1. Who we are
SXS provides subscription football data and information services. In this policy, “we” and “SXS” mean the operator of this website. For the purposes of the UK GDPR and the Data Protection Act 2018, we are the data controller in respect of the personal data described below. Entity and registration details are published at /entity.
2. What we collect
- Account data — the identifier you sign in with, a hashed password, and your subscription status.
- Contact data — your name, organisation (optional) and email address, when you submit the application form or contact us.
- Usage data — which pages and model outputs you view, and when, so we can operate and secure the service.
- Technical data — IP address, user agent and similar signals, used for security, rate limiting and fraud prevention.
- Billing data — subscription and invoice records. We do not store your card details.
3. Why we use it, and our legal bases
Under the UK GDPR we rely on the following bases:
- Performance of a contract — to create your account, provide the subscription you paid for, and support you.
- Legitimate interests — to keep the service secure, prevent abuse, and improve the models and pages. We balance these against your rights.
- Legal obligation — to keep accounting and tax records.
- Consent — where we specifically ask for it. You can withdraw consent at any time.
We do not use your data for automated decision-making that produces legal or similarly significant effects.
4. Cookies and local storage
We use strictly necessary cookies and browser local storage to keep you signed in and to remember interface preferences. We do not use advertising cookies and we do not sell data to advertisers. You can clear local storage at any time from your browser settings; doing so will sign you out.
5. Who we share it with
We share personal data only with service providers who process it on our instructions, and only as far as needed:
- Hosting and infrastructure providers that run this website.
- Payment providers. Paid subscriptions are sold through a payment provider acting as merchant of record. When you pay, that provider collects and processes your payment and billing details under its own privacy policy, and passes us the subscription and invoice information we need. We never see your full card number.
- Professional advisers, where strictly necessary, and authorities where the law requires it.
We do not sell your personal data.
6. International transfers
Some providers may process data outside the UK. Where that happens we rely on an appropriate safeguard, such as the UK International Data Transfer Addendum or an adequacy regulation, and we require equivalent protection.
7. How long we keep it
Account and usage data are kept while your account is open and for a short period afterwards. Billing and tax records are kept for the period required by law. Application-form enquiries are kept for as long as needed to deal with the enquiry, then deleted.
8. Your rights
Under the UK GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, to data portability, and to withdraw consent. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any right, contact us using the application form.
9. Security
We use encryption in transit, access controls and least-privilege access to our systems. No system is perfectly secure, but we take these measures seriously and review them.
10. Children
This service is for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with data, contact us and we will delete it.
11. Changes to this policy
We may update this policy. The version published on this page is the current one, and material changes will be flagged on the site.
12. Contact
For any privacy question or request, use the application form and mark it as a privacy enquiry.