RivalRase

Privacy Policy

Last updated: 22/06/2026

1. Who we are

RivalRaise (“we”, “us”, “our”) operates the rivalraise.com website and related services (the “Service”). For the purposes of UK GDPR, we are the data controller for the personal information you provide.

2. Information we collect

  • Account information — name, display name, email address, username and password (stored hashed).
  • Profile & activity data — your team, rival and charity selections, pledges, predictions, outcome game entries, leagues you join and donation requests you submit.
  • Charity nominations & claims — when you nominate a charity (via the Charity Commission search or manual fallback) or claim a charity profile, we collect the charity details you provide plus your role and contact information.
  • Donation verification information — amounts, dates, references and any supporting evidence you submit to mark a pledge as donated, including communications with charities to verify that donations have been received.
  • Email preferences and marketing settings — your transactional and (where applicable) optional communication preferences, including unsubscribe state.
  • Communications — messages you send via the contact form, charity team or by email.
  • Cookies & analytics — see our Cookie Policy. We use Google Analytics 4 (with Google Consent Mode v2) only after you accept analytics in the cookie banner. IP addresses are anonymised.
  • Technical data — IP address, browser type and basic usage data needed to operate and secure the Service.

3. How we use your information

  • To provide, maintain and improve the Service, including pledges, predictions, leagues, outcome games and charity profiles.
  • To authenticate you and keep your account secure.
  • To calculate and display pledge totals, fixtures and predictions.
  • To process charity nominations and claims, and to verify charities against public registers.
  • To verify donation requests with the relevant charity where appropriate.
  • To send essential service emails (e.g. account verification, password reset, donation confirmations, charity status updates).
  • To respect your email and marketing preferences, including unsubscribe requests.
  • To respond to your enquiries and provide customer support.
  • To understand aggregate site usage via Google Analytics 4 (only when you have accepted analytics cookies).

4. Email communications

We send transactional emails (account verification, password reset, magic links, donation confirmations, pledge updates, charity notifications, contact replies) under the legal basis of contract / legitimate interests — these are essential to operating your account. We do not currently send marketing newsletters. If we introduce optional communications in the future, they will be opt-in and you can opt out at any time via the unsubscribe link in those emails or by getting in touch via our contact form.

5. Legal bases (UK/EU GDPR)

We rely on: (a) contract — to provide the Service you have signed up for; (b) legitimate interests — to operate, secure and improve the Service, prevent fraud, and verify donations; (c) consent — for non-essential cookies (Google Analytics 4) and any optional communications; and (d) legal obligation — to comply with the law.

6. Sharing your information

We do not sell your personal information. We share data only with trusted service providers who help us run the Service (e.g. hosting, database, email delivery, and analytics providers), and where required by law. League members can see each other's display name within their league. When you submit a donation request, we may share the relevant details with the recipient charity for verification.

7. Cookies

We use essential cookies to keep you signed in and remember your consent choice, and Google Analytics 4 cookies after you accept. We do not use advertising cookies. Full details in our Cookie Policy.

8. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will remove or anonymise your personal data within a reasonable period, except where retention is required by law or to maintain the integrity of donation records.

9. Your rights

Under UK/EU GDPR you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to withdraw consent, and to request data portability. To exercise these rights, please get in touch via our contact form. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

10. Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

11. Children

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have, contact us so we can remove it.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision.

13. Contact us

For privacy-related questions or to exercise your rights, please use our contact form.