Privacy Policy
Last updated: [PUBLICATION DATE]
Who we are
Behind The Gloves Limited ("BTG", "we"), company number [COMPANY NUMBER], registered office [REGISTERED ADDRESS], is the data controller for personal data processed on this platform. Contact: info@btg-boxing.com.
This policy covers the 7th Punch competition platform. The main Behind The Gloves website has its own privacy policy.
What we collect
- Account details: email address, first and last name, display name, company name, and your marketing preference.
- Competition data: your entry type and status, your picks and when you saved them, your score and rank.
- Payment data: if you make a Donation Entry, payment is handled by Stripe. We never see or store your card number. We store the payment status, amount and Stripe's reference for your transaction.
- Attribution data: where your visit came from (for example, a link on LinkedIn or a QR code at an event), captured through standard UTM tags and the referring page.
- Technical data: limited log and security data generated by operating the platform (such as timestamps and IP addresses in server logs).
- Correspondence: emails you send us.
We do not knowingly collect data from anyone under 18 — the platform is for adults only.
How we use it, and our legal grounds
| What we do | Why (lawful basis) |
|---|---|
| Create and run your account, take entries, record picks, calculate scores, publish results, deliver prizes | Performing our contract with you (the competition Terms) |
| Process your €5.50 Donation Entry and any refund | Performing our contract with you |
| Show your display name and company on the public standings and event screens | Performing our contract with you — a public leaderboard is an inherent, disclosed feature of the competition |
| Send service emails (sign-in links, entry confirmation, pick reminders, results, winner notification) | Performing our contract with you / our legitimate interest in running the competition properly |
| Send marketing about Midnight Mayhem and Behind The Gloves | Only with your consent (the opt-in box at sign-up). Withdraw any time via the unsubscribe link or by emailing us |
| Keep a record of entrants and their companies in our CRM, including where your entry came from (UTM attribution) | Our legitimate interest in understanding and growing our business-to-business event audience |
| Prevent fraud, abuse and multiple entries; secure the platform | Our legitimate interest in running a fair, secure competition |
| Keep financial and tax records | Legal obligation |
Who we share it with
We use trusted service providers to run the platform. They process data on our instructions and cannot use it for their own marketing:
- Supabase — database, login and hosting of competition data (hosted in the EU)
- Stripe — payment processing (Stripe also acts as an independent controller for its own regulatory purposes — see Stripe's privacy policy)
- HubSpot — our CRM and email platform
- Resend — delivery of sign-in and service emails
- Lovable — website hosting infrastructure
- Couriers — winners' names and delivery addresses, for prize shipment only
We may also disclose data to professional advisers, or where the law requires it. The charitable cause receives donation totals only — never your personal data. We do not sell personal data, and there is no advertising on the platform.
International transfers
Competition data is hosted in the European Union. Some of our providers (for example Stripe, HubSpot and Resend) are US companies; where data is transferred outside the UK/EEA, it is protected by recognised safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
How long we keep it
- Competition and account data: for the competition period and up to 12 months after the event, after which it is deleted or anonymised.
- Payment and financial records: 6 years, as required for tax and accounting.
- Marketing data: until you unsubscribe or 12 months after the event, whichever is sooner, unless you remain opted in to BTG communications.
- We may keep a minimal suppression record (your email) so we don't contact you again after an unsubscribe or deletion request.
Your rights
You can ask us to: access the data we hold about you; correct it; delete it; restrict or object to how we use it (including any legitimate-interest use); and give you a copy in a portable format. Where we rely on consent, you can withdraw it at any time. Email info@btg-boxing.com and we will respond within one month.
You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); if you live in the EU, your local data protection authority.
Cookies and local storage
The platform is deliberately light on tracking:
- Essential sign-in storage — Supabase places tokens in your browser to keep you signed in. The platform can't work without these.
- First-party attribution storage — if you arrive via a tagged link or QR code, we keep those UTM tags in your browser's local storage so we know which of our own campaigns worked.
There are no advertising cookies and no third-party tracking or analytics on the platform. If that ever changes, this policy and the platform's consent controls will be updated first.
Changes and contact
We'll post any changes to this policy here and, if they're significant, email registered entrants. Questions: info@btg-boxing.com.