← Back to home

Privacy Policy

Last updated: 04 February 2026

This Privacy Policy explains how Courtly Ltd ("we", "us", "our") collects, uses, and protects personal data.

1. Data Controller

Courtly Ltd
Registered in England and Wales
Contact: [email protected]

2. Data We Collect

2.1 Information You Provide

  • Name
  • Email address
  • Account credentials
  • Payment-related information (processed by third-party providers)
  • Tournament and registration data
  • Bank account details (for organizer compensation requests)

2.2 Automatically Collected Data

  • IP address
  • Device and browser information
  • Usage logs
  • Cookies and similar technologies

3. Purpose of Processing

We process personal data to:

  • provide and operate the Service,
  • process subscriptions and payments,
  • communicate with users,
  • comply with legal obligations,
  • prevent fraud and misuse.

4. Legal Bases (GDPR)

Processing is based on:

  • Performance of a contract — to provide the Service and process payments
  • Legal obligations — financial record-keeping, tax compliance
  • Legitimate interests — fraud prevention, service improvement, security
  • User consent — where applicable, such as marketing communications

Where we rely on legitimate interests, you have the right to object to processing.

5. Payments

Payment information is processed by our third-party payment processor, Stripe, Inc.
We do not store full payment card details.

For information on how Stripe processes payment data, see Stripe's Privacy Policy.

6. Data Sharing

We may share data with:

  • payment processors (Stripe, Inc.),
  • hosting and infrastructure providers,
  • analytics and email services,
  • authorities where legally required.

We do not sell personal data.

7. International Transfers

Data may be transferred outside the EU/UK under appropriate safeguards, including Standard Contractual Clauses where applicable.

8. Data Retention

We retain personal data as follows:

  • Account data: Duration of account plus 6 years (for legal/tax purposes)
  • Payment records: 7 years (UK tax law requirement)
  • Tournament data: 3 years after tournament date
  • Marketing preferences: Until consent withdrawn
  • System logs: 90 days

Retention periods may be extended where required by law or for legal claims.

9. User Rights

You have the right to:

  • access your data,
  • request correction or deletion,
  • restrict or object to processing,
  • data portability,
  • withdraw consent where applicable.

Requests can be sent to: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

10. Security

We implement technical and organizational measures to protect personal data, including encryption, access controls, and secure infrastructure.

11. Children's Data

The Service is not intended for children under 16.
We do not knowingly collect data from children.

12. Changes

We may update this Policy from time to time. Material changes will be communicated via email notification to registered users.

Continued use of the Service after notification constitutes acceptance of changes.