Legal

Privacy Policy

How Fight Week Picks collects, uses and protects your personal data.

Last updated 6 August 2026

1. Who we are

Fight Week Picks is a free mixed martial arts prediction game operated from the United Kingdom. In data protection terms we are the controller of the personal data described in this policy, which means we decide why and how it is processed.

Fight Week Picks is operated by an individual sole trader rather than a registered company. Contact details are in section 17. We have not appointed a Data Protection Officer, as we are not required to do so.

2. Who this policy covers

This policy applies to everyone who visits fightweekpicks.com or holds an account with us, wherever you are in the world.

Because we are established in the United Kingdom, our processing is governed principally by the UK GDPR, the Data Protection Act 2018 as amended by the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations.

Where we offer the site to people located in the European Economic Area, the EU GDPR also applies to that processing under its extraterritorial scope. Sections 13 and 14 set out additional rights that may apply if you live in the United States or certain other countries.

3. What we collect

3.1 Information you give us

• Email address. Used to sign in, reset your password and contact you about your account.
• Display name. Chosen by you. This is public and appears on leaderboards and in any league you join.
• Password. Stored only as a salted cryptographic hash. We never see or store your actual password.
• Anything you send us by email, including the content of correction requests and support messages.

We generate an internal username from your email address at sign-up. It is never displayed to other users and exists only because the underlying platform requires one.

3.2 Information created by playing

• Your picks. Which fighter you selected on each bout, the method and round you predicted, and when you last changed it.
• Your scores. Points awarded per fight and per card, your totals, and your position on leaderboards.
• League membership. Which leagues you belong to, which you created, and when you joined.

Once a card locks, aggregated pick percentages are displayed publicly, for example “62% picked this fighter”. These are totals across all players and do not identify anyone individually.

3.3 Information collected automatically

• IP address. Processed by our host and our content delivery network in server logs, and used by us in a hashed, short-lived form to limit repeated failed login attempts.
• Device and browser information such as browser type, operating system and referring page, recorded in standard server logs.
• Security challenge data generated when you complete the anti-bot check on our login and registration forms.

3.4 What we do not collect

• We do not collect payment details. The site is free and takes no payments.
• We do not ask for your date of birth, address, phone number or any government identifier.
• We do not knowingly collect special category data such as health, ethnicity, religion, political opinions or sexual orientation. Please do not send us any.
• We do not use advertising trackers, cross-site tracking pixels or data brokers.

4. Why we use it, and our lawful basis

Under the UK and EU GDPR we must have a lawful basis for each purpose. Ours are set out below.

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights and concluded that it is not, because the processing is limited, expected, and necessary to keep the service running safely. You may object at any time (see section 10).

5. Cookies and similar technologies

We use a small number of cookies and similar storage technologies. We do not use advertising or cross-site tracking cookies.

All of the above are strictly necessary to deliver the service you have asked for, and are therefore exempt from the consent requirement under PECR and the equivalent EU rules. If we later add analytics or any non-essential technology, we will ask for your consent first through a cookie banner and update this policy.

Your browser’s local storage is not used to store personal data. You can block or delete cookies through your browser settings, but you will not be able to stay signed in if you block ours.

6. Who we share data with

We do not sell your personal data, and we never have. We do not share it for anyone else’s marketing purposes. We use the following suppliers, who process data on our instructions under written terms.

We may also disclose personal data where we are legally required to, for example in response to a valid court order or a lawful request from a regulator or law enforcement agency, or where necessary to establish, exercise or defend legal claims. If the site were ever transferred to another operator, account data would transfer with it and you would be told beforehand.

What other users can see

Your display name and scores are public on leaderboards. Members of a league you join can see your name, your scores and how many cards you have played. Your email address is never shown to other users. Your individual picks are only visible to you until a card locks.

7. International transfers

Some of our suppliers are based outside the United Kingdom, or route traffic through servers outside it. Where personal data is transferred internationally, we rely on one or more of the following safeguards:

• Adequacy regulations made by the UK government, or adequacy decisions of the European Commission, where the destination country is recognised as offering suitable protection.
• Standard Contractual Clauses, together with the UK International Data Transfer Addendum, where no adequacy decision applies.

Under the Data (Use and Access) Act 2025, transfers from the UK are assessed against a test of whether protections in the destination country are not materially lower than under UK data protection law. We have satisfied ourselves that this test is met for the suppliers listed above.

8. How long we keep things

When you delete your account we remove your email address, password hash and username. We may retain your historical scores in an anonymised form so that past leaderboards remain accurate. Anonymised data is no longer personal data and cannot be linked back to you.

