Privacy Policy

We collect the following types of information:

• Account information. When you sign up, we collect your email address and, optionally, your full name.
• Event and rota data. Information you provide when creating events, positions, shifts, and volunteer assignments — including volunteer names, email addresses, and phone numbers you add to your organisation.
• Availability and attendance data. Shift availability preferences and check-in records submitted by volunteers.
• Usage data. Basic technical data such as browser type and access timestamps, used to keep the service running reliably. We do not run third-party advertising trackers.

We use the information we collect to:

• Provide, operate, and improve the EventRota service.
• Send transactional emails (magic-link sign-in, invitation emails, rota confirmations, and event updates) on behalf of the organisations using EventRota.
• Allow administrators and coordinators to manage volunteer rotas for their events.
• Respond to support requests and investigate issues.

We do not sell your personal data. We do not use your data for advertising.

We share data only with the third-party services required to operate EventRota:

• Supabase — database and authentication infrastructure (EU data residency available).
• Resend — transactional email delivery.

Data shared with volunteer members of an organisation (names, email addresses, shift assignments) is visible only to administrators and coordinators of that organisation, and to the individual volunteer for their own records.

We retain your account and event data for as long as your account is active. If you delete your account, your personal data will be removed within 30 days, except where we are required to retain it for legal or compliance purposes. Event and rota data may be retained in anonymised form for service-improvement purposes.

EventRota uses cookies solely to maintain your authentication session. We do not use advertising cookies or third-party tracking cookies. Browser local storage may be used to save UI preferences (such as dismissed notices).

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Receive a copy of your data in a portable format.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

We use industry-standard security practices including encrypted connections (TLS), hashed passwords, and role-based access controls. Despite these measures, no system is completely secure. Please contact us immediately if you believe your account has been compromised.

EventRota is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. For significant changes, we will notify users by email or via an in-app notice.

EventRota is operated by Sports Stats Limited, a company registered in England and Wales.

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to raise a data protection concern, contact us at: info@sports-stats.org.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.