Privacy Policy

SupaPicks is operated by Beta Web Analysis Limited, a company registered in England and Wales. We publish football prediction tips, analysis and related editorial content at supapicks.com.

For privacy matters, Beta Web Analysis Limited acts as the data controller — meaning we determine the purposes and means of processing your personal data. Our contact details are at the bottom of this policy.

We collect information in three ways:

Information you provide directly:

• Email address if you subscribe to our newsletter or create an account
• Messages you send to us via email or Telegram
• Any other information you voluntarily submit to us

Information collected automatically when you visit:

• IP address and approximate geographic location (country/city level)
• Browser type, version and operating system
• Pages visited, time on page and navigation path
• Referring URL (the site you came from)
• Device type (desktop, mobile, tablet)
• Date and time of each visit

Information from cookies and similar technologies:

• Session and preference cookies (see Section 5)
• Analytics identifiers from Google Analytics
• Advertising identifiers from third-party ad networks where applicable

We use the data we collect for the following purposes:

• To provide and improve the service — serving tip pages, remembering your preferences (dark/light theme, sort order), and diagnosing technical issues
• To send communications you have requested — newsletters, tip update notifications and account-related emails, only if you have subscribed
• To understand how the site is used — aggregate analytics that help us improve content, page structure and tip presentation
• To respond to your enquiries — when you contact us by email or Telegram
• To detect and prevent fraud or abuse — protecting the integrity of the site and our data
• To comply with legal obligations — where required by law or regulation

We do not sell your personal data to third parties. We do not use your data for automated decision-making that has legal or similarly significant effects on you.

Under UK GDPR and applicable data protection law, we rely on the following legal bases for processing your personal data:

• Legitimate interests — operating and improving the website, analysing how the site is used, detecting fraud, and sending transactional communications. We have assessed that these interests are not outweighed by your privacy rights.
• Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
• Contract — if you have an account with us, processing your data to fulfil our obligations to you.
• Legal obligation — where we are required to process data to comply with applicable law.

Cookies are small text files stored on your device by your browser. We use the following categories of cookies:

• Strictly necessary cookies — required for the site to function. These include session cookies, your theme preference (dark/light mode) and any authentication tokens. These cannot be disabled without breaking core site functionality.
• Analytics cookies — Google Analytics cookies (_ga, _gid, _gat) that help us understand aggregate site usage. No personally identifiable information is passed to Google. You can opt out via Google's opt-out tool.
• Preference cookies — storing your chosen sort order, filter state and other UI preferences between sessions.
• Advertising cookies — where third-party ad networks are active on the site, they may set their own cookies. These are subject to those networks' own privacy policies. You can opt out via the Your Online Choices tool.

You can control cookies through your browser settings. Disabling all cookies may impair site functionality. Our cookie banner allows you to accept or reject non-essential cookies on your first visit.

We share data with the following categories of third-party service providers who process it on our behalf under data processing agreements:

• Google Analytics — website traffic analytics (Google LLC, USA). Data is anonymised before transfer where possible. Google is certified under the EU-US Data Privacy Framework.
• Hosting and CDN providers — the servers and infrastructure that deliver the site. Data stored in accordance with their security certifications.
• Email service providers — used to send newsletters and transactional emails to subscribers who have opted in.
• Telegram — if you contact us via Telegram, your messages are processed by Telegram Messenger Inc. subject to their own privacy policy.
• Advertising networks — where display advertising is active, third-party ad networks may process data subject to their own policies and the IAB Transparency and Consent Framework.

We do not transfer your personal data to third parties for their own independent marketing purposes without your explicit consent.

Where we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place — including Standard Contractual Clauses or adequacy decisions — to protect your data to the same standard as required under UK GDPR.

We retain personal data only as long as necessary for the purpose it was collected:

• Analytics data — retained for 26 months in Google Analytics (their default), then automatically deleted
• Email subscriber data — retained until you unsubscribe, plus 30 days to process the removal request
• Support correspondence — retained for 2 years from the date of the last communication
• Account data — retained for the duration of your account, plus 90 days after deletion to allow for recovery requests
• Server logs — retained for 90 days for security and diagnostic purposes

After the applicable retention period, data is securely deleted or anonymised so it can no longer be associated with you.

Under UK GDPR and applicable data protection law, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — you can request deletion of your data where there is no compelling reason to continue processing it
• Right to restrict processing — you can ask us to pause processing of your data in certain circumstances
• Right to data portability — you can request your data in a commonly used, machine-readable format
• Right to object — you can object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not make automated decisions with significant legal or similar effects based on your data

To exercise any of these rights, contact us at support@supapicks.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk — the UK supervisory authority for data protection.

SupaPicks is a football betting tips and analysis site. Our content is intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18.

If you believe a child has provided us with personal data, please contact us at support@supapicks.com and we will delete that information as promptly as possible.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify subscribers by email.

We encourage you to review this policy periodically. Continued use of supapicks.com after any changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: