Fantasy Guide Privacy Policy

Fantasy Guide respects your privacy. This notice explains what personal information we collect, why we use it, who we share it with, how long we keep it and the rights you have under UK data protection law.

1. Who we are

Fantasy Guide provides personalised NFL fantasy draft guides, including a free mini-guide and a paid personalised guide.

For privacy questions or requests, contact us at support@fantasyguide.uk.

For the purposes of UK data protection law, Fantasy Guide is the controller of the personal information described in this notice, except where another service provider acts as a separate controller for its own purposes.

2. Information we collect

Depending on how you use Fantasy Guide, we may collect:

• your first name;
• your email address;
• your selected draft position;
• whether you have chosen to receive optional marketing emails;
• information about your purchase, such as your selected draft position, payment status and information needed to fulfil your order;
• correspondence you send to our support addresses;
• basic technical and security information generated when you use the website, such as request and service logs where these are produced by our hosting and infrastructure providers; and
• aggregate website usage and performance information from Cloudflare Web Analytics, such as page views, pages or paths visited, referring sites or broad traffic source, device and browser information, and website performance information.

We do not need or intend to collect special-category personal data through the Fantasy Guide website.

3. How we use your information

We use personal information to:

• provide the free mini-guide you request;
• process and fulfil paid guide orders;
• send transactional emails about your request, purchase or delivery;
• provide revised paid editions included with your purchase;
• respond to support queries and correct fulfilment problems;
• maintain accurate customer, order and fulfilment records;
• protect the website and services against misuse, fraud and security threats;
• understand aggregate website usage, assess the customer journey and improve the website and service;
• meet legal, accounting and regulatory obligations; and
• send optional marketing emails where you have actively chosen to receive them.

We do not use transactional contact details to enrol you automatically in marketing.

4. Our lawful bases

Under UK GDPR, we rely on different lawful bases depending on what we are doing:

• Contract: where processing is necessary to provide a paid guide you have purchased or to take steps connected with that purchase.
• Legitimate interests: where necessary to provide and administer the free mini-guide, operate and secure the service, respond to support requests, maintain proportionate records and improve the reliability of the customer journey, provided those interests are not overridden by your rights.
• Consent: for optional email marketing. You can withdraw that consent at any time.
• Legal obligation: where we need to retain or disclose information to comply with applicable law, tax, accounting or regulatory requirements.

5. Marketing emails

Marketing is optional. If you tick the marketing box, we may email you fantasy updates, major ADP changes and information about the full guide.

You can withdraw your consent at any time by using any unsubscribe mechanism we provide or by contacting support@fantasyguide.uk. Withdrawing consent does not affect transactional messages we still need to send about a request or purchase.

6. Who we share information with

We use a small number of service providers to operate Fantasy Guide. These currently include:

• Cloudflare for website hosting, traffic handling, security, email routing and Cloudflare Web Analytics;
• Supabase for customer, lead, order and fulfilment records;
• Resend for transactional email delivery; and
• Stripe for payment processing and the hosted payment page.

We share only the information reasonably required for those services. Some providers may process information under their own terms and privacy notices as well as under arrangements with us.

We do not sell your personal information.

7. International transfers

Some of our technology providers may process or store personal information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we rely on the safeguards used by the relevant provider or other lawful transfer mechanisms available under UK law.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable legal, tax, accounting, dispute or security requirements.

In practice:

• records connected with paid purchases may be kept for the period needed to meet tax, accounting, contractual and dispute-resolution obligations;
• free-guide request and support records are kept only while they remain useful for fulfilment, customer support, security or legitimate business records; and
• marketing information is kept until you unsubscribe or we otherwise decide it is no longer appropriate to use it for marketing, subject to retaining a minimal suppression record where necessary to respect an opt-out.

We will review these periods as the service develops rather than retaining information indefinitely by default.

9. Security

We use proportionate technical and organisational safeguards intended to protect personal information. These include keeping production credentials out of public website code, restricting access to operational systems, using HTTPS, validating requests on the server and using established third-party payment and email providers.

No internet service can guarantee absolute security, but we aim to minimise unnecessary collection and access.

10. Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information;
• ask us to restrict how information is used;
• object to processing based on legitimate interests;
• receive certain information in a portable format; and
• withdraw consent where processing is based on consent.

These rights are not absolute and legal exceptions can apply.

To exercise a privacy right, email support@fantasyguide.uk. We may need to verify your identity before acting on a request.

11. Complaints

If you have a concern about how we use your personal information, please contact support@fantasyguide.uk first so we can try to resolve it.

You also have the right to complain to the UK Information Commissioner’s Office (ICO).

12. Cookies and similar technologies

Fantasy Guide uses Cloudflare Web Analytics on selected public website pages to understand aggregate website usage and performance, including page views, pages or paths visited, referring sites or broad traffic source, device and browser information, and website performance. We use this information to understand how the website is used, assess the customer journey and improve the website and service.

Cloudflare Web Analytics is not used by Fantasy Guide for behavioural advertising, individual customer profiling or tracking people across unrelated websites or services. Fantasy Guide does not currently use a separate advertising-tracking system as part of the MVP. Our infrastructure providers may still use strictly necessary technologies or generate technical logs required to deliver and protect their services.

If we add advertising cookies or other non-essential tracking in future, we will update this notice and, where required, obtain consent before using them.

13. Changes to this policy

We may update this Privacy Policy as Fantasy Guide develops, our service providers change or legal requirements evolve. The current version will be published on the Fantasy Guide website with its latest update date.