Privacy Policy

1. Who we are

Sport & Research is the data controller for personal data processed through this platform. For any privacy query, contact hello@sportandresearch.com.

2. What we collect

Account & profile: name, email, username, optional title, location, sports, bio and links. Content: posts, comments, questions and course progress you create. Marketing contacts: name and email submitted via sign-up/waitlist forms, with your consent status. Payments: handled by Stripe — we receive confirmation and amounts but never store your card details. Technical: limited logs and an IP address used for security, spam prevention and rate limiting.

3. How & why we use it

To provide your account, community and courses (performance of a contract); to send marketing emails such as our review roundup where you have consented (consent); to keep the platform secure and prevent abuse (legitimate interests); and to meet legal obligations. You can withdraw marketing consent at any time.

4. Marketing emails

We only send marketing emails to people who have opted in. Every email includes a one-click unsubscribe link, and you can opt out at any time — we honour it immediately.

5. Cookies

We use only essential cookies needed to sign you in and keep your session secure. We do not use advertising or third-party tracking cookies. CAPTCHA on public forms is provided by Cloudflare Turnstile, which is privacy-focused and does not track users across sites.

6. Service providers

We share data only with providers that help us run the platform, under appropriate agreements:

• Railway — hosting & database
• Brevo — transactional & marketing email
• Bunny.net — file/image storage & delivery
• Stripe — payments (card data handled entirely by Stripe)
• Cloudflare — Turnstile bot protection

Some providers may process data outside the UK/EEA; where they do, appropriate safeguards (such as standard contractual clauses) apply.

7. How long we keep it

Account and profile data is kept while your account is active. When you delete your account, your personal data is erased after a 30-day grace period (during which you can cancel); content you authored is removed and your actions on shared records are anonymised. Marketing contacts are kept until you unsubscribe or ask us to delete them. Security logs are kept only as long as needed.

8. Your rights

Under UK GDPR you can: access your data; correct it; delete it; restrict or object to processing; request portability; and withdraw consent. You can act on most of these yourself — edit your profile, delete your account from your profile page, or unsubscribe from emails — or contact us at hello@sportandresearch.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

Passwords are hashed, payments are handled by Stripe, sessions are protected, and access to admin features is permission-controlled. No system is perfectly secure, but we take reasonable measures to protect your data.

10. Children

The platform is intended for users aged 16 and over.

11. Changes

We may update this policy; material changes will be notified in-app and the "last updated" date revised.

12. Contact

Email hello@sportandresearch.com for any privacy request.