are not required to under UK GDPR, but our privacy contact is the point of contact for all data-protection matters.

2. Who this policy applies to

• Fans who visit the Site, create an account, or make a Booking.
• Sports Stars who apply to join the Platform or who perform Services.
• Clubs, agents, brands and other commercial partners who interact with the Platform.
• Visitors who browse the Site without creating an account.
• Anyone who contacts us by email, support ticket or social media.

3. The personal data we collect

3.1 Information you give us

Account and identity data. Your legal name, username or display name, date of birth, email address, telephone number, primary residential address and, for Sports Stars, details of your sporting career, club affiliations, identity-verification documents, and the bank account or other payout method you nominate.

Tax and reporting data. For Sports Stars: your Tax Identification Number (such as a UK Unique Taxpayer Reference, or the equivalent in your country of tax residence), your country of tax residence, your VAT-registration status and number (if applicable), and any further information we are required to collect to comply with HMRC reporting rules (see section 4.7).

Booking and transaction data. Details of the Services you book or perform, the instructions you provide, messages sent through the Platform, delivery preferences, attendance details for in-person events, and confirmations of acceptance or cancellation.

Payment data. Billing name and address and the details needed to take payment from a Fan or send a payment to a Sports Star. Card and bank details are entered directly with our third-party payment processor (currently Stripe Payments UK Limited) and are not stored on our own systems.

Content. Videos, audio messages, images and text created or shared on the Platform by Sports Stars in response to Fan requests, and reviews of Sports Stars posted by Fans after a Booking.

Correspondence. The content of any email, support ticket or message you send to us at hello@sportabal.com or via the Platform.

3.2 Information we collect automatically

Technical data (IP address, browser type and version, time-zone, operating system, device identifiers, and how you reached the Site); usage data (pages visited, features used, links clicked, time on page); and cookies and similar technologies (see section 10 and our GDPR Consent Notice).

3.3 Information from third parties

We may receive personal data about you from identity and age-verification providers; payment processors, including Stripe; analytics, advertising and attribution providers; public sources (for example publicly available information about a Sports Star’s career); and agents, clubs or representatives acting on behalf of a Sports Star or commercial partner.

3.4 Special category and sensitive data

We do not seek special-category data (such as health, ethnicity or political opinions) and ask you not to include it in messages or Booking instructions. If a Sports Star or Fan voluntarily shares such data — for example a Sports Star sharing details of an injury or charitable cause — we rely on your explicit consent (UK GDPR Article 9(2)(a)) for the limited purpose for which you shared it. You can withdraw that consent at any time by emailing hello@sportabal.com.

4. How we use your personal data

We only use your personal data when we have a lawful basis under the UK GDPR. The subsections below summarise our main purposes and the lawful basis we rely on.

4.1 To provide the Platform and the Services

Account, booking, content and payment data are used to create and manage your account, process and confirm Bookings, take payment and hold funds with our payment processor, arrange for the relevant Sports Star to perform the Service, deliver the Service to you, and process payments and refunds. Lawful basis: performance of our contract with you (as the supplier of your Booking, or the party engaging a Sports Star), or taking steps at your request before entering into a contract.

4.2 To keep the Platform safe and secure

Technical, usage and account data are used to prevent fraud, detect abuse, investigate suspected breaches of our Terms, and protect the Platform from security incidents. Lawful basis: our legitimate interests in keeping the Platform safe, and compliance with our legal obligations.

4.3 To communicate with you

Contact and account data are used to send service-related messages (Booking confirmations, delivery updates, support replies, important notices, and reminders to Sports Stars to respond to Booking requests). Lawful basis: performance of our contract with you, and our legitimate interests in running the Platform.

4.4 Marketing

Where you have given consent, or where we have a legitimate interest under PECR’s soft-opt-in rule and you have not objected, we may send marketing about Sports Stars, Services and the Platform. You can unsubscribe at any time using the link in any marketing email or by emailing hello@sportabal.com. Lawful basis: consent, or our legitimate interests in promoting the Platform.

4.5 To improve the Platform

Aggregated usage and technical data are analysed to understand how the Platform is used, fix bugs, develop features and improve the experience. Lawful basis: our legitimate interests in improving and growing the Platform.

4.6 To comply with legal obligations

Personal data is used to comply with tax, accounting, anti-money-laundering and consumer-protection law, and to respond to valid requests from courts, regulators or law enforcement. Lawful basis: compliance with a legal obligation.

4.7 Digital Platform Reporting to HMRC

Sportabal may be a “reporting platform operator” under the UK Platform Operators (Due Diligence and Reporting Requirements) Regulations 2023 (SI 2023/817) (the “DPI Rules”), which implement the UK’s version of the OECD model rules for digital platforms. Where the DPI Rules apply, each year Sportabal must collect, verify and report to HMRC the following about every reportable Sports Star who has earned consideration through the Platform during the calendar year: legal name, primary residential address, date of birth, Tax Identification Number, country of tax residence, the financial account identifier used for payouts, the total consideration paid through the Platform (broken down by calendar quarter), and any fees, commissions or taxes withheld. If you are a Sports Star about whom we report, we will provide you with a copy of the information reported, for use in your own tax filings. Lawful basis: compliance with a legal obligation (UK GDPR Article 6(1)(c)).

