Privacy Policy
Last updated: May 2026 · NostraGamus Limited · ICO registration ZC146995
1. Who we are
NostraGamus Limited ("we", "us", "our") is registered in England and Wales (Companies House number: 17217978) with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
We are registered with the Information Commissioner's Office (ICO) under registration number ZC146995.
We operate The Match Predictor at thematchpredictor.com ("the Service"), an online sports prediction platform.
For any privacy-related queries, contact us at hello@thematchpredictor.com.
2. What data we collect
2.1 End users
When you register and use the Service as an individual participant, we collect:
- Account data: email address, display name, and password (stored as a secure hash)
- Profile data: any optional profile information you choose to provide
- Prediction data: your match score predictions and participation in leagues
- Usage data: how you interact with the Service, pages visited, features used, and device/browser information
- Communications data: your email preferences and records of communications sent to you
- Payment data: if you make a payment, transaction details are processed by Lemon Squeezy (our Merchant of Record). We do not store your card details — these are held securely by Lemon Squeezy
2.2 Business Customers
When you register as a Business Customer (e.g. a pub, bar, or organisation), we additionally collect:
- Business details: organisation name, business address, and contact details
- Billing information: invoicing details and payment records
- League management data: leagues created, member counts, and communication history
- Promotional content: any text or content you submit for inclusion in league communications
2.3 Data we collect automatically
When you use the Service we automatically collect:
- IP address and approximate location (country/region level)
- Browser type and version
- Device type and operating system
- Pages visited and time spent on the Service
- Referring URL (how you arrived at the Service)
We use this data to improve the Service and diagnose technical issues. We do not use it to identify you individually.
3. How we use your data
| Purpose | Legal basis |
|---|---|
| Providing and operating the Service | Performance of contract |
| Sending service communications (standings updates, prediction reminders, account notifications) | Legitimate interests |
| Sending promotional content from Business Customers to league members | Soft opt-in / legitimate interests (with opt-out available) |
| Sending our own marketing communications about new features or products | Soft opt-in / legitimate interests (with opt-out available) |
| Processing payments | Performance of contract |
| Complying with legal obligations | Legal obligation |
| Improving the Service and analysing usage | Legitimate interests |
| Preventing fraud and misuse | Legitimate interests / legal obligation |
4. Communications and email preferences
4.1 Service communications
We will send you emails that are necessary for the operation of the Service, including:
- Prediction reminders ahead of match deadlines
- League standings updates after results are entered
- Account and security notifications
These are sent on the basis of legitimate interests and are necessary for you to use the Service effectively.
4.2 Promotional communications from Business Customers
Where you participate in a league administered by a Business Customer (such as a pub or bar), standings update emails may include a promotional section containing information about that Business Customer's products, services, events, or promotions.
You receive these by default on the basis of the soft opt-in exemption under the Privacy and Electronic Communications Regulations (PECR) — your participation in that Business Customer's league creates a relevant existing relationship.
You can opt out of promotional content at any time by:
- Clicking the "Unsubscribe from promotions" link in any such email
- Updating your preferences in your account settings at thematchpredictor.com/settings
Opting out of promotional content will not affect your receipt of standings updates and prediction reminders.
NostraGamus Limited sends these communications on behalf of Business Customers. We do not share your email address directly with Business Customers — they cannot view, download, or export your personal data.
4.3 Our own marketing communications
We may occasionally send you emails about new features, products, or services offered by NostraGamus Limited. These are sent on the basis of the soft opt-in exemption.
You can opt out at any time via your account settings or by clicking the unsubscribe link in any such email.
4.4 Full unsubscribe
You can unsubscribe from all non-essential emails at any time via your account settings or by contacting hello@thematchpredictor.com. We may still contact you about essential account matters (such as security alerts or changes to these policies).
5. Who we share your data with
We do not sell your personal data. We share it only in the following circumstances:
5.1 Service providers (data processors)
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database hosting and authentication | EU / USA |
| Vercel | Web application hosting | USA |
| Resend | Transactional email delivery | USA |
| Lemon Squeezy | Payment processing | USA |
| Cloudflare | DNS, security, and email routing | USA |
All providers operating outside the UK are covered by appropriate transfer mechanisms (standard contractual clauses or adequacy decisions).
5.2 Business Customers
Business Customers who administer your league can see your display name, your prediction submissions, and your position in the league standings. They cannot see your email address, password, or any data from other leagues you participate in.
5.3 Legal requirements
We may disclose your data where required to do so by law, court order, or at the request of a regulatory authority.
5.4 Business transfers
If NostraGamus Limited is acquired by or merged with another company, your data may be transferred to the new owner, who will be bound by this Privacy Policy.
6. Data retention
We retain your personal data for as long as your account is active. If you delete your account:
- Your prediction data and league history are anonymised within 30 days
- Your email address and account data are deleted within 30 days
- Transaction records are retained for 7 years as required by UK tax law
- Backup copies may persist for up to 90 days before being overwritten
You can request deletion of your account at any time by contacting hello@thematchpredictor.com.
7. Your rights
Under UK GDPR you have the following rights in relation to your personal data:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: ask us to correct inaccurate or incomplete data
- Right to erasure: ask us to delete your data in certain circumstances
- Right to restriction: ask us to restrict processing of your data in certain circumstances
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests, including for direct marketing
- Right to withdraw consent: where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at hello@thematchpredictor.com. We will respond within one month.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.
7.1 EU users
If you are based in the European Union, you also have the right to lodge a complaint with your local data protection authority.
8. Cookies
| Cookie type | Purpose | Can be disabled? |
|---|---|---|
| Strictly necessary | Session management, authentication, security | No — required for the Service to function |
| Analytics | Understanding how users navigate the Service (anonymised) | Yes — via cookie preferences |
| Preferences | Remembering your settings and preferences | Yes — via cookie preferences |
We do not use advertising or tracking cookies. You can manage your cookie preferences via the cookie banner on your first visit to the Service.
9. Children's privacy
The Service is not directed at children under the age of 18 and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with their personal data, please contact hello@thematchpredictor.com and we will delete it promptly.
10. Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures including:
- Encryption of data in transit (TLS) and at rest
- Secure password hashing (we never store passwords in plain text)
- Access controls limiting who within NostraGamus Limited can access personal data
- Regular review of our security practices
No system is completely secure. If you believe your account has been compromised, please contact us immediately at hello@thematchpredictor.com.
In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the ICO as required by UK GDPR.
11. Changes to this policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or by prominent notice on the Service. The date at the top of this page indicates when the policy was last updated.
12. Contact us
For any questions about this Privacy Policy or how we handle your data:
NostraGamus Limited 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ hello@thematchpredictor.com
For data protection matters specifically, you can also write to us marked for the attention of "Data Protection".