Bull Up Privacy Policy

This Privacy Policy applies to the Bull Up mobile application and related services, operated by Yeoley Limited trading as Bull Up.

1. Introduction

Yeoley Limited, trading as “Bull Up” (“Bull Up”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, transfer and safeguard your personal information when you use the Bull Up mobile application, website and related services (collectively, the “Services”).

Yeoley Limited is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018 and is responsible for your personal data. This policy is provided pursuant to Articles 12 and 13 of the UK GDPR.

2. Who We Are

Legal Entity / Data Controller: Yeoley Limited

Trading Name: Bull Up

Address: Yeoley, Coalbrookdale, Shropshire, England

Email: privacy@yeoley.com

Data Protection Contact: dpo@yeoley.com (if applicable)

3. What Personal Data We Collect

We may collect personal data in the following categories:

Identity & Contact Data: name, email address, phone number and postal address.
Account Data: user ID, username, password hash, account preferences and login details.
Usage Data: activity logs, app interactions, feature usage and general engagement with the Services.
Technical Data: IP address, device identifiers, operating system, browser type, app version, cookies and analytics data.
Communications Data: messages sent to us, support requests and marketing preferences.
Tournament Data: player names, match results, scoring data, rankings and participation history.
Device & Performance Data: crash reports, diagnostics and performance analytics.

4. How We Collect Personal Data

Directly from you, for example when you register an account, complete forms or contact us.
Automatically through your use of the Services, including cookies, analytics and technical logging.
From third parties where necessary, such as analytics providers, authentication providers or service partners.

5. Why We Use Personal Data & Lawful Bases

We process your personal data for the following purposes and rely on the corresponding lawful bases under UK data protection law:

To provide and manage your account: performance of a contract with you.
To operate tournaments, scoring and app functionality: performance of a contract with you.
To communicate service updates and support responses: performance of a contract or our legitimate interests.
To personalise services and improve user experience: consent or our legitimate interests.
To send marketing communications: consent, where required by law.
To monitor, improve and secure our Services: our legitimate interests.
To comply with legal obligations or lawful requests: compliance with a legal obligation.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the Services, understand usage, improve performance and personalise content where applicable. Non-essential cookies or similar technologies are only used where required by law with your consent. Please see our separate Cookie Policy for further details.

8. International Data Transfers

Where personal data is transferred outside the UK or EEA, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses or other lawful transfer mechanisms.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes set out in this Privacy Policy, including to comply with legal, regulatory, tax, accounting or reporting requirements, resolve disputes and enforce our agreements. Retention periods may vary depending on the type of data.

10. How We Protect Your Data

We implement appropriate technical and organisational security measures to protect personal data against accidental loss, unlawful or unauthorised access, destruction, misuse, alteration or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Automated Decision-Making & Profiling

We may use limited automated processes, such as analytics or service personalisation tools, to improve the user experience. We do not carry out automated decision-making that produces legal or similarly significant effects on you without meaningful human involvement. Where applicable, you have rights to object, request human intervention and seek further information.

12. Children’s Data

Our Services are not directed at children under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected such information without appropriate consent, we will take reasonable steps to delete it.

13. Your Rights

Under the UK GDPR, you may have the following rights:

The right to access your personal data.
The right to have inaccurate personal data corrected.
The right to request deletion of your personal data in certain circumstances.
The right to restrict processing in certain circumstances.
The right to object to processing in certain circumstances.
The right to data portability where applicable.
The right to withdraw consent at any time where processing is based on consent.
The right to lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise your rights, please contact privacy@yeoley.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other operational reasons. Any changes will be posted in the app, on our website or otherwise made available to you, and we will update the “Last updated” date above.