Privacy Policy

How we collect, use, and look after your information.

Last updated 1 September 2026

1. Who is responsible

Orange Ink Consulting is the controller of personal data processed through lastone-standing.com and app.lastone-standing.com. We are based in Chelmsford, Essex, United Kingdom. This notice explains what we collect, why, how long we keep it, and your rights under UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.

To contact us about privacy, use the Contact form on the website or in-app messages.

2. Personal data we collect

Depending on how you use the Service, we may process:

Account data: name, email address, login credentials or sign-in provider identifiers, and profile details you choose to add.
Game data: games you host or join, invites, picks, standings, and related timestamps.
Payment data: the fact that you paid a service fee, amount, currency, and Stripe payment references. Stripe processes card details. We do not store full card numbers.
Support data: messages you send through the Contact form, and any follow-up.
Technical data: IP address, device and browser type, pages viewed, and diagnostic logs needed to run and secure the Service.
Cookie and similar data, described in the Cookie Policy.

3. Why we use it

Privacy Policy

How we collect, use, and look after your information.

Last updated 1 September 2026

1. Who is responsible

To contact us about privacy, use the Contact form on the website or in-app messages.

2. Personal data we collect

Depending on how you use the Service, we may process:

Account data: name, email address, login credentials or sign-in provider identifiers, and profile details you choose to add.
Game data: games you host or join, invites, picks, standings, and related timestamps.
Payment data: the fact that you paid a service fee, amount, currency, and Stripe payment references. Stripe processes card details. We do not store full card numbers.
Support data: messages you send through the Contact form, and any follow-up.
Technical data: IP address, device and browser type, pages viewed, and diagnostic logs needed to run and secure the Service.
Cookie and similar data, described in the Cookie Policy.

3. Why we use it

Provide the Service you asked for (contract): accounts, games, picks, invites, and standings.
Take payment of platform service fees (contract) and keep required financial records (legal obligation).
Send service emails such as invites, pick reminders, and result notices (contract / legitimate interests).
Respond to support messages (legitimate interests or contract).
Keep the Service secure, prevent abuse, and diagnose faults (legitimate interests).
Improve the Service using aggregated or diagnostic information (legitimate interests).

We do not sell your personal data. We do not use it for profiling that produces legal or similarly significant effects, and we do not use it to offer gambling products.

4. Who we share it with

We share personal data only where needed to run the Service:

Supabase, which hosts sign-in and the product database.
Stripe, which processes service-fee payments.
Email delivery providers we use to send transactional mail.
Sentry, which receives technical error and performance diagnostics.
Professional advisers or authorities where the law requires it.

Other players in a game can see information needed for that game, such as your display name, whether you are still standing, and (where the game shows it) pick history. Hosts can see membership and join-request details for games they run.

5. International transfers

Some processors may store or access data outside the United Kingdom. Where that happens, we use a lawful transfer mechanism such as the UK International Data Transfer Agreement, UK Addendum to the EU SCCs, or an adequacy regulation.

6. How long we keep it

We keep account and game records for as long as you have an account and for a reasonable period afterwards so a season can be completed and disputes handled. Payment records are kept for as long as tax and accounting law requires. Support messages are kept long enough to deal with your request and improve the Service. Diagnostic logs are kept for a short period unless they are needed to investigate a security or fault issue.

You can ask us to close your account through the Contact page. We will delete or anonymise personal data we no longer need, unless we must keep it for a legal obligation.

7. Your rights

You have the right to access, correct, erase, or restrict personal data we hold, to object to processing based on legitimate interests, and to data portability where the processing is automated and based on contract or consent. You can also complain to us and, if you are not satisfied, to the Information Commissioner’s Office at ico.org.uk.

If you make a data-protection complaint to us, we will acknowledge it and respond within 30 days where we reasonably can. You do not have to complain to us before you contact the ICO.

8. Children

The Service is for people aged 18 or over. We do not knowingly collect personal data from children. If you think a child has created an account, contact us and we will delete it.

9. Cookies

We use cookies and similar storage as explained in the Cookie Policy. Strictly necessary cookies run the Service. Optional cookies are only used if you accept them on the cookie banner.

10. Changes

We may update this notice. The date at the top of the page will change when we do. If a change is material, we will take reasonable steps to tell you.