Skip to main content

LAST MAN STANDING HQ LIMITED

Privacy Policy

Last Updated on 25 August 2026

This Privacy Policy explains how LAST MAN STANDING HQ LIMITED ("LMS", "we", "us", or "our") collects, uses, and protects your personal data when you use our website and participate in our competitions.

We are committed to respecting your privacy and handling your information in a transparent and secure manner.

Who We Are

LAST MAN STANDING HQ LIMITED is a UK-registered micro-entity that operates a digital football prediction competition platform. We are the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our service is for users aged 18 and over and is not directed at children.

What Data We Collect

We may collect the following personal data:

  • Account Information: Name, email address, and any password you set (stored only as a hash by our authentication provider)
  • Google Sign-In Data: If you sign in with Google, the account ID, name, email address and profile picture that Google provides
  • Competition Activity: Picks, entry history, buy-back participation
  • Payment Data: Confirmation of bank transfers via Revolut for payment reconciliation. We do not take card payments
  • Technical Data: IP address, browser type, device data, and usage statistics

We do not collect special category data (e.g. health, race, biometrics).

How We Use Your Data

We use your personal data to:

  • Create and manage your account
  • Process entries, buy-backs, and payments
  • Operate and administer competitions
  • Enforce our Terms of Service and Competition Rules
  • Analyse platform usage and improve functionality
  • Comply with legal obligations (e.g. financial reporting)

Legal Bases for Processing

We rely on the following lawful bases to process your data:

  • Performance of a contract: to deliver our competitions and services
  • Legitimate interests: preventing fraud, securing the platform and improving the service
  • Legal obligation: to comply with regulatory or tax requirements

Who We Share Your Data With

We may share your data with the following service providers:

  • Revolut (bank transfers and payment reconciliation)
  • Vercel (website hosting)
  • Supabase (database and authentication)
  • Resend (transactional email)
  • Google (sign-in authentication and analytics)

We may also share data with law enforcement or regulatory bodies if legally required.

We never sell or rent your data to third parties.

Emails and Communications

We send two types of email:

  • Account emails, such as sign-in links and payment confirmations
  • Competition emails, such as pick reminders, elimination and winner notifications, and announcements about new competitions

You can turn off each type of competition email, or unsubscribe from all emails, in your email preferences or using the link in those emails. Sign-in emails are needed to access your account and are always sent.

Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data:

  • While your account is active
  • For up to 6 years after your last activity to meet legal obligations
  • Or until you request deletion, where permitted

Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion
  • Object to processing or request restriction
  • Request data portability
  • Withdraw consent (where applicable)
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise your rights, contact support@lastmanstandinghq.com.

Cookies

We use two types of cookies:

  • Essential cookies to keep you signed in and secure
  • Analytics cookies to understand how the site is used

You can change your cookie choice at any time using the Cookie Preferences link in the footer or via your browser settings. For full details, see our Cookies Policy.

International Data Transfers

If we transfer your data outside the UK or the EEA (e.g. via our service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).

Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page.

We will notify you of material changes via the platform or email.

Contact Us

If you have any questions or concerns about this policy or your data, contact: