Privacy Policy

Marcrist Match Picks is run by Marcrist International Ltd (“Marcrist”, “we”), registered in England & Wales, Company No. 03799367. Marcrist is the controller of the personal data described here, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Address: Marcrist House, Kirk Sandall Industrial Estate, Doncaster, DN3 1QR, United Kingdom.
Email: info@marcrist.com
Phone: +44 (0)1302 890888

• Account details. Your email address, your name, an optional team name, your trade or industry where the sign-up form asks for it, and the language you would like our emails in.
• Your password. Stored only as a one-way scrypt hash. We can never see the password itself.
• Your predictions. The scores you predict each week, when you made or changed them, and the results, points and positions that follow.
• Prize records. If you win, the week, the amount and when the payment was made.
• Your marketing choice. Whether you ticked the optional mailing-list box, and when.
• Email records. Which game emails we sent you, when, and whether they were delivered.
• Notification settings. Only if you switch on browser notifications: the subscription address and keys your browser gives us so we can tell you when a new week opens. They do not identify you by name.
• Technical data. Your IP address is held briefly in server memory to limit repeated sign-up and sign-in attempts. It is not written to our database.

If you win, we will contact you to verify your identity and eligibility and to take the UK bank details needed to pay you (terms clauses 2.5 and 11). That happens directly with Marcrist by email or phone. Bank details are not entered into or stored on this website.

• Running the game (your account, sign-in, picks, scoring, the leaderboard and the game emails): necessary to provide the competition you entered.
• Winners and prizes (verification, the live draw if players tie, payment): necessary to provide the competition, and to meet our legal obligations, including record-keeping.
• Fair play and security (preventing multiple accounts, fraud and abuse, and keeping an audit trail of admin actions): our legitimate interest in a fair, secure game.
• Publishing winners (see section 4): our legitimate interest in showing that prizes are really awarded, as set out in terms clause 12.
• Marketing from Marcrist (news and offers): only with your consent, given by ticking the optional box. It is never a condition of entry (terms clause 16.2).
• Browser notifications: only with your consent, given when you switch them on. You can switch them off in your browser at any time.

• The leaderboard shows your team name (or your name, if you did not set one) with your points and position.
• When a week is won, Marcrist may publish the winner’s surname, county and winning entry. You can object by emailing info@marcrist.com, although Marcrist may still provide this information to the Advertising Standards Authority or another regulator if required (terms clause 12).

Game emails: confirming your email address, welcoming you, resetting your password, a new week opening, a reminder before the first kick-off if you have not entered, and that week’s results. Reminder and results emails include an unsubscribe link. Sign-in and password emails are always sent, because the account cannot work without them.

Marketing emails from Marcrist are sent only if you ticked the mailing-list box. You can withdraw that consent at any time using the link in any marketing email or by emailing info@marcrist.com. Withdrawing it does not affect your entry.

• Marcrist staff who run the game. When a week is won or ends in a tie, the players concerned have their name and contact details passed to the Marcrist team to arrange the live draw and payment.
• Pixelish, the UK digital agency that builds and operates the website for Marcrist. Pixelish acts on Marcrist’s instructions as a processor and has restricted access to the database for support and maintenance.
• Brevo (Sendinblue SAS, France), which delivers our emails as a processor. It receives your email address and the content of each email.
• Our web hosting provider, which stores the website and its database as a processor.
• Your browser’s notification service (for example Google, Apple or Mozilla), only if you switch on notifications. It carries the notification to your device.
• Regulators and law enforcement where the law requires it.

Fixture and result data comes from football-data.org. No personal data is sent to it. We do not sell or rent your personal data, and we do not share it with anyone for their own marketing.

Brevo processes data in the European Union, which the UK recognises as providing adequate protection. Browser notification services may process the notification outside the UK. Where personal data leaves the UK, we rely on UK adequacy regulations or approved contract clauses to protect it.

• Your account and predictions are kept while your account is open, and deleted or anonymised within 12 months of the end of the last season you played, unless you ask us to delete them sooner.
• Winner and prize records are kept for six years after the payment, to meet accounting and regulatory requirements.
• Email and admin audit records are kept for up to 24 months.
• IP addresses used to limit repeated attempts are held in memory for no more than an hour.

• All traffic to the site is encrypted with HTTPS.
• Passwords are stored only as scrypt hashes.
• Sign-in sessions use secure, HTTP-only cookies, and changing your password signs out every other session.
• Admin access is limited to named Marcrist and Pixelish staff, and admin actions are logged.

If you think your account has been misused, email info@marcrist.com straight away.

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Where we rely on your consent (marketing and notifications) you can withdraw it at any time. If you ask us to delete your data during a week you have entered, we may anonymise your entry instead so the results for other players stay correct.

To use any of these rights, email info@marcrist.com. We will reply within one month.

Marcrist Match Picks is only for UK residents aged 18 and over (terms clause 2.1). We do not knowingly collect data from anyone younger, and will delete it if we find we have.

We use only the cookies the site needs to work: the sign-in session cookie that keeps you signed in, and short-lived security cookies used while you sign in. These are strictly necessary, so they do not need your consent. The sign-in page also keeps your email address in your browser’s session storage for a moment while you follow the link we email you.

The game pages use no advertising, tracking or analytics cookies.

We will update this page when the game or the law changes, and change the date at the top. If a change materially affects how we use your data, we will email you before it takes effect.

Email info@marcrist.com or write to Marcrist International Ltd, Marcrist House, Kirk Sandall Industrial Estate, Doncaster, DN3 1QR, United Kingdom.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.