UK Privacy Rights (UK GDPR)

This notice supplements the main Pistaclub Privacy Policy and applies to UK residents. The UK operates its own version of the GDPR ("UK GDPR"), given effect by the Data Protection Act 2018. The substantive rights described in our main Privacy Policy apply equally to UK residents — this page identifies the UK-specific supervisory authority, transfer safeguards, and contact points.

1. Controller

The controller of your personal data is the entity identified in the legal-entity block at the foot of this page and in the main Privacy Policy. Pistaclub is established outside the UK; the UK GDPR nonetheless applies to our processing to the extent it targets, or monitors the behaviour of, UK residents.

2. Your rights under the UK GDPR

Your rights are equivalent to those under EU GDPR — see the main Privacy Policy §"Your rights":

Right to be informed
Right of access
Right to rectification
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object (including to direct marketing)
Rights related to automated decision-making including profiling — Pistaclub does not use fully automated decision-making that produces legal or similarly significant effects; certain moderation decisions include a human review step which is described in the Community Guidelines and in the DSA Article 17 statement of reasons we send with any restriction.

3. How to exercise your rights

Most requests can be handled in-app at Profile → Support. For email requests use privacy@pistaclub.app with the subject "UK GDPR request — [type]".

We will respond within one calendar month of receiving a valid request. The deadline can be extended by two further months for complex or numerous requests; we will let you know within one month if we need the extension and explain why.

4. The ICO — Information Commissioner's Office

You have the right to lodge a complaint with the UK supervisory authority if you believe your data protection rights have been infringed:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint

You are also free to lodge a complaint with your local EU / EEA supervisory authority — many complaints in border cases are handled by whichever authority is more convenient for the data subject.

5. International transfers UK → EU

Our primary servers and sub-processors are established in the European Economic Area. Transfers of UK personal data to the EEA are covered by the UK adequacy regulations (SI 2021/898) which recognise the EEA as providing an adequate level of protection. We continue to monitor the status of the UK adequacy regime and will update this page if it changes.

For transfers to any sub-processor outside the EEA and the UK, we rely on the UK International Data Transfer Agreement (IDTA) or the UK addendum to the EU Standard Contractual Clauses — detailed in the Sub-processors registry.

6. UK representative and DPO

Under UK GDPR Article 27, controllers not established in the UK may be required to designate a UK representative. Pistaclub's current UK user footprint is below the threshold that requires representative designation. If our footprint grows above the threshold, we will designate a representative and list them here.

Our data protection officer can be contacted at dpo@pistaclub.app.

7. Cookies and electronic marketing (PECR)

The UK Privacy and Electronic Communications Regulations (PECR) apply to cookies and electronic direct marketing to UK residents. Our Cookie Policy and the site-wide cookie preferences banner implement the PECR consent requirement — you may reject all non-strictly-necessary cookies in one click, and change your preference at any time via the footer "Cookie preferences" link.