Scoryboard provides an online platform for creating and managing tournaments, leagues, teams, fixtures, matches, results, rankings and other sporting competitions.
This policy explains how we collect, use, share and protect personal data through the Scoryboard website, applications and services (together, the Services).
We process personal data in accordance with applicable UK data protection and privacy law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and the Data (Use and Access) Act 2025.
In this policy, personal data means information relating to an identified or identifiable individual.
Depending on the circumstances, we act either as a controller or as a processor of personal data.
When Scoryboard Is a Controller
Scoryboard is a controller when we decide why and how personal data will be processed. This generally includes personal data used for:
Scoryboard user and customer accounts;
subscriptions, payments and billing;
enquiries and customer support;
administering our customer relationships;
operating, securing and improving the Services;
service communications;
website and product analytics;
preventing fraud, misuse and security incidents;
marketing, where permitted by law; and
meeting our legal, regulatory and contractual obligations.
When Scoryboard Is a Processor
Customers may use Scoryboard to process personal data about players, participants, team members, officials, employees, volunteers and other individuals.
Where a customer—such as a local authority, sports organisation, venue operator, school, club, league or competition organiser—decides why that personal data is processed, the customer is normally the controller and Scoryboard acts as its processor.
In those circumstances:
the customer determines the purposes and lawful basis of the processing;
Scoryboard processes the data on the customer’s documented instructions, unless the law requires otherwise;
the customer decides what participant information is collected, used, published and retained; and
requests about that data should normally be made to the relevant customer first.
Personal Data We Process
Depending on how the Services are used, we may process:
Account and contact information
name;
email address;
telephone number;
organisation and job role;
username, account identifier and permissions;
authentication and account-security information; and
communication preferences.
participant or player names and identifiers;
team names and membership;
competition entries;
fixtures, scores and results;
rankings, statistics and tables;
roles such as coach, official or organiser; and
competition administration or disciplinary information.
subscription and purchase details;
billing contact information;
transaction references;
payment status; and
accounting and tax records.
IP address;
browser, operating system and device information;
login and authentication activity;
pages and features used;
dates, times and referring URLs;
application events;
cookie or similar technology identifiers;
diagnostic and performance information; and
security and audit logs.
Special Catagory and Sensitive Information
Scoryboard’s standard competition-management functions are not designed to require special category personal data, such as information about health, ethnicity, religion, political opinions, sexual orientation or biometric identification.
Customers must not enter special category personal data, criminal-offence data or other highly sensitive information unless its use is necessary, lawful and permitted under their agreement with Scoryboard.
Where a customer chooses to process such information, the customer is responsible for identifying an appropriate lawful basis and, where required, an Article 9 condition or other statutory condition.
How And Why We Use Personal Data
Where Scoryboard acts as controller, we may use personal data to:
create and administer accounts;
provide subscriptions and the Services;
authenticate users and manage permissions;
process payments and maintain financial records;
provide support and respond to enquiries;
send operational, security and service messages;
monitor performance, diagnose problems and improve the Services;
understand how the Services are used;
prevent fraud, misuse and security threats;
protect our rights and those of customers and users;
comply with legal or regulatory requirements;
establish, exercise or defend legal claims; and
send marketing communications where permitted.
Our Lawful Basis
Contract: where processing is necessary to enter into or perform a contract with you.
Legitimate interests: where processing is necessary to operate, secure and improve Scoryboard, support customers, administer our business or prevent misuse, provided those interests are not overridden by individual rights.
Legal obligation: where processing is necessary to comply with a legal or regulatory requirement.
Consent: where consent is required, including for certain marketing or non-essential cookies and similar technologies.
Public Competition Information
Customers may use Scoryboard to publish competition information, including team or participant names, fixtures, scores, results, rankings, statistics and league tables.
The customer controls what is published and is responsible for ensuring that publication is lawful, fair, transparent and limited to what is necessary.
Customers should take particular care before publishing information about children or vulnerable people. Scoryboard may provide privacy settings and access controls, but use of those controls does not replace the customer’s data protection responsibilities.
Information made public may be seen, copied or indexed by others outside Scoryboard’s control.
Children And Young People
Scoryboard may be used to administer competitions involving children and young people.
Where a customer enters information about children, that customer is normally the controller and must determine the lawful basis for processing, provide age-appropriate privacy information and decide whether information should be publicly visible.
Customers should collect and publish only the minimum information necessary and should carefully assess the risks of displaying children’s names, images, statistics or other identifiers.
Where the Services are likely to be accessed directly by children, Scoryboard will consider and apply the ICO’s Children’s Code to the extent applicable, including its principles concerning the child’s best interests, transparency, data minimisation, privacy settings, profiling and data-sharing.
Sharing Personal Data
cloud-hosting, database and infrastructure providers;
payment and billing providers;
authentication, email and communications providers;
analytics, monitoring and error-diagnostic providers;
security and fraud-prevention providers;
customer-support systems;
professional advisers, insurers and auditors;
regulators, courts, law-enforcement bodies and public authorities; and
a purchaser, investor or successor in connection with a proposed or completed business reorganisation or sale.
International Transfers
UK adequacy regulations;
the UK International Data Transfer Agreement;
the UK Addendum to the European Commission’s Standard Contractual Clauses;
the UK Extension to the EU-US Data Privacy Framework, where applicable; or
another legally permitted safeguard or exception.
Security
We use technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, destruction, disclosure or access.
These measures may include access controls, authentication, encryption, secure hosting, backups, logging, monitoring, vulnerability management, incident-response procedures and restrictions on staff and supplier access.
Access is limited to people and providers who require it for authorised purposes and who are subject to appropriate confidentiality obligations.
No online service can guarantee absolute security. Users and customers must also protect their login credentials, configure permissions appropriately and promptly report suspected unauthorised access.
Retention
account information is retained while the account is active and for an appropriate period afterwards;
financial records are retained for applicable tax, accounting and legal periods;
support and business communications are retained for an appropriate period to manage relationships and disputes;
technical and security logs are retained for periods proportionate to their operational and security purposes; and
customer-controlled data is retained in accordance with the customer’s instructions and contract.
Cookies And Similar Technologies
operating sessions and user accounts;
authentication and security;
remembering settings;
measuring performance and usage; and
analytics or marketing.
Marketing Communications
We may send information about Scoryboard products, services and updates where permitted by data protection law and PECR.
Where consent is required, marketing will be sent only after that consent has been obtained. Marketing preferences can be changed at any time using the unsubscribe link in a message or by contacting us.
Operational messages about accounts, security, subscriptions or availability of the Services are not marketing and may still be sent where necessary.
Automated Decision Making
Scoryboard does not currently use personal data, in its capacity as controller, to make solely automated decisions that produce legal or similarly significant effects on individuals.
If this changes, we will provide the information and safeguards required by applicable law.
Automated fixture generation, score calculation, rankings or competition tables will not ordinarily constitute decisions producing legal or similarly significant effects.
Your Data Protection Rights
be informed about processing;
request access to their personal data;
have inaccurate or incomplete data corrected;
request deletion of personal data;
request restriction of processing;
receive certain personal data in a portable format;
object to processing based on legitimate interests;
object to direct marketing;
withdraw consent; and
benefit from applicable safeguards relating to automated decision-making.
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Website: ico.org.uk
Telephone: 0303 123 1113
If another organisation is the controller of your information, you may also use that organisation’s complaints procedure or contact its Data Protection Officer.
Third Party Services And Links
The Services may contain links to third-party websites or integrate with services operated by other organisations. Those organisations may act as independent controllers and apply their own privacy policies.
Scoryboard is not responsible for the privacy practices of independent third parties. You should review their privacy information before providing personal data.
Changes To This Policy
We may update this policy to reflect changes to the Services, our processing practices or applicable law.
The latest version will be published on the Scoryboard website with its effective date. Where a change materially affects how we use personal data, we will take reasonable steps to bring it to the attention of affected users.
Continued use of the Services does not override any consent requirement or other rights under data protection law.
Contact Us
Questions, rights requests and privacy complaints can be sent to: