Privacy Policy
Last Updated: August 31, 2026 • Effective Immediately
CueRank (“we”, “our”, or “us”) is committed to protecting and respecting the privacy of individuals who use our digital scoreboards, league management tools, and online tournament platforms (accessible via cuerank.co.uk).
This Privacy Policy explains how we collect, process, store, and safeguard your personal data in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
1. Data Controller Information
For the purposes of the UK GDPR, the Data Controller responsible for the processing of your personal data on this platform is:
Platform: CueRank Digital Sports
Website: https://www.cuerank.co.uk
Data Protection Contact: [email protected]
2. Personal Data We Collect & Lawful Basis (Article 6)
Under Article 6 of the UK GDPR, we only process personal data where an explicit lawful basis exists:
| Category of Data | Purpose of Processing | Lawful Basis (UK GDPR Art. 6) |
|---|---|---|
| Account Registration (Name, Email, Password Hash) | Creating organizer, landlord, and player accounts | Contractual Necessity (Art. 6(1)(b)) |
| Sporting Match Records (Player Name, Frame Scores, Breaks) | Public standings tables, Hotshots leaderboard, match scorecards | Legitimate Interest (Art. 6(1)(f)) |
| Match PINs & Referee Verification | Preventing score tampering and verifying referee authorization | Legitimate Interest (Art. 6(1)(f)) |
| Billing & Payment Data (via Stripe Connect) | Processing league subscriptions and tournament payouts | Contractual Necessity (Art. 6(1)(b)) |
| Optional Analytics Cookies | Measuring platform performance and load speeds | Explicit Consent (Art. 6(1)(a)) |
3. Third-Party Sub-Processors & Security
We partner with industry-leading, enterprise-grade cloud providers to host and secure your data under strict Data Processing Agreements (DPAs):
Hosted in enterprise data centers with encryption at rest (AES-256) and Row-Level Security (RLS).
Provides sub-50ms SSL/TLS edge encryption and automated DDoS protection.
PCI-DSS Level 1 certified payment processing. We never store credit card numbers on our servers.
Delivers transactional notifications (password resets, referee score notifications, invite tokens).
4. Data Retention Policy
We retain account information for as long as your account remains active. If an account is inactive for 24 consecutive months or upon receiving an explicit request for erasure, account details are permanently purged. Historical sporting match records and tournament trophy statistics are preserved as legitimate historical sporting archives, with individual personal identifiers anonymized upon request.
5. Your Legal Rights (Articles 15–22)
Under UK GDPR, you hold specific statutory rights regarding your personal data:
To exercise any of these rights, email our team directly at [email protected]. Requests are processed within 30 days free of charge.
6. Right to Lodge a Complaint with the ICO
If you believe your personal data has not been processed in accordance with UK law, you have the right to lodge a formal complaint with the UK supervisory authority:
Information Commissioner's Office (ICO) • Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF • Helpline: 0303 123 1113 • Website: ico.org.uk