Privacy policy

This policy explains how SumLou Limited (“dave.sport”, “we”, “us”) collects and uses personal data when you read dave.sport, sign up for a dave.sport account (my.dave), play the Dave Predictor, use Squads or subscribe to our newsletter.

We are the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. SumLou Limited is registered in England and Wales, company number 16964433, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner’s Office, registration number ZC266540.

Questions or requests about your data: data@dave.sport.

Data we collect

When you read dave.sport

• Usage data: pages viewed, device and browser information and approximate location, collected through analytics and advertising cookies if you consent. See our Cookie Policy.
• Article polls and reader votes: your choice, with a cookie identifier and a pseudonymised IP address to stop duplicate or automated voting. If you are signed in, your vote is linked to your account.
• Newsletter: your email address and which emails you asked for.
• Contact: anything you send us, including tips, corrections and complaints.

When you create a dave.sport account (my.dave)

• Account details: your email address and name. If you sign in with Google or Facebook, we receive your name, email address and an account ID from them. We never receive or store a password.
• Your choices: your confirmation that you are 18 or over and accept our terms, whether you agreed to marketing emails (and when), your daily email and notification settings.
• Your profile and Dave Card: the name on your card, the club you support, and anything you choose to add: a photo, position, stronger foot and age.
• Your interests and activity: the sports, clubs and writers you follow, the stories you open, swipe and read, poll votes, your feed style, visits and streaks, XP and level, and who invited you (referrals).
• Dave Predictor: your predictions, points and rankings, and any prizes you win. If you win, we may ask for proof of age, identity and address, and a delivery address.
• Squads: the Squads you create or join, your role, who invited whom, and the messages you post in Squad chats.
• Security data: sign-in codes and session tokens (stored only in scrambled, hashed form), the browser you signed in with, and records used to limit abuse.

How we use your data and our lawful bases

• To provide your account, the Predictor, Squads and your feed (contract): signing you in, running the game, working out points, tables and prizes, showing your Squad and chat, and building your personalised feed and daily email.
• To keep things fair and safe (legitimate interests): preventing fake, duplicate or automated accounts, cheating and abuse, checking chat messages, Squad names, names and photos for abuse, and keeping dave.sport secure.
• To personalise what you see (legitimate interests): using what you follow, read and swipe to rank stories in your feed, and to choose which offers and promotions we show you on dave.sport, including in the Predictor. We never show betting offers in the Predictor.
• To send marketing emails (consent): news, offers and giveaways, only if you said yes. You can change this at any time in my.dave settings or by using the unsubscribe link in any email.
• To send service emails (contract and legitimate interests): sign-in codes, your daily email if you turned it on, and important messages about the Predictor, such as when a gameweek opens or if you win.
• To show advertising, run and improve the site (consent for non-essential cookies; legitimate interests otherwise).
• To meet legal obligations, such as keeping records about prize winners.

Automated checks and personalisation

Every Squad chat message, Squad name, card name and profile photo is checked automatically for abuse before it appears. If something is blocked, you can rephrase it or contact us. Your feed is personalised automatically from your activity. Neither of these has a legal or similarly significant effect on you, and you can ask a person at dave.sport to review any decision about your account.

Who we share data with

We do not sell your personal data. We use trusted service providers who process it for us under contract:

• Cloudways and DigitalOcean: website and database hosting, in London, UK.
• Cloudflare: security and content delivery for all traffic to dave.sport.
• Brevo: sending sign-in codes, newsletters and account emails (EU).
• OpenAI: automated abuse checks on chat messages, Squad names, card names and photos, and help writing article polls (USA). OpenAI does not use this data to train its models.
• Google and Meta (Facebook): if you choose to sign in with them (USA).
• OneSignal: browser push notifications, if you turn them on (USA).
• Analytics and advertising partners: as listed in our Cookie Policy, only with your consent.
• Prize partners: if you win, we may share your name and delivery details with the partner providing your prize.

Your name, Dave Card, club and rankings can be seen by other members, for example in Squads and leaderboards. Squad chats can be seen only by members of that Squad. We may also share data where the law requires it.

International transfers

Your account data is stored in the UK. Some providers above are based in, or process data in, the USA and the EU. Where data leaves the UK, it is protected by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by the UK International Data Transfer Addendum to standard contractual clauses.

How long we keep data

• Your account and profile: until you delete your account. We may delete accounts that have been inactive for 2 years, after emailing you first.
• Squad chat messages: 12 months, then deleted automatically.
• Feed activity (stories swiped and read): 24 months.
• Predictions and results: for as long as you have an account, so tables and your history stay accurate. Prize winner records are kept for 6 years.
• Sign-in codes: 15 minutes. Sessions: up to 30 days after you last use them.
• Newsletter subscriptions: until you unsubscribe. Messages you send us: up to 2 years. Reader votes: up to 12 months. Analytics data: up to 14 months.

When you delete your account, we delete your profile, photo, follows, activity, sessions, Squad memberships and messages straight away. Backups are overwritten within 30 days.

Age

dave.sport accounts, the Dave Predictor and Squads are for people aged 18 or over. If we learn that an account belongs to someone under 18, we will delete it.

Your rights

You have the right to access, correct, delete, restrict or object to the use of your data, to data portability, and to withdraw consent at any time. You can download your data and delete your account yourself in my.dave settings. For anything else, email data@dave.sport. We reply within one month.

If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Security

Your data is protected by encrypted connections (HTTPS), hashed sign-in codes and session tokens, restricted administrator access and regular backups. No system is completely secure, so if we ever have a data breach that puts your rights at risk, we will tell you and the ICO as the law requires.

Changes to this policy

We will update this page if how we use your data changes, and tell account holders by email about significant changes. Last updated: 9 October 2026.