Privacy Policy
Last updated: 23 June 2026
Applies to: isledik.org and all Isledik competition registration services
At Isledik, we prioritize your privacy. Our commitment to safeguarding your personal data is unwavering. This privacy policy outlines the data we collect, how we utilize it, and your rights under the General Data Protection Regulation (GDPR).
For any inquiries regarding this policy, feel free to reach out to us at info@isledik.org.
What data do we gather?
1. Contact Form Information
When you reach out via our contact form, we collect your name, email, and message content. This data is used exclusively to respond to your inquiry and is not shared with anyone else.
2. Competition Registration Details
When you sign up for a tournament, we gather:
– Your name and email address
– Username or display name (if applicable)
– Game category and event preferences
– Team name and member details (if registering as a team)
– Your experience level (beginner, intermediate, advanced)
This information helps us organize tournaments, form groups, and track your rankings in the Isledik system.
3. User Account Information
When you create a player account on isledik.org, we store your login details (email and encrypted password), participation history, leaderboard points, and event preferences. We keep your account information as long as your account is active, and you can request deletion anytime.
4. Payment Information
Tournament registrations and memberships are processed through a third-party payment provider. Isledik does not store your card number, bank details, or full payment information. We only keep transaction confirmations and amounts paid for our records.
5. Communication Data
If you opt to receive emails from Isledik (like event announcements, newsletters, and updates), we will store your email address for this purpose. You can unsubscribe anytime using the link in our emails or by contacting info@isledik.org.
Cookies
Isledik uses cookies on our website:
– Essential cookies: Necessary for the website’s functionality and cannot be disabled.
– Analytical cookies: We use anonymized data to understand visitor behavior (pages visited, time spent, traffic patterns) to enhance our site. No personally identifiable information is collected.
– Preferences cookies: If you log in or set display preferences, cookies save these settings to improve your experience.
On your first visit, you can consent to non-essential cookies. You can adjust your cookie settings anytime via the link in the website footer.
Analytics
We utilize web analytics tools (like Google Analytics or a GDPR-compliant alternative) to monitor website traffic and performance. Analytics data is stored in an aggregated and anonymized format. We do not track individual users across other sites.
If our analytics provider processes data outside the EU/EEA, we ensure appropriate safeguards are in place as per Article 46 of the GDPR.
How We Use Your Data
We use your personal data for several purposes:
– To process your competition registration and confirm your participation
– To organize groups, pairings, and leaderboards for events
– To manage your player account and leaderboard history
– To respond to inquiries submitted via the contact form
– To send you event-related communications (confirmation emails, schedule changes)
– To send optional marketing emails if you consented
– To process payments through our third-party provider
– To fulfill our legal obligations
We do not sell your personal data to third parties.
Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we are required to have a lawful basis for every type of personal data we process. Below is an explanation of the basis we rely on in each case.
Contract (Article 6(1)(b) UK GDPR) When you register for a tournament, purchase a membership, or buy a season ticket, we process your personal data because it is necessary to fulfil the agreement between us. This includes your name, email address, event preferences, team details, and payment confirmation. Without this information, we cannot organise your participation, assign you to groups, or track your results.
Consent (Article 6(1)(a) UK GDPR) When you subscribe to our newsletter or agree to receive event announcements and updates, we process your email address on the basis of your consent. You can withdraw your consent at any time by clicking the unsubscribe link in any of our emails or by writing to us at info@isledik.org. Withdrawing consent does not affect the lawfulness of any processing we carried out before the withdrawal.
Legitimate Interests (Article 6(1)(f) UK GDPR) In certain cases, we process data on the basis of our legitimate interests, provided those interests are not overridden by your rights and freedoms. This applies to: improving the website and event experience, maintaining leaderboards and seasonal records, analysing anonymised usage data, and communicating with existing members about relevant updates. In each case, we have assessed that our interest is proportionate and does not intrude on your privacy in an unreasonable way.
Legal Obligation (Article 6(1)(c) UK GDPR) We are required to retain payment transaction records for 7 years under UK financial and tax regulations. In these cases, we process only the data strictly required to meet our legal obligations, and it is not used for any other purpose.
If you would like to know the specific legal basis for any particular processing activity, please contact us at info@isledik.org and we will respond within 30 days.
External Service Providers
Isledik collaborates with a select number of trusted third-party service providers to run the website and competitions:
– Payment service provider: Handles transactions. Your payment information is governed by their privacy policy.
– Email service provider: Sends confirmation and other emails.
– Analytics service provider: Tracks website usage anonymously.
We only share the minimum necessary data to operate each service and do not share your data with advertisers or data traders.
Data Storage
Data retention periods:
– Contact forms: 12 months, then deleted
– Competition registration data: Active account duration + 24 months
– Payment transaction records: 7 years (legal requirement)
– User account data: Until you request deletion
– Marketing email subscriptions: Until you unsubscribe
– Analytics data: Aggregated, no personal data stored.
Your Rights Under GDPR
If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Website: ico.org.uk Telephone: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us first at info@isledik.org and we will do our best to resolve the matter promptly.
To exercise any of these rights, email us at info@isledik.org. We will respond within 30 days. If you’re not satisfied with our data handling, you can file a complaint with the UK data protection authority, the Information Commissioner’s Office (ICO), at ico.org.uk.
Security
We implement reasonable technical and organizational measures to safeguard your personal information from unauthorized access, loss, or disclosure, including:
– Encrypted passwords (we do not store them in plain text)
– HTTPS encryption across the entire website
– Access controls limiting who can view personal information within our organization
– Regular security reviews of third-party service providers
No online system is completely secure. If you suspect your account security has been compromised, contact us immediately at info@isledik.org.
Children's Privacy
Players under the age of 16 can participate in free events and family-friendly tournaments when accompanied by a parent or guardian. We do not knowingly collect personal data from anyone under 16 without verified parental consent. If you believe a minor’s data has been submitted without consent, please contact us, and we will delete it promptly.
Policy Amendments
We may update this Privacy Policy periodically. In such cases, we will revise the “last updated” date at the top of the page and notify registered users of significant changes via email.
Contact for Data Protection Matters
Contact for Data Protection Matters
Isledik is a small organisation and is not legally required to appoint a Data Protection Officer (DPO). However, we take data protection seriously and have assigned a dedicated point of contact for all privacy-related enquiries.
For any questions about this Privacy Policy, requests to exercise your rights, or concerns about how your data is handled, please contact us using the details below:
Email: privacy@isledik.org Subject line: Data Protection / Data Request Response time: Within 30 days, as required by UK GDPR
Please use this address — rather than our general enquiries email — for all data protection matters. This ensures your request is handled by the right person and tracked appropriately.
If your request is complex or you submit multiple requests, we may extend the response period by a further two months. We will let you know if this is the case within the initial 30-day window.