PREMIERSHIP SURVIVOR

Legal

Privacy Policy

Survivor Limited is the data controller for personal data collected through Premiership Survivor. This policy explains what we collect, why we collect it, who we share it with, and the rights you have over it.

Last updated 28 July 2026 · Survivor Limited · Company no. 17342568

1. Who is responsible for your data

Survivor Limited, company number 17342568, is the data controller. For any question about your data, or to exercise any of the rights in section 7, email support@premiershipsurvivor.com.

2. What we collect

2.1 Information you give us

  • Your name or player name, and your email address.
  • Your password, which is stored only as a salted hash — we cannot see it.
  • Your date of birth, which we use to confirm you meet the 18+ requirement and to verify your identity before paying a prize.
  • Your mobile number, if you choose to provide one for match notifications.
  • Any invite or referral code you used to join.
  • Anything you send us by email when you contact support.

2.2 Information created by playing

  • The competitions you have entered and how many entries you hold.
  • Every pick you make, with the time it was submitted.
  • Your results, eliminations and any prize won.
  • A record of each payment: amount, date, payment provider reference and what it paid for.
  • A record of the emails and text messages we have sent you and whether they were delivered.

2.3 Technical information

Our hosting and infrastructure providers keep standard server logs, which include IP addresses and browser information, for security and fault diagnosis. We do not use advertising, tracking or analytics cookies — see our Cookie Policy.

2.4 What we never hold

We do not receive or store your card number, expiry date or security code. Card details go directly to our payment provider and never pass through our systems.

3. Why we use it, and our lawful basis

Performance of a contract

To create and run your account, enter you into competitions, take payment, settle rounds, send you the transactional emails and messages the competition depends on, and pay prizes.

Legal obligation

To keep financial records, to meet tax and accounting requirements, and to confirm the age and identity of prize winners.

Legitimate interests

To keep the platform secure, prevent fraud and duplicate accounts, investigate payment disputes, and improve the service. We balance these against your interests and use the minimum data needed.

Consent

For optional SMS notifications and any marketing email about future competitions. You can withdraw consent at any time — every marketing email has an unsubscribe link, and you can turn off notifications in your account.

4. Who we share it with

We do not sell personal data and we do not share it for anyone else's marketing. We share only what each of these providers needs in order to run the service on our behalf:

  • Supabase — database, authentication and hosting of account, entry and pick records.
  • Resend — sending transactional email (pick confirmations, reminders, results).
  • Twilio — sending optional SMS notifications, where you have given a mobile number.
  • Our payment provider — taking payment and issuing refunds. They are the controller of your card data, not us.
  • Professional advisers, and law enforcement or regulators where we are legally required to disclose.

Each provider is bound by a data processing agreement and may only use the data to provide their service to us. Where a provider processes data outside the UK, that transfer is covered by UK-approved safeguards such as the International Data Transfer Addendum.

5. Other players

Other players can see your player name and, once a round's pick deadline has passed, the picks and results attached to your entries. Nobody else can see your email address, phone number, payment records or a pick before the deadline has passed.

6. How long we keep it

  • Account and competition records: for as long as your account is open, and for six years after it closes where they form part of a financial record.
  • Payment and prize records: six years from the end of the relevant financial year, as required for tax and accounting.
  • Support correspondence: two years from the last contact.
  • Marketing consent records: until you withdraw consent, plus a suppression record so we do not contact you again.

7. Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the personal data we hold about you.
  • Have inaccurate data corrected.
  • Ask us to delete data we no longer need to keep.
  • Object to, or ask us to restrict, processing based on legitimate interests.
  • Withdraw consent for SMS or marketing at any time.
  • Receive your data in a portable, machine-readable format.

Email support@premiershipsurvivor.com and we will respond within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Security

Data is encrypted in transit and at rest, access to the database is restricted by row-level security so one player cannot read another's records, and administrative access is limited to named accounts. More detail on our Security page.

9. Changes to this policy

We will publish any update here with a new “last updated” date, and will email account holders where the change is significant.

Questions about anything on this page? Email support@premiershipsurvivor.com and a real person will come back to you.