9. Security

• The whole site is served over HTTPS with a valid TLS certificate.
• Passwords are stored as salted hashes and are never recoverable in plain text, including by us.
• Login attempts are rate limited, and login and registration forms are protected by an anti-bot challenge.
• Access to the underlying server and database is restricted to the operator, using key-based authentication.
• Software and dependencies are kept up to date.

No system is perfectly secure, and we cannot guarantee absolute security. Please use a strong, unique password. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner’s Office within 72 hours and, where the risk is high, tell you directly without undue delay.

10. Your rights

If you are in the UK or the EEA, you have the following rights. They are free to exercise.

• Access. Get a copy of the personal data we hold about you.
• Rectification. Have inaccurate data corrected.
• Erasure. Have your data deleted, where there is no overriding reason to keep it.
• Restriction. Ask us to pause processing while a dispute is resolved.
• Portability. Receive the data you gave us in a structured, machine-readable format.
• Objection. Object to processing based on legitimate interests, including profiling.
• Withdraw consent. Where we rely on consent, withdraw it at any time. This does not affect processing already carried out.

You can change your display name, email address and password yourself from your account page at any time.

To exercise any other right, email hello@fightweekpicks.com. We will respond within one month. We may extend this by two further months for complex requests, and will tell you if we do.

We may ask for information to confirm your identity before acting, to make sure we do not disclose your data to someone else. Where a request is unclear, we may ask you to clarify it, and the time limit pauses until you reply. Our searches will be reasonable and proportionate, as permitted by the Data (Use and Access) Act 2025.

11. Complaints

If you are not satisfied, you can complain to a supervisory authority. In the UK that is the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk.

If you are in the EEA, you may complain to the supervisory authority in the country where you live, where you work, or where the alleged infringement took place.

12. Children

Fight Week Picks is not directed at young children. You must be at least 16 to hold an account. We do not knowingly collect personal data from anyone under 16, and we do not require or collect date of birth.

We take into account the higher protection matters for children introduced into the UK GDPR by the Data (Use and Access) Act 2025 when designing the service. We collect the minimum data needed, we do not profile users, we do not serve advertising, and we do not use engagement-maximising techniques.

If you believe someone under 16 has created an account, email us and we will delete it. In the United States, we comply with the Children’s Online Privacy Protection Act and do not knowingly collect data from children under 13.

13. United States privacy rights

We are a UK operator and we do not currently meet the thresholds that would make us a “business” under the California Consumer Privacy Act as amended by the CPRA, or a “controller” under the comprehensive privacy laws of Virginia, Colorado, Connecticut, Utah, Texas and other US states. We nonetheless apply the following as a matter of policy to all users:

• We do not sell your personal information and have not done so in the preceding twelve months.
• We do not share it for cross-context behavioural advertising.
• We do not use or disclose sensitive personal information beyond what is necessary to provide the service.
• We will never discriminate against you for exercising a privacy right.

US residents may request access to, correction of, or deletion of their personal information, and may appeal a refusal, by emailing hello@fightweekpicks.com. You may use an authorised agent, in which case we will require proof of authorisation. Categories of personal information we collect, in CCPA terms, are identifiers, internet or network activity, and user-generated content. We collect these for the business purposes described in section 4.

We honour Global Privacy Control signals where we can detect them, although we do not currently engage in any activity that would constitute a sale or share.

14. Other countries

• Brazil (LGPD). If you are in Brazil you have rights of confirmation, access, correction, anonymisation, portability, deletion and information about sharing. Contact us to exercise them.
• Canada (PIPEDA). You may access and correct your personal information and challenge our handling of it.
• Australia (Privacy Act 1988). You may access and correct your personal information and complain about a breach of the Australian Privacy Principles.
• Switzerland (revFADP). You have broadly equivalent rights to those in section 10.
• Elsewhere. Whatever your location, we will consider any request under section 10 in good faith.

If your country’s law gives you rights beyond those set out here, those rights apply and nothing in this policy limits them.

15. Automated decisions

We do not carry out profiling or automated decision-making that produces legal effects or similarly significant effects concerning you.

Points are calculated automatically from published fight results using a fixed, published formula, which is set out in full on our scoring page. This is arithmetic rather than a decision about you, and it has no effect outside the game. If a result is wrong, tell us and we will correct it and rescore.

16. Changes to this policy

We may update this policy as the site develops or the law changes. The date at the top always shows when it was last revised. If we make a material change, such as adding analytics, introducing marketing emails or changing who we share data with, we will tell account holders by email or a prominent notice on the site before it takes effect.

17. Contact