This notice explains what personal data SimPitch collects, why, who it is shared with, how long it is kept and what your rights are. It covers simpitch.co.uk, SimPitch accounts and memberships, the newsletter and the forms on the site.
Who we are
SimPitch (simpitch.co.uk) is run by Aryan Marjani, who is the controller of your personal data under the UK GDPR and the Data Protection Act 2018. Contact: contact@simpitch.co.uk.
What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Your email address, and your name if you sign in with Google | To create your account and let you sign in | Contract: providing the account you asked for |
| Your plan and whether you’ve paid | To show you the content your plan includes | Contract |
| Whether you want the newsletter | To send the newsletter only if you asked for it | Consent, which you can withdraw at any time on your account page or with the unsubscribe link in every email |
| Club and organisation enquiries: name, club or organisation, email, phone (optional) and your message | To reply to your enquiry about data collection or analysis | Legitimate interests: answering a request you sent us |
| Author details and submitted drafts (for invited authors) | To review and publish articles and live updates | Contract, or legitimate interests where you write for us without a contract |
| Payment details | Taken and stored by Stripe, never by us. We see your plan, payment status, billing country and the last four digits of your card. | Contract |
| Payment and tax records | To keep the accounts the law requires | Legal obligation |
Sign-in cookies set by Clerk (such as __session and __client_uat) |
To keep you logged in | Strictly necessary for the service you asked for |
| Server logs (IP address, browser, pages visited) | Kept by our host, Cloudflare, for security and to keep the site running | Legitimate interests: security |
We don’t sell your data, share it for marketing, or use it to make automated decisions about you.
Who processes data for us
- Cloudflare hosts the website and stores account data, enquiries and drafts.
- Stripe takes payments and manages subscriptions.
- Clerk handles sign-in: it stores your email address, password (encrypted, never visible to us) and Google sign-in link, and sends sign-in and password-reset emails.
- Resend sends the newsletter and replies to forms.
- Google serves the site’s fonts, so your browser sends your IP address to Google when pages load, and handles “Continue with Google” if you choose it.
Each works under a contract that limits what it can do with your data. We may also disclose data when the law requires it, for example to a court or the police.
Some of these providers process data outside the UK, under safeguards approved for UK data (UK adequacy regulations, or the International Data Transfer Addendum to standard contractual clauses).
How long we keep it
- Account data: until you delete your account.
- Sign-in details at Clerk: until you delete your account.
- Newsletter preference: until you unsubscribe or delete your account.
- Club and organisation enquiries: up to two years after our last contact, unless we start working together.
- Drafts that are not published: up to one year.
- Payment and tax records: six years, as UK law requires (kept by Stripe and in our accounts).
- Server logs: Cloudflare’s standard retention, usually a few days.
Security
Data travels over HTTPS. Passwords are handled by Clerk and card details by Stripe, so we never store them. Access to the admin area is limited to named people. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you and the Information Commissioner’s Office when the law requires it if something goes wrong.
Children
SimPitch is not aimed at children. Paid plans are for people aged 18 or over, or with a parent’s or guardian’s permission.
Your rights
You can ask to see, correct, delete or move your data, ask us to restrict or stop using it, object to how we use it, or withdraw consent at any time. You can delete your account yourself on the account page, or email contact@simpitch.co.uk. We reply within one month. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk), though we’d like the chance to put it right first.
Changes
We may update this notice when the site or the law changes. The date at the top shows the latest version, and we’ll email members about important changes.
Contact
Questions or requests: contact@simpitch.co.uk.