Privacy notice
Last updated:
Who’s In runs weekly games: the list, the money, the teams and the stats. This notice explains what our website and waitlist collect about you, and why. It’s short, because we collect very little.
Who we are
Who’s In (joinwhosin.io) is responsible for your data. It started as the app of the Bala FC football club. Email us at business@joinwhosin.io about anything in this notice.
What we collect
When you join the waitlist, we store:
- your email address
- whether you organise games, play, or manage a sports venue
- the sport or activity you choose, if you pick one
- when you gave consent, and the exact words you agreed to
- when you joined, and when you unsubscribe (if you do)
We don’t store your IP address. We don’t use cookies for tracking or advertising, and we don’t use analytics. We never sell your data.
Why we use it
- The launch email. We email you when Who’s In opens to more groups. Our lawful basis is your consent. We send only launch news, not a newsletter.
- Your answers. They tell us who needs Who’s In, and for which sports or activities, so we know where to start. This is part of the same consent.
- The bot check. Cloudflare Turnstile checks that a person, not a bot, sent the form. Our lawful basis is our legitimate interest in keeping the waitlist free of spam. Turnstile looks at signals from your browser and your IP address. It doesn’t set cookies on our site.
- Proof of consent. We keep the time and the words of your consent, because the law asks us to be able to show it.
Who else handles it
- Cloudflare hosts the website, stores the waitlist and runs the bot check. The waitlist is kept in Cloudflare’s EU data location. Like any web host, Cloudflare processes your IP address to deliver the site and to protect it from attacks.
- An email provider will send the launch email. We’ll name it here before we send it.
We don’t share your data with anyone else.
Outside the UK
Cloudflare can process data outside the UK, for example in the EU and the US. These transfers are covered by UK adequacy regulations (including the UK–US data bridge), or by data protection clauses approved for the UK.
How long we keep it
We keep your details until 12 months after we send the launch email. Then we delete them. If you unsubscribe before then, we stop emailing you straight away. We keep only your email address and the date you unsubscribed, so we never email you again by mistake.
Your rights
Under UK data protection law, you can ask us to:
- show you the data we hold about you
- correct it
- delete it
- stop using it, or you can object to how we use it
- give you a copy to take elsewhere
You can withdraw your consent at any time. Use the unsubscribe link in any email, or email business@joinwhosin.io. To use any of these rights, email us. We’ll reply within one month.
Age
The waitlist is for people aged 18 or over.
Complaints
If you’re unhappy with how we use your data, email us first, so we can put it right. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Changes
If this notice changes, we’ll update this page and the date at the top.