1. Who this notice is for
This privacy notice explains how Team Bonus Ball handles personal information when people use the service, when club administrators manage fundraisers, and when someone contacts us about access, support or pricing.
Team Bonus Ball is operated by SWJ Power Engineering Limited. Privacy and data protection queries can be sent to [email protected].
2. Who is responsible for personal information
For club participant, payment-tracking and fundraiser information entered by a club, the club or team normally decides why the information is used and is therefore normally the controller. Team Bonus Ball provides the software and normally acts as a processor for that information.
For customer administration, service enquiries, account security, billing and support records, SWJ Power Engineering Limited, trading as Team Bonus Ball, may act as a controller in its own right.
Questions can be sent to [email protected].
3. Information the service may process
| Category | Examples |
|---|---|
| Club and admin data | Club name, team label, sport, administrator email address, role and account status. |
| Participant data | Participant or entry name, optional public display name, optional contact name, optional mobile number and optional notes. |
| Fundraiser records | Six-number entries, draw results, match progress, payment-tracking records, reminder history and winner records. |
| Branding | Club badge, colours, sponsor name and sponsor logo. |
| Enquiries | Name, email, phone number, club details and message supplied when requesting access or setup. |
The current app does not process card details, bank account credentials or automatic payment transactions. Payment information is manual record-keeping only.
4. Why information is used
Information is used to provide the service, authenticate approved administrators, separate one club's data from another, track fundraiser entries and manual payments, show permitted public leaderboard information, provide support, prevent abuse, maintain security and meet legal/business record obligations.
Where Team Bonus Ball acts as controller, the lawful basis may include performance of a contract, legitimate interests in operating and securing the service, and legal obligations. Where a club acts as controller, that club is responsible for identifying and documenting the lawful basis for participant information it enters.
5. Public leaderboard information
A public leaderboard is disabled unless the club enables it and shares its link. The privacy-hardened public view is designed to return only the information needed for the leaderboard: club/team branding, fundraiser title, participant/public display name, entry numbers, draw results and match progress.
The public view is not designed to expose phone numbers, email addresses, private notes, payment records, reminder history or administrator information.
6. Who processes the information
Team Bonus Ball currently uses:
- Supabase for database, authentication and storage services.
- Cloudflare for hosting, delivery and security services.
These providers may act as processors or sub-processors. Their own data-processing terms and international-transfer safeguards may apply.
7. International processing
Some service providers may process data outside the UK. Where restricted transfers apply, appropriate contractual or other lawful safeguards should be used. Team Bonus Ball keeps a record of its main service providers and related data-processing terms.
8. Retention
- Active club data is kept while the club uses the service.
- After a service ends, participant/fundraiser data is intended to be deleted or anonymised within 90 days, unless the club requests earlier action or there is a lawful reason to retain specific records.
- Unsuccessful sales enquiries are normally kept for no longer than 12 months.
- Support/security records are retained only as long as reasonably needed for support, security or dispute handling.
- Invoices and accounting records may be kept for longer where required by law or legitimate business record obligations.
9. Your rights
Depending on the circumstances, people may have rights to be informed, access information, correct inaccurate information, request erasure, restrict processing, object, receive portable data and complain to the Information Commissioner's Office.
Where the information was entered by a club, requests should normally be made to that club first because it is normally the controller. Team Bonus Ball will assist clubs with appropriate requests where required.
10. Security
The service uses approved-user authentication, club-level access controls, Supabase Row Level Security, role-based permissions, public-data minimisation, security headers and audit logging for key privacy actions. No service-role secret is placed in the browser application.
11. Cookies and local storage
The current app does not use advertising trackers. Authentication/session technology and PWA/browser storage may be used where necessary to keep approved users signed in, provide security and support app installation/offline fallback.
12. Breaches
Team Bonus Ball maintains a breach-response procedure. Suspected incidents should be reported immediately to [email protected].
13. Changes
This notice may be updated as the service, suppliers or legal requirements change. The effective date shown at the top will be updated when material changes are made.