Privacy Policy

This Privacy Policy explains how SportStream (“we”, “us”, “our”) collects, uses and protects your personal data when you use our live sports streaming platform. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

SportStream is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your information, contact us at [email protected].

2. Data we collect

• Account data: your name, email address and password (stored securely in hashed form).
• Club data: if you register a club, your club name, sport type and payout bank details.
• Transaction data: records of match passes and season passes you purchase or sell, and payout history.
• Usage data: how you interact with our platform, including matches viewed and device/browser information.
• Payment data: processed securely by our payment provider — see section 4.

3. How and why we use your data

We process your personal data on the following lawful bases:

• Contract: to create and manage your account, deliver streams you have access to, and process purchases and club payouts.
• Legitimate interests: to secure our platform, prevent fraud and improve our service.
• Legal obligation: to keep financial records and comply with tax and accounting law.
• Consent: where required, for example non-essential cookies.

4. Payments

Card payments are handled by Stripe, our third-party payment processor. Your full card details are entered directly with Stripe and are never stored on SportStream’s systems. Stripe processes your payment information in accordance with its own privacy policy and PCI-DSS security standards. We receive only limited transaction information (such as the amount, status and last four digits) needed to fulfil your order and manage club payouts.

5. Cookies

We use essential cookies to keep you signed in and to keep the platform secure. These are necessary for the service to work. Any non-essential analytics cookies are only used where you have given consent, and you can control cookies through your browser settings.

6. Data sharing

We do not sell your personal data. We share it only with trusted service providers who help us run the platform — such as our payment processor (Stripe), streaming infrastructure (Mux) and hosting providers — and only to the extent needed to deliver the service. We may also disclose data where required by law.

7. Data retention

We keep your personal data only for as long as needed to provide the service and to meet our legal obligations. Account data is retained while your account is active. Financial and transaction records are kept for at least six years to comply with UK tax law. When data is no longer needed, it is securely deleted or anonymised.

8. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data (“right to be forgotten”);
• object to or restrict certain processing;
• request a portable copy of your data;
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email [email protected].

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption of sensitive information such as payout bank details, secure password hashing and access controls. No system is completely secure, but we work hard to protect your information.

10. Complaints

If you are unhappy with how we handle your data, please contact us first so we can help. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.