Privacy Notice

Who's responsible for your data

Blitz & Blush is operated by Jessica Rayburn, who is the data controller for the personal data described in this notice. That means Jessica Rayburn decides how and why your data is processed and is responsible for handling it properly.

What we collect and why

• Account details — your email address and sign-in credentials, used to create and secure your account. Legal basis: performing our contract with you.
• Your activity in the app — teams and players you follow, saved fantasy squads, Game Day Fits you post or heart, party plans you save, quiz answers and theme choices. Used to provide the app's features and remember your preferences. Legal basis: performing our contract with you.
• Support messages — anything you send us when you ask for help. Legal basis: legitimate interest in helping you.
• Usage and device data — basic telemetry such as device type, browser, IP address and pages visited, used for security, fraud prevention and improving the app. Legal basis: legitimate interest in running and improving the service.

Payment card details are collected and processed by our payment provider — we never see or store your full card number.

Who we share data with

• Service providers who help us run the app — hosting, database and authentication infrastructure, and analytics tooling.
• Our payment provider, to sell memberships and passes, manage subscriptions, process payments, handle tax compliance and issue receipts.
• Professional advisers (legal, accounting) where needed.
• Authorities where the law requires it.

We do not sell your personal data to anyone.

How long we keep it

We keep your data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and accounting obligations. When data is no longer needed it is deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, restrict or object to how it's processed, take your data elsewhere (portability), and withdraw consent where processing is based on consent. You may also have the right to complain to your local data protection authority. To exercise any of these rights, contact us through the app and we'll respond within one month.

International transfers

Our service providers (including our payment provider) may process data outside your country, including outside the UK and EEA. Where they do, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

Security

We use appropriate technical and organisational measures — encrypted connections, access controls and row-level security on stored data — to protect your personal data. No system is perfectly secure, but protecting your info is a job we take seriously.

Cookies and storage

We use essential cookies and browser storage to keep you signed in and remember your theme and preferences. We don't use advertising or marketing trackers. You can clear cookies and site data in your browser settings at any time, though sign-in and preferences will reset.

Changes and contact

We may update this notice from time to time; material changes will be flagged in the app. For any privacy question or request, contact us through the app.