Privacy Policy
Last updated: December 24, 2025
PickGenius ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services.
We are registered with the Information Commissioner's Office (ICO) in the United Kingdom.
1. Information We Collect
1.1 Information You Provide
When you create an account or use our services, we collect:
- Account Information: Email address, username, and password (encrypted)
- Profile Information: Any optional profile details you choose to provide
- Payment Information: When you subscribe, payment is processed by Stripe. We do NOT store your full credit card details—only the last 4 digits and card type for reference
- Communications: If you contact us, we collect the content of your messages
1.2 Information Collected Automatically
When you access our service, we automatically collect:
- Usage Data: Pages visited, features used, picks viewed
- Device Information: Browser type, operating system, device type
- Log Data: IP address, access times, referring URLs
- Cookies: See our Cookie Policy for details
2. How We Use Your Information
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and maintain our service | Contract performance |
| Process payments and subscriptions | Contract performance |
| Send account-related communications | Contract performance |
| Improve and personalize the service | Legitimate interest |
| Analyze usage patterns | Legitimate interest |
| Detect and prevent fraud | Legitimate interest |
| Send marketing emails (optional) | Consent |
| Comply with legal obligations | Legal obligation |
3. Data Sharing and Disclosure
We do NOT sell your personal data. We may share your information only in these circumstances:
3.1 Service Providers
We use trusted third-party services to operate PickGenius:
- Stripe: Payment processing
- Amazon Web Services (AWS): Cloud hosting and infrastructure
- Analytics providers: To understand service usage
These providers are bound by contractual obligations to protect your data and only process it as we instruct.
3.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
3.3 Business Transfers
If PickGenius is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
4. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Passwords are encrypted using industry-standard hashing (bcrypt)
- All data transmission uses TLS/SSL encryption (HTTPS)
- Access to personal data is restricted to authorized personnel only
- Regular security assessments and updates
- Secure cloud infrastructure with AWS
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
5. Data Retention
We retain your personal data only for as long as necessary:
- Account data: Until you delete your account, plus 30 days for backup recovery
- Payment records: 7 years (legal/tax requirements)
- Usage logs: 12 months
- Communications: Until resolved, plus 12 months
After these periods, data is securely deleted or anonymized.
6. Your Rights (GDPR)
Under the UK GDPR, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restriction: Request restriction of processing
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, contact us at privacy@pickgenius.co.uk. We will respond within 30 days.
7. International Data Transfers
Your data may be processed outside the UK/EEA when using our cloud services. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the UK ICO
- Use of services certified under recognized frameworks
8. Children's Privacy
PickGenius is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it immediately.
9. Third-Party Links
Our service may contain links to third-party websites (e.g., bookmakers, gambling help resources). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.
11. Contact Us
For privacy-related questions or to exercise your rights:
Data Controller: PickGenius
Email: privacy@pickgenius.co.uk
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
ICO Website: ico.org.uk
ICO Helpline: 0303 123 1113