Privacy policy – Footy Tips

Readers of the football tips on Footy Tips leave little personal data behind, and only what an information site needs is processed. The UK GDPR and the Data Protection Act 2018 apply. This policy fulfils the duty to inform under Article 13 of the UK GDPR.

Who is responsible

The controller within the meaning of Article 4(7) UK GDPR is whoever operates Footy Tips. Name, address and e-mail address are available at footytipsdaily.com, which is also the channel for any question about personal data.

Data and its sources

Whenever a page is opened, the server writes a log entry with the IP address, date and time, the address requested, the volume of data sent, the referring page and the browser type. Logs serve security and the detection of abuse; after 90 days they are deleted or cut so that they no longer point to a person. Someone writing to the editors also supplies a name, an e-mail address and the message, used solely for the reply. There are no reader accounts, deposits or bets, so no payment details or identity documents are collected.

Why the data is used

Logs and protection against abuse rest on legitimate interests in keeping the site working and secure (Article 6(1)(f) UK GDPR), and so does answering a message. Cookies beyond the strictly necessary ones, and audience measurement, need consent (Article 6(1)(a) UK GDPR with regulation 6 of PECR) and start only once it is given. Consent may be withdrawn at any time without affecting earlier processing (Article 7(3)). No automated decisions are taken and no profiling takes place.

Who receives data

Nothing is sold. Processors working on instruction supply hosting, content delivery and e-mail (Article 28 UK GDPR), and public authorities receive data where the law demands. A transfer outside the United Kingdom happens only to a country covered by adequacy regulations or under appropriate safeguards, such as the International Data Transfer Agreement or the UK Addendum (Article 44 onwards).

Individual rights

Each person may seek access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18) and portability (Article 20), and may object to processing founded on legitimate interests (Article 21). Requests are answered without undue delay and within one month of receipt; this may be extended by a further two months under Article 12(3) where needed.

Storage periods

Server logs are kept for 90 days at most. Correspondence is kept until the matter is closed, plus the time needed to defend against possible claims. A message is sent voluntarily, but no reply is possible without the details.

Supervision

The supervisory authority is the Information Commissioner’s Office (ICO). A person who thinks the processing of their data breaches data protection law may complain to it (Article 77 UK GDPR).

Last updated: 27 October 2026.

Content created by the «Footy Tips» team