4.8 Reviews and moderation

When a Fan posts a review after a Booking, we collect the content, the Fan’s display identifier (typically first name and initial), the date, and the Booking it relates to. Reviews are displayed on the relevant Sports Star’s public profile. Sportabal may, acting reasonably, moderate, edit, hide or remove reviews that breach our Website Terms of Use. Lawful basis: performance of our contract with you, and our legitimate interests in maintaining the integrity of the Platform.

4.9 Identity verification and the “Verified” badge

Sports Stars undergo identity verification at on-boarding. We process identity documents and (where appropriate) liveness checks through our identity-verification provider. On success, Sportabal may display a “Verified” badge, confirming only that verification has been completed. Identity documents are deleted once verification is complete, other than to the extent retention is required by law. Lawful basis: performance of our contract with you, compliance with a legal obligation (KYC and AML), and our legitimate interests in protecting Fans.

4.10 Automated decision-making

We do not make decisions producing legal or similarly significant effects on you based solely on automated processing. Some fraud and risk checks (for example by Stripe) include automated logic; you have the right to ask for human review of any decision that has a significant effect on you.

5. Who we share your personal data with

We share personal data only with the following categories of recipient, on a need-to-know basis and (where required) under appropriate written terms:

• Sports Stars and Fans — we share the information needed to fulfil a Booking (for example, the name to be used in a video, or the location of an in-person appearance).
• Clubs — through the Club Dashboard, information about Sports Stars on the Roster, Bookings, Strikes and reporting required under the Club Agreement.
• Payment processors — Stripe and any other regulated payment provider we use, to take payments and send payments.
• Hosting, infrastructure and IT-service providers — to host the Platform, store data and keep the Site running.
• Analytics, marketing and attribution providers — to understand how the Platform is used and, where you have consented, to run marketing campaigns.
• Identity and age-verification providers — to confirm the identity, age and eligibility of Fans and Sports Stars.
• HMRC and other tax authorities — to comply with our reporting obligations (see section 4.7) and other tax law.
• Professional advisers — such as lawyers, accountants and auditors, where necessary to run our business.
• Regulators and law enforcement — where required by law or to protect our rights, property or safety (or that of our users).
• Buyers or investors — if we sell, reorganise or transfer all or part of our business, subject to this Policy.

We never sell your personal data and we do not share it with third parties for their own independent marketing without your consent.

6. International transfers

Some of our service providers are based outside the UK. Where we transfer your personal data outside the UK, we protect it with an appropriate safeguard, such as a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful mechanism. You can obtain a copy of the safeguard for a specific transfer by emailing hello@sportabal.com.

7. How long we keep your personal data

• Account data — for as long as your account is active, and for up to 24 months afterwards so you can reactivate it.
• Booking, payment and transaction data — for up to six (6) years after the end of the relevant financial year, in line with UK tax and accounting law.
• DPI reporting data — for at least five (5) years after the end of the reportable calendar year, where the DPI Rules apply.
• Content — for as long as necessary to deliver the Service and allow a reasonable re-download window, unless a longer period is agreed.
• Reviews — for as long as the Sports Star’s account is active, or until removed under section 4.8.
• Identity-verification documents — deleted once verification is complete, save where retention is required by law (typically for AML record-keeping).
• Marketing data — until you unsubscribe or withdraw consent, plus a short suppression period.
• Records relating to legal claims or disputes — for as long as necessary and for any applicable limitation period.

8. Your rights

Under the UK GDPR you have the rights to be informed, of access, to rectification, to erasure, to restrict processing, to data portability, to object to processing based on legitimate interests or direct marketing, to withdraw consent where we rely on it, and not to be subject to solely automated decisions with significant effect. Exercise any right by emailing hello@sportabal.com. We may verify your identity first, and will respond within one calendar month (extendable by two months for complex requests). There is no fee unless a request is manifestly unfounded or excessive.

You may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113, though we would appreciate the chance to address your concerns first at hello@sportabal.com.

9. Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, audit logging, regular security reviews of our processors, and staff training. We will notify the ICO of any qualifying personal-data breach within 72 hours of becoming aware of it, and affected individuals where the breach is likely to result in a high risk to their rights and freedoms.

10. Cookies and similar technologies

We use cookies and similar technologies to make the Platform work, remember your preferences, measure how the Site is used and (with your consent) personalise content and measure advertising. We group them as strictly necessary, analytics, functionality and marketing cookies. You can manage your preferences at any time through the cookie banner, our Cookie Preferences Centre, or your browser settings. Full details are in our GDPR Consent Notice.

11. Children

The Platform is for adults only. You must be at least 18 to create an account or make a Booking. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data, email hello@sportabal.com and we will delete it.

12. Links to other websites

The Site may link to third-party websites (for example, Sports Stars’ social-media profiles). This Policy only applies to the Sportabal Platform; please read the privacy policy of any other site you visit.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes we will post a notice on the Site and, where appropriate, email you. The “Last updated” date at the top shows the most recent change.

14. Contact us

• All privacy queries and general support: hello@sportabal.com
• Post: Sportalcom 2026 Limited, 10 Far Croft, Breaston, Derby, England, DE72 3HL