Privacy Notice

1. Who controls your data

Sports Intelligence Africa ("SIA", "we", "us") operates this website and its sports intelligence services. Sports Intelligence Africa is the data controller for personal data we collect to operate accounts, provide content, manage enquiries and send communications. This means we determine why and how that data is used. Contact us about privacy or your rights through our contact page. Paddle separately handles personal data for transactions as described below.

2. Data, purposes and legal bases

• Account and profile information: name, email, country, organisation and any phone or job details you supply, together with authentication records and profile information shared by your chosen sign-in provider. We use these to create and manage accounts, authenticate you and provide the access included in your plan. The legal basis is performance of our contract with you or steps you request before entering a contract. Security and account-abuse prevention also rely on our legitimate interests.
• Enquiries and download requests: name, email, organisation, country, optional contact information, interests, requested publications and messages. We use these to deliver requested documents and synopses, verify your email, categorise and respond to enquiries, and provide support. The legal bases are steps at your request before a contract, contract performance where applicable, and our legitimate interests in responding to requests and protecting downloads from abuse. Verification records may include a hashed code, expiry and attempt counts.
• Membership and purchase records: purchased reports, order references, account or purchaser email, membership level, billing status and access dates. We use these to deliver purchases, manage subscriptions and resolve support enquiries under our contract, and to meet legal recordkeeping obligations. Paddle processes payment details; we do not need your full card details to grant access.
• Newsletter preferences: email and any name you provide, signup and consent records, and unsubscribe status. We use these to send the briefing and other communications you opted into on the basis of consent. You can withdraw consent at any time. We may retain a minimal suppression record in our legitimate interests to honour your opt-out.
• Technical and usage information: IP address, browser or device information, session identifiers, request and error logs and service usage information processed while operating the website. We use these to maintain the service, diagnose problems, understand performance and prevent security or fraud incidents in our legitimate interests. Non-essential analytics or marketing tracking, if introduced, requires consent where applicable law requires it.

Where we rely on legitimate interests, we consider your rights and use only data reasonably necessary for those purposes. Fields marked mandatory are needed to fulfil the relevant request; without them we may be unable to provide it. We do not sell your personal data.

3. Who we share data with

We share necessary data with service providers acting on our instructions, including hosting and database providers, authentication services, email delivery, support tooling and any analytics providers used with appropriate consent. If you choose social sign-in, your selected provider supplies the information you authorise and also processes data under its own privacy notice. If you authorise an assistant connection, the connected assistant receives the information you request within your account permissions.

Paddle.com is our reseller and Merchant of Record. We share the information needed to sell the product, manage subscriptions, process payments, handle refunds, comply with tax obligations and issue invoices. Paddle acts as an independent controller for its transaction processing; see Paddle's Privacy Policy. We may also share necessary information with legal or accounting advisers, authorities where legally required, or parties involved in a business transfer subject to appropriate confidentiality and legal safeguards.

4. Retention

We retain account and access information while your account is active and for as long afterwards as necessary to resolve outstanding purchases, disputes or legal obligations. Enquiries, support messages and download records are retained for the time needed to fulfil the request and any related follow-up or dispute. Newsletter information is retained while you subscribe; after you opt out, only information needed to honour that preference or demonstrate compliance is retained. Verification codes expire after 15 minutes and cannot authorise a download after expiry; expiry is not the same as immediate deletion of verification records. Security logs and verification records are retained only as needed to investigate abuse and maintain service security.

Retention depends on the purpose, applicable statutory requirements and any active legal claims. We review whether data is still needed and delete or anonymise it when it is no longer necessary. You can ask us about the retention applicable to your records or request deletion through our contact page. Paddle applies its own retention rules to the transaction data it controls.

5. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls, authentication, role-based staff permissions and restrictions on private documents. Access is limited to people and service providers who need it for their work. No internet service can guarantee absolute security; keep your account credentials private and contact us promptly if you suspect unauthorised access.

6. International processing

Our service providers may process personal data outside your country. Where applicable law restricts international transfers, transfers must use appropriate safeguards, such as an adequacy decision, approved standard contractual clauses and any additional protections required by law. For data subject to UK or EEA rules, those safeguards apply to transfers outside the relevant jurisdiction. Contact us for information about recipients, processing locations and applicable safeguards for your data.

7. Your privacy rights

Depending on the law that applies to you, you may request access to your data, correction, deletion, restriction of processing or a portable copy, and object to processing based on legitimate interests, including direct marketing. You can withdraw consent without affecting processing already carried out lawfully. You may also complain to your competent data protection authority, including the Information Regulator in South Africa or the relevant UK or EEA supervisory authority where those laws apply.

Submit requests through our contact page. We may reasonably verify your identity before disclosing or changing personal data. We respond within the period required by applicable law; for GDPR requests this is normally one month, with permitted extensions explained to you. Some records must be retained to comply with law or protect legal claims. Manage your profile in your account and use the unsubscribe option in our emails to stop briefings.

8. Cookies and similar storage

We use essential cookies and browser storage for sign-in, security, returning you to the requested page and interface preferences. Paddle and social sign-in providers may use their own cookies when you use their services. We do not require non-essential tracking for access to publications. If analytics or marketing cookies are introduced, we will explain them and obtain consent where required before using them. You can manage or clear cookies and local storage in your browser settings, but doing so may sign you out or prevent sign-in or checkout. See our Cookie Policy.

9. Updates

We may update this notice as our services or legal obligations change. The date above identifies the current version. We will provide appropriate notice of material changes and seek fresh consent where required.