Privacy & Cookie Policy

Last updated: 8 February 2026

Bristol Poker League (“we”, “us”) is committed to protecting your privacy. This policy explains how we collect, use, store and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and how we use cookies in line with the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Bristol Poker League is a community league running live poker events in Bristol. For the purposes of data protection, we are the data controller for the personal data we process via this website and our league operations. You can contact us at [email protected].

2. What data we collect

  • When you use this website: We may collect technical data such as your IP address, browser type, device type and pages visited. Our server and any analytics we use (only with your consent) may log this information.
  • When you contact us: We collect the information you provide (e.g. name, email, message content) so we can respond.
  • When you sign in to the admin area: We store your login credentials (email and a secure password hash), name and role to manage access.
  • League and events: If you participate in the league, we may process your display name, results and points for leaderboards and tournament administration, as described when you join or when data is entered by organisers.

3. Legal basis for processing (UK GDPR)

We process your data only where we have a lawful basis:

  • Consent: Where you have given clear consent (e.g. for non-essential cookies or optional communications).
  • Contract: Where processing is necessary to provide a service you have asked for (e.g. administering the league).
  • Legitimate interests: Where we have a legitimate interest (e.g. running the website, security, responding to enquiries) and it is not overridden by your rights.
  • Legal obligation: Where we must process data to comply with the law.

4. How we use your data

We use your data to:

  • Run and improve this website
  • Respond to your enquiries and communicate with you
  • Manage admin access and league operations (e.g. leaderboards, results)
  • Comply with legal obligations and protect our rights

We do not sell your personal data. We do not use your data for automated decision-making or profiling in a way that has legal or similarly significant effects.

5. Cookies

A cookie is a small text file stored on your device when you visit a website.

  • Strictly necessary cookies: These are essential for the site to work (e.g. session cookies for admin login, security). They do not require your consent under UK law but we list them here for transparency.
  • Preference/functional: We store your cookie consent choice (e.g. in your browser’s local storage) so we do not show the consent banner again and can respect your “accept” or “reject non-essential” choice.
  • Analytics or marketing cookies: If we use any, we will only enable them after you have accepted them in our cookie banner.

You can change your browser settings to block or delete cookies. Blocking strictly necessary cookies may affect how the site works (e.g. you may not be able to stay logged in to the admin area).

6. Data retention

We keep your data only for as long as necessary:

  • Enquiry and contact data: for the duration of the enquiry and a short period after for follow-up.
  • Admin accounts and league data: for as long as you have an account or participate in the league, and for a reasonable period after for records and legal purposes.
  • Server and access logs: for a limited period (e.g. a few months) unless we need them for security or legal reasons.

After the retention period we delete or anonymise the data.

7. Your rights (UK GDPR)

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete data.
  • Erasure: Ask us to delete your data in certain circumstances (“right to be forgotten”).
  • Restrict processing: Ask us to limit how we use your data in certain cases.
  • Object: Object to processing based on legitimate interests or for direct marketing.
  • Data portability: Receive your data in a structured, machine-readable format where applicable.

To exercise any of these rights, contact us at [email protected]. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk.

8. Security

We use appropriate technical and organisational measures (e.g. secure connections, hashed passwords, access controls) to protect your data. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take your privacy seriously.

9. Third parties

We may use third-party services (e.g. hosting, email, Cloudflare for security/captcha). Those providers may process data on our behalf under contracts that require them to protect data and use it only as we instruct. We do not share your data with third parties for their own marketing.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will change when we do. We encourage you to review this page periodically.

11. Contact

For any questions about this privacy and cookie policy or our use of your data, contact us at [email protected].