Privacy Policy

Heldly is operated by [LEGAL ENTITY NAME], a company registered in England and Wales (company number [COMPANY NUMBER]), registered address [REGISTERED ADDRESS] (“Heldly”, “we”, “us”). We are the “controller” of your personal data. If we are required to register with the Information Commissioner’s Office (ICO), our registration number is [ICO NUMBER].

For any privacy question, or to exercise your rights, contact us at privacy@heldly.app.

We collect only what we need to run the Service:

• Account data — your email address, and a display name and phone number if you choose to provide them.
• League data you enter — league names, member names, entry amounts, who has paid, results and standings.
• Waitlist data — the email address you submit to hear about paid features.
• Connected-service data — if you import a league (e.g. by entering a public Fantasy Premier League league ID or a Sleeper username), we read the public league information that service returns. We do not ask for, or receive, your password for those services.
• Technical data — basic device, browser and usage information, and cookies necessary to keep you signed in. If we use analytics, it is privacy-friendly and described in the Cookies section.

We do not intentionally collect special-category data, and we do not knowingly collect data from anyone under 18.

• To provide the Service (create your account, run your leagues, show standings) — lawful basis: performance of a contract with you.
• To contact you about your leagues (e.g. reminders and notifications you enable) — contract / legitimate interests.
• To keep the Service secure and improve it — legitimate interests, balanced against your rights.
• To email you about the waitlist and product updates — consent, which you can withdraw at any time via the unsubscribe link.
• To comply with our legal obligations.

We do not sell your personal data. We share it only with service providers (“processors”) who help us run the Service, under contract and only on our instructions:

• Supabase — database, authentication and hosting.
• Lovable — application hosting/build platform.
• Google — if you choose “Sign in with Google”.
• Any analytics or email provider we use is listed in the Cookies section and updated here as our processors change.

Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or an adequacy decision.

We keep your account and league data for as long as your account is active, and delete or anonymise it within a reasonable period after you close your account or ask us to. Waitlist emails are kept until you unsubscribe or we launch the feature and no longer need them. We may keep limited records longer where the law requires.

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your data, to data portability, and to withdraw consent at any time. To exercise any of these, email privacy@heldly.app and we will respond within one month. You can request deletion of your account and data from within the app or by emailing us.

If you are unhappy with how we handle your data you can complain to the ICO at ico.org.uk, though we ask you to contact us first so we can put things right.

We use cookies that are strictly necessary to keep you signed in and to run the Service. If we introduce analytics or non-essential cookies, we will use a privacy-friendly provider and ask for your consent first. You can control cookies through your browser settings.

We take reasonable technical and organisational measures to protect your data, including encryption in transit and access controls. No system is perfectly secure, but we work to keep your information safe and will notify you and the ICO of a personal-data breach where the law requires.

We may update this policy from time to time. We will change the “Last updated” date above and, for significant changes, tell you directly. Your continued use of the Service after a change means you accept the updated policy.