Privacy & Cookie Policy

How we collect, use, and protect your data, and how cookie preferences work across the site.

Policy Details

Last updated: 18 February 2026

Bristol Poker League (“we”, “us”) is committed to protecting your privacy. This policy explains how we collect, use, store and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and how we use cookies in line with the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Bristol Poker League is a community league running live poker events in Bristol. For the purposes of data protection, we are the data controller for the personal data we process via this website and our league operations. You can contact us at [email protected].

2. What data we collect

  • When you use this website: We may collect technical data such as your IP address, browser type, device type and pages visited. Our server and any analytics we use (only with your consent) may log this information.
  • When you contact us: We collect the information you provide (e.g. name, email, message content) so we can respond.
  • When you sign in to the admin area: We store your login credentials (email and a secure password hash), name and role to manage access.
  • League and events: If you participate in the league, we may process your display name, results and points for leaderboards and tournament administration, as described when you join or when data is entered by organisers.

3. Legal basis for processing (UK GDPR)

We process your data only where we have a lawful basis:

  • Consent: Where you have given clear consent (e.g. for non-essential cookies or optional communications).
  • Contract: Where processing is necessary to provide a service you have asked for (e.g. administering the league).
  • Legitimate interests: Where we have a legitimate interest (e.g. running the website, security, responding to enquiries) and it is not overridden by your rights.
  • Legal obligation: Where we must process data to comply with the law.

4. How we use your data

We use your data to:

  • Run and improve this website
  • Respond to your enquiries and communicate with you
  • Manage admin access and league operations (e.g. leaderboards, results)
  • Comply with legal obligations and protect our rights

We do not sell your personal data. We do not use your data for automated decision-making or profiling in a way that has legal or similarly significant effects.

5. Cookies and similar technologies

A cookie is a small text file stored on your device when you visit a website. We also use your browser’s local storage to remember your cookie choices.

  • Strictly necessary cookies: These are essential for the site to work (e.g. session cookies for admin login, security). They do not require your consent under UK law but we list them here for transparency.
  • Preference (consent choice): We store your cookie consent (“Accept” or “Reject non-essential”) in local storage so we do not show the consent banner again and so we only load optional analytics if you have accepted.
  • Analytics (optional, opt-in only): If you click “Accept” in our cookie banner, we load Google Analytics (GA4) to understand how the site is used (e.g. pages visited, device type). This uses cookies and similar technologies. We do not load analytics until you accept. Google’s use of data is described in Google’s Privacy Policy and How Google uses cookies.

Cookies and storage we currently use

  • PHPSESSID (cookie, strictly necessary): Keeps an authenticated admin session active while you browse admin pages. Expires when the browser session ends.
  • bpl_cookie_consent (local storage, preference): Stores your consent choice for optional analytics.
  • bpl_cookie_consent_expiry (local storage, preference): Stores when your consent choice should expire so we can ask again.
  • _ga / _ga_* (cookie, analytics, optional): Set by Google Analytics only if you opt in, typically to distinguish users and sessions.

You can change your browser settings to block or delete cookies. Blocking strictly necessary cookies may affect how the site works (e.g. you may not be able to stay logged in to the admin area).

You can change your choices at any time:

  • Use the Cookie preferences link in the site footer (on any page). The cookie notice will open so you can turn analytics on or off and save your preferences.
  • Clear your browser’s local storage for this site; the next time you visit, the cookie notice will appear again and you can make a new choice.

6. Data retention

We keep your data only for as long as necessary:

  • Enquiry and contact data: for the duration of the enquiry and a short period after for follow-up.
  • Admin accounts and league data: for as long as you have an account or participate in the league, and for a reasonable period after for records and legal purposes.
  • Server and access logs: for a limited period (e.g. a few months) unless we need them for security or legal reasons.

After the retention period we delete or anonymise the data.

7. Your rights (UK GDPR)

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete data.
  • Erasure: Ask us to delete your data in certain circumstances (“right to be forgotten”).
  • Restrict processing: Ask us to limit how we use your data in certain cases.
  • Object: Object to processing based on legitimate interests or for direct marketing.
  • Data portability: Receive your data in a structured, machine-readable format where applicable.

To exercise any of these rights, contact us at [email protected]. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk.

8. Security

We use appropriate technical and organisational measures (e.g. secure connections, hashed passwords, access controls) to protect your data. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take your privacy seriously.

9. Third parties and international transfers

We may use third-party services (e.g. hosting, email, Cloudflare for security/captcha, and Google Analytics where consent is given). Those providers may process data on our behalf under contracts that require them to protect data and use it only as instructed. We do not share your data with third parties for their own marketing.

Some providers may process data outside the UK. Where this happens, we use appropriate safeguards required by UK GDPR (such as the UK International Data Transfer Agreement / Addendum, adequacy decisions, or equivalent contractual safeguards where applicable).

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will change when we do. We encourage you to review this page periodically.

11. Contact

For any questions about this privacy and cookie policy or our use of your data, contact us at [email protected].