The Rally Club Privacy Policy
Last updated: 13 October 2026
1. Who we are and what this policy covers
This policy explains how The Rally Club Ltd collects and uses your personal data when you use our fantasy tennis app (on iOS and Android) and our website at therallyclub.co.uk. One policy covers both, because the same company runs them and handles your data the same way.
The Rally Club Ltd is the controller of your personal data. We are a company registered in England and Wales (company number 16122117), with our registered office at 6 Harrington Road, London, SE25 4LU. Our ICO registration number is ZC153249.
If you have any questions about this policy or your data, email us at support@therallyclub.co.uk.
2. Information we collect
We collect only what we need to run the game, keep accounts secure and improve The Rally Club.
| Type of data | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, username / team name, login credentials (handled by our sign-in provider, not stored by us in plain text) | You, when you sign up |
| Game activity | Squads you pick, transfers, substitutions, wildcards, points, league positions | Your use of the app |
| Public profile | Your username and team name, shown on leaderboards | Your use of the app |
| Communications | Messages to support, survey and feedback responses, beta-test feedback | You |
| Marketing preferences | Whether you want emails or newsletters from us | You |
| Device and usage data | Device type, operating system, app version, IP address, crash reports, push notification token, pages and screens viewed | Your device, automatically |
| Website data | Contact or sign-up form entries, cookies and similar technologies (see section 9) | Your use of the website |
We do not collect special category data (such as health or ethnicity), and we do not ask for your precise location.
3. How we use your data and our lawful bases
UK data protection law requires us to have a lawful basis for each use of your data. These are ours.
| What we do | Lawful basis |
|---|---|
| Create and manage your account, run the game, calculate scores and show leaderboards | Contract — we need it to provide the service you signed up for |
| Answer your questions and support requests | Contract, or legitimate interests |
| Keep the app secure, prevent cheating, multiple accounts and fraud | Legitimate interests — protecting a fair game for all players |
| Fix bugs, analyse how features are used and improve the game | Legitimate interests — making the app better |
| Send service messages (rule changes, tournament reminders, account notices) | Contract, or legitimate interests |
| Send marketing emails and newsletters | Consent — you can opt out at any time |
| Send push notifications | Consent — set through your device settings |
| Use non-essential cookies on the website | Consent |
| Comply with the law and respond to lawful requests | Legal obligation |
We do not sell your personal data, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who we share your data with
We share your data only with trusted service providers who help us run The Rally Club, under contracts that require them to protect it and use it only on our instructions.
| Provider | What they do for us |
|---|---|
| Auth0 (Okta) | Account sign-up, login and authentication |
| Amazon Web Services (AWS) | Hosting our servers and storing data |
| MongoDB | Database for accounts and game data |
| Apple App Store and Google Play | App distribution, and push notifications through their services |
| Mailgun | Sending service emails and newsletters |
| Sentry | Understanding app use and fixing errors |
| Lovable | Running our website and its forms |
| Contractors and professional advisers | Developers, accountants and legal advisers, under confidentiality |
Other players see your username, team name, squad and points on leaderboards. We use a third-party tennis data provider for match results and player statistics, but we do not send them your personal data.
We may also share data if the law requires it, to protect our rights or the safety of others, or as part of a sale or restructuring of our business, in which case the buyer must protect your data in line with this policy.
5. International transfers
We aim to store your data in the UK or European Economic Area. Some of our providers, such as Auth0, AWS and MongoDB, are based in the United States or may access data from outside the UK.
When your data leaves the UK, we make sure it is protected by one of the safeguards UK law allows. These include UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum. You can ask us for details of the safeguard that applies.
6. How long we keep your data
We keep your data only for as long as we need it.
| Data | How long we keep it |
|---|---|
| Account and game data | While your account is open, then deleted within 30 days of you closing it |
| Past leaderboard results | Kept after account closure only in anonymised form |
| Support messages | 2 years after the conversation ends |
| Marketing preferences | Until you unsubscribe, then a suppression record so we don't email you again |
| Device, usage and crash data | Up to 26 months |
| Backups | Overwritten on a rolling cycle of up to 90 days |
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict how we use your data
- object to our use of your data where we rely on legitimate interests, and to direct marketing at any time
- receive your data in a portable format, or have it sent to another organisation
- withdraw consent at any time, without affecting anything we did before you withdrew it
You can ask us to delete your account at any time by emailing support@therallyclub.co.uk from the email address linked to your account. We will delete your account and its data within 30 days and confirm when it is done. To use any other right, email us at the same address. We will respond within one month and will not usually charge a fee.
8. Children
The Rally Club is for people aged 13 and over. If you are under 13, please do not use the app or give us any personal data. If we learn that we have collected data from a child under 13, we will delete the account and its data.
If you are aged 13 to 17, your account starts on our most privacy-protective settings. We do not send you marketing, and we do not use non-essential cookies or tracking unless you choose to turn them on. Leaderboards show only your username and team name, so please do not use your real name in either.
9. Cookies and similar technologies
Our website uses cookies, and our app uses similar technologies such as device identifiers and software development kits.
- Strictly necessary: needed for the website and app to work, such as keeping you logged in and security. These do not need your consent.
- Analytics: help us understand how people use the website and app. We use these only with your consent on the website.
- Marketing: help us measure our advertising and social media campaigns. We use these only with your consent.
You can change your website cookie choices at any time through the cookie banner or the "Cookie settings" link in our website footer, and control app tracking and notifications in your device settings. We do not track you across other companies' apps or websites.
10. Security
We protect your data with encryption in transit and at rest, secure authentication through Auth0, and access controls so that only people who need your data can see it. No system is completely secure, so please use a strong, unique password. If a data breach is likely to put you at high risk, we will tell you and the ICO as the law requires.
11. Changes, contact and complaints
We may update this policy as The Rally Club grows. We will change the date at the top and, for significant changes, tell you in the app or by email before they take effect.
Contact us at support@therallyclub.co.uk or write to The Rally Club Ltd, 6 Harrington Road, London, SE25 4LU.
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.