Privacy Policy
Effective Date: 1 October 2026 | Last Updated: 1 October 2026
1. Who We Are & Scope
Live Gym Scorer ("we", "us", "our") provides self-service gymnastics competition scoring software to gymnastics clubs, event directors, and tournament organisers in the United Kingdom. We are committed to protecting personal data in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact Email: support@livegymscorer.co.uk
2. Controller & Processor Roles
Our role under data protection law depends on the type of data processed:
- Live Gym Scorer as Data Controller: We act as the Controller for club account registration details, administrator logins, billing records, customer support correspondence, and website usage telemetry.
- Live Gym Scorer as Data Processor: We act as a Processor on behalf of the organising gymnastics club (the Controller) with respect to participant rosters, athlete names, bib numbers, scores, and competition results uploaded to the platform.
3. Protection of Children & Young Athletes
Gymnastics competitions predominantly involve children and young athletes. We apply strict Data Minimisation principles:
- We only collect the minimum information necessary to score and identify routines: Gymnast Name, Bib Number, Club Name, Competition Level/Category, and Apparatus Scores.
- We never collect home addresses, phone numbers, personal email addresses, dates of birth (only age group / category is required), medical information, or payment details for young athletes.
- Organising clubs remain responsible for ensuring they hold appropriate parental consent or lawful sporting basis before uploading entry rosters.
4. Data We Process & Lawful Bases
| Data Category | Purpose | Lawful Basis (UK GDPR) |
|---|---|---|
| Club Account & Billing Data (Name, Email, Club Name) | Account management, billing, and invoicing | Performance of Contract (Art 6(1)(b)) |
| Competition Rosters & Scores | Running competition scoring and results generation | Processor acting under Controller's instructions |
| Judge Session Tokens & PINs | Floor station authentication and score attribution | Legitimate Interests (Art 6(1)(f)) |
| Website Analytics (Opt-in) | Website performance and conversion analytics | Explicit Consent (Art 6(1)(a)) |
5. Third-Party Subprocessors
We engage vetted subprocessors to deliver platform services:
- Hosting & Cloud Database: Google Cloud Platform / Firebase (Hosting, secure storage, and database services within London / EU regions).
- Payment Processing: Stripe Payments UK Ltd (PCI-DSS Level 1 compliant payment processing).
- Transactional Email: Transactional SMTP provider for account setup and password resets.
- Analytics (Consent-Gated): Google Analytics 4 (configured with Google Consent Mode v2 and anonymised IP).
6. Data Retention & Deletion
- Club Account Data: Retained for the duration of active subscription plus statutory financial record periods (6 years).
- Draft & Test Competitions: Automatically pruned after 90 days of inactivity.
- Official Competition Records: Retained in your club archive as long as requested. Club owners may export or request deletion of historical events anytime.
- Public Results: Controlled by the organising club; can be unpublished instantly via the organiser dashboard.
7. Security Safeguards
We employ modern security safeguards including TLS 1.3 encryption in transit, cryptographic password hashing, strict PostgreSQL tenant isolation, hashed judge session tokens, and automated encrypted database backups.
8. Your Rights Under UK GDPR
Under UK data protection law, individuals have the right to request access to, rectification of, or erasure of their personal data, as well as the right to object to or restrict certain processing. To exercise these rights regarding your account or competition data, contact support@livegymscorer.co.uk.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.