Data processing

1. Who does what

Cube Systems Limited is the controller of the personal data described in our privacy policy.

An organiser decides who is in their tournament, what they enter about each team or player, who can score and what the public board shows. We hold that information to run Trophy and follow the organiser's settings. Organisers should enter only what the event needs.

2. Part of our terms

This page and our sub-processors list form part of our terms of use. They cover every organiser on every plan. They are not an extra you need to ask for or pay for.

3. Where it is held

Trophy is hosted in the UK on Amazon Web Services (AWS). Our servers, database and backups are in the UK, and our email is sent through Amazon Simple Email Service in the UK.

Some providers, such as Google and Stripe, may process limited data outside the UK. Where that happens the transfer is protected by UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or equivalent safeguards. The sub-processors page says where each one processes data.

4. The suppliers who help us

We use a small number of suppliers, each under a contract that limits what they may do with the data. They are listed on the sub-processors page. We update that list when a supplier changes, and if a change is significant we tell account holders by email before it takes effect.

5. How we protect it

We use encrypted connections, sign-in cookies that page scripts cannot read, restricted and audited staff access, rate limits and separate staff sign-in with two-step verification. Results are never overwritten: a correction is saved as a new version with who made it, when and why.

6. Children and junior events

A child does not need an account, an email address or a password to take part. Organiser accounts are for adults. Read Keeping kids safe for how we approach junior events.

7. Getting your data out and deleting it

Account holders can download their data and delete their account from the account settings in the Trophy app. How long we keep each kind of record is set out in the privacy policy.

8. Contact

Questions about how we process data can be sent to hello@trophyapp.co.uk or by post to Cube Systems Limited, Unit 11, Olney Business Park, Osier Way, Olney, Buckinghamshire, MK46 5FP.