Privacy Notice

1. Who we are

Northlight Ventures Ltd operates LastPickr and controls the personal information described here. LastPickr is separate from Winspire Competitions. Following a Winspire link does not permit us to share your LastPickr account data with Winspire.

2. Information we collect

• Account information: display name, email, password hash, date of birth, account type, verification, and consent records.
• For under-13 accounts: guardian email, approval status and dates, and guardian account-control records.
• Gameplay information: entries, picks and revisions, survival status, rankings, XP, streaks, and achievements.
• League information: memberships, invitations, and administration activity.
• Preferences, support correspondence, and technical/security information such as IP address, browser details, authentication records, and logs.

We ask for date of birth to apply the correct account and privacy protections. It is not shown to other players.

3. How and why we use it

Marketing is always disabled for under-18 accounts. Gameplay decisions are calculated automatically from fixture results and published rules; contact us if a status appears incorrect.

4. Children and young players

Players aged 13–17 use junior accounts. Players under 13 require a parent-managed account and verified guardian approval before signing in. Both account types are excluded from public leagues and overall public leaderboards, cannot enable marketing or public visibility, and may join private leagues only.

Members of the same private league can see a player’s display name, survival status, ranking, and pick after the deadline. Email address, date of birth, and guardian details are never displayed to players. Guardians can manage an under-13 account using secure links and may withdraw approval or request closure.

When a player reaches 13, their account can transition from parent-managed to junior. At 18 it can transition to adult, but marketing and public visibility stay off unless the player actively enables them. Read our child-friendly privacy guide.

5. Who receives information

We use providers for hosting, databases, authentication, transactional email, security, monitoring, and support. These may include Vercel, Supabase, and Resend when enabled. They process data under contractual restrictions. We may disclose information where required by law, to protect a child or another person, to protect the service, or during a properly managed business restructuring.

6. International transfers

Some suppliers may process information outside the UK. We use applicable adequacy regulations or appropriate contractual and organisational safeguards. Contact us for details.

7. Retention

We keep account and gameplay information while an account is active and as reasonably needed for rankings, disputes, fraud prevention, safeguarding, and legal duties. Guardian approval and withdrawal records may be retained to demonstrate how an under-13 account was managed. Security logs and backups use limited operational retention periods. Information is deleted or anonymised when no longer required.

8. Your rights

Depending on the circumstances, players and guardians may ask us to access, correct, erase, restrict, or object to processing, and request portable information. Consent can be withdrawn without affecting earlier lawful processing. Contact privacy@lastpickr.co.uk. You may also complain to the Information Commissioner’s Office.

9. Changes

We may update this notice when the service, suppliers, or law changes. Material updates will be brought to registered users’ attention and the version date will change.