Privacy Policy
SponsorStack Ltd
Website: www.sponsorstack.co.uk
Email: ben@sponsorstack.co.uk
Company Number – SC883405
ICO Number – ZC114185
Last Updated: 25/08/2026
1. Introduction
SponsorStack Ltd (“SponsorStack”, “we”, “us”, “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect your personal data when you:
- Visit our website
- Contact us
- Register as a club or athlete
- Enquire as a sponsor
- Engage in a commercial relationship with us
- Use the SponsorStack Club Portal at portal.sponsorstack.co.uk
- Use the SponsorStack Brand Portal at brand.sponsorstack.co.uk
We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
SponsorStack Ltd is a sponsorship agency operating in the United Kingdom.
For the purposes of data protection law, SponsorStack Ltd is the “Data Controller” of your personal information. ICO Number – ZC114185
If you have any questions regarding this policy or your data, you can contact us at:
3. Information We Collect
We may collect and process the following types of personal data:
a) Contact Information
- Name
- Email address
- Phone number
- Company name
- Job title
b) Business Information
- Organisation details
- Sponsorship interests
- Commercial enquiries
c) Website Usage Data
- IP address
- Browser type
- Pages visited
- Time spent on pages
- Referring website
This information may be collected via cookies or analytics tools.
d) Club Portal Data
- Club name, sport, and season
- Email address used to register
- Sponsor names, values, contact details, and renewal dates entered into the portal
- Documents uploaded to the portal
- Activity log entries and internal notes
- Subscription plan and billing information (processed by Stripe)
e) Brand Portal Data
- Athlete or creator name, sport or niche, bio, and social media follower counts
- Bank account details (sort code and account number), provided solely for the purpose of generating sponsorship invoices
- Sponsor names, values, contact details, and partnership records entered into the portal
- Documents, media, and gallery content uploaded to the portal
- Subscription plan and billing information (processed by Stripe)
4. How We Use Your Information
We use your data to:
- Respond to enquiries
- Assess sponsorship suitability
- Manage partnerships
- Provide and operate the SponsorStack Club Portal and the SponsorStack Brand Portal
- Generate sponsorship invoices on behalf of Brand Portal users, using the bank account details they provide
- Send transactional emails including renewal alerts, welcome emails, billing notifications, new account sign-up notifications, and sponsor enquiry or request notifications
- Process subscription payments securely via Stripe
- Send relevant updates
- Improve our website
- Maintain commercial records
- Comply with legal obligations
We will never sell your personal data to third parties.
5. Legal Basis for Processing
Under UK GDPR, we rely on:
- Legitimate Interest – to conduct business development and sponsorship services
- Contractual Necessity – where you enter into a commercial agreement with us
- Consent – where you subscribe to updates or marketing communications
- Legal Obligation – where required by law
6. Data Sharing
We may share your information with:
- Professional advisors (legal, accounting)
- Service providers (CRM, hosting providers, analytics platforms)
- Supabase (database and authentication — portal data storage)
- Stripe (payment processing — subscription billing)
- Resend (transactional email delivery)
- Vercel (portal hosting and serverless functions)
- Clubs, athletes, creators, or sponsors where relevant to partnership discussions
All third parties are required to respect the security of your data.
We do not transfer personal data outside the UK unless adequate safeguards are in place.
7. Data Retention
We retain personal data only as long as necessary to:
- Fulfil the purpose it was collected for
- Comply with legal and accounting requirements
Where no ongoing relationship exists, enquiry data may be retained for up to 24 months for legitimate business development purposes.
For Club Portal accounts, data entered into the portal is retained for the duration of the subscription and for 90 days following cancellation or account closure, after which it is permanently deleted. Clubs may request immediate deletion by contacting ben@sponsorstack.co.uk.
For Brand Portal accounts, data entered into the portal — including bank account details provided for invoicing — is retained for the duration of the subscription and for 90 days following cancellation or account closure, after which it is permanently deleted. Users may request immediate deletion by contacting ben@sponsorstack.co.uk.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data from:
- Unauthorised access
- Loss
- Disclosure
- Misuse
However, no online transmission can be guaranteed 100% secure.
9. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction
- Request erasure
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent
To exercise your rights, contact:
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
10. Cookies
Our website may use cookies and similar technologies to:
- Analyse website traffic
- Improve user experience
- Monitor site performance
You can control cookie preferences through your browser settings.
If we use analytics tools (e.g., Google Analytics), these may collect anonymised usage data.
A separate Cookie Policy may be provided if required.
10a. Club Portal — Local Storage
The SponsorStack Club Portal uses browser localStorage (not cookies) to maintain your session and store temporary registration data such as your club name and email during the sign-up process. This data is stored locally on your device and is cleared automatically once registration is complete. No tracking or advertising data is stored via localStorage.
10b. Brand Portal — Session Storage
The SponsorStack Brand Portal uses browser sessionStorage (not cookies) for authorised platform administrators to temporarily hold the profile of an athlete or creator account being managed on their behalf. This data exists only for the duration of the browser session, is cleared on logout, and is never stored beyond what is necessary to provide administrative support.
11. Marketing Communications
If you opt in to receive marketing updates:
- You can unsubscribe at any time
- We will not send unsolicited marketing without consent
Every marketing communication will include an unsubscribe option.
12. Children’s Data
SponsorStack may work with clubs that include youth teams.
We do not knowingly collect personal data from children directly through our website.
Any safeguarding responsibilities remain with the relevant club.
The SponsorStack Brand Portal is intended for use by individuals aged 18 or over. Where the individual an account relates to is under 18, the account must be registered and operated by a parent or legal guardian on that individual’s behalf. We do not knowingly collect personal data directly from a person under 18 through the Brand Portal.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page with an updated revision date.
14. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact:
SponsorStack Ltd. ICO Registration Number: ZC114185
📧 ben@sponsorstack.co.uk
Website: www.sponsorstack.co.uk
15. Intellectual Property
The SponsorStack name and logo are registered as a UK trade mark with the UK Intellectual Property Office (Registration No. UK00004371531). Unauthorised use of the SponsorStack name, logo, or branding is not permitted. All content on this website, including text, graphics, and design, is the property of SponsorStack Ltd and may not be reproduced without prior written consent.