FixtureFeed Privacy Policy
This policy covers FixtureFeed: the API, the portal at fixturefeed.seliontech.com, and the checkout you use to buy a licence. It explains what personal data we hold, why we hold it, who else handles it, and what you can ask us to do with it.
For anything else on this website, see our main privacy policy.
Who we are
FixtureFeed is run by Selion Technologies Ltd, registered in England & Wales under company number 14970964. Our registered address is Allia Future Business Centre Building 1, King's Hedges Road, Cambridge, England, CB4 2HY.
We're the controller for the personal data described here. If you have a question or a request about your data, email fixturefeed at seliontech.com.
What we hold
Your account
- The account name.
- The email address of each person who signs in to the account, and their role.
- When the account was created, and when each person last signed in.
Your licence
- The club name you type on Stripe's checkout page.
- The club you pick in the portal.
- The licence status and the date it's paid through.
- Your Stripe customer ID and subscription ID.
We only store a hash of your licence key, not the key itself.
Your API keys
For each key we hold its name, a short prefix so you can tell keys apart, the origins it's allowed to be used from, and when it was created and last used. As with licence keys, we only store a hash of the key.
Sign-in codes
When you sign in to the portal, we email you a code. We store a hash of it, it expires after a short time, and it only allows a limited number of attempts.
Error logs
When a request fails, we log the request path, the error, and the user or account ID it's linked to. We use these to find and fix problems.
IP addresses
We use your IP address to rate-limit sign-in attempts and public requests, so nobody can hammer the service or guess codes. IP addresses are held in memory only. We don't store them in our database.
What we don't hold
- Card details. Stripe handles payment and we never see your card.
- Personal data in match data. The fixtures and results FixtureFeed serves (teams, venues, dates and scores) come from the public FA Full-Time website. They don't contain personal data about our customers.
Why we use it, and our legal basis
We handle your data under UK GDPR and the Data Protection Act 2018.
- Contract. We need your account, licence and billing data to sell you a licence, give you access to the portal and API, send your licence key and sign-in codes, and keep your subscription running.
- Legitimate interests. We use error logs and IP-based rate limiting to keep FixtureFeed secure and working. We think that's something you'd reasonably expect, and it's kept to the minimum we need.
Who else handles it
A small number of services help us run FixtureFeed:
- Stripe takes payments, runs subscriptions, and provides the billing portal where you manage or cancel yours.
- Microsoft 365 sends all FixtureFeed email, including licence keys and sign-in codes, from our FixtureFeed address.
The portal, API and database run on Selion Technologies' own hosting.
Stripe and Microsoft process data in the UK and the EU. The UK treats EU data protection as adequate, so data sent to the EU keeps the same level of protection it has here.
Cookies
The FixtureFeed portal uses two cookies. Both are strictly necessary, so we don't ask for consent to set them.
- fixturefeed.portal keeps you signed in. It's encrypted, it's HttpOnly (so scripts on the page can't read it), and it ends with your browser session.
- An anti-forgery cookie protects the portal's forms from cross-site request forgery.
We don't use analytics, advertising or tracking cookies.
How long we keep it
- Account and licence data stay for as long as the account exists. That includes after a subscription ends, so you can pick up where you left off if you buy again. If you'd like it deleted, email fixturefeed at seliontech.com.
- Error logs are deleted automatically after 90 days.
- Sign-in codes expire shortly after they're sent.
- Stripe keeps its own billing records, in line with its own legal duties.
Your rights
Under UK GDPR you can ask us to:
- Give you a copy of the personal data we hold about you.
- Correct anything that's wrong or incomplete.
- Delete your data.
- Stop using it where we rely on legitimate interests, if you object.
- Send it to you or someone else in a common, machine-readable format.
To use any of these, email fixturefeed at seliontech.com. We may need to check it's really you before we act. We'll reply within one month, as the law requires.
Some rights have limits. For example, if you ask us to delete your data while you still have an active licence, we can't keep the licence running without it.
Complaints
If you're unhappy with how we've handled your data, please tell us first and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint.
Changes to this policy
If we change how we handle your data, we'll update this page and the date at the top.
Contact us
Email fixturefeed at seliontech.com, or write to Selion Technologies Ltd, Allia Future Business Centre Building 1, King's Hedges Road, Cambridge, England, CB4 2HY.
You can also read the FixtureFeed Terms of Service or go back to FixtureFeed.