Privacy notice

This notice explains how AwardRocket handles personal data. We are the controller for account, billing and marketing data. When you run a programme, you are the controller for entrant, judge and guest data; we are your processor.

What we collect

• Account details: name, email, password hash, organisation and role.
• Billing: plan, Stripe customer and subscription identifiers, invoices.
• Programme data you and your users enter: entries, scores, bookings, emails.
• Technical logs: IP address (hashed where we say so), device and error reports.

Why we use it

To provide the service, take payment, send transactional email, prevent abuse, and — only if you opt in — send product news.

Processors

See the sub-processors list. They act on our instructions.

Retention

We keep account and billing records as required by law. Programme data stays while the organisation is active. After cancellation we keep a read-only copy for a limited period, then delete it.

Your rights

You can ask for access, correction, deletion or restriction, and you can object to marketing. Contact the address on the contact page. You can complain to the ICO.

International transfers

If a processor stores data outside the UK, we use an approved transfer mechanism.