Privacy Policy

Last updated: 19 June 2026

Who we are

BoxerConnect (boxerconnect.com) is a directory and matchmaking service for amateur boxing clubs. For data protection purposes the operator of BoxerConnect is the data controller for the account and club data it holds. Contact us through the help and contact page.

Operated by BoxerConnect Ltd. Companies House no. 17288915. Our ICO registration is filed and the number will be shown here once issued; it is available on request via the contact page.

What we collect

• Club and coach details you enter: club name, location, contacts, coaches, and login email and password (passwords are stored only as a secure hash).
• Boxer records your club adds: name, date of birth, gender, weight, bouts and skills bouts, stance, availability, medical-expiry date and any notes. Some of these relate to children (see below).
• Messages you send to other clubs and tournament group chats.
• Membership and payment details, handled by our payment processor (Stripe). We never see or store full card numbers; we keep only the card brand and last four digits and the subscription status.
• Support messages you send us, and basic technical logs needed to run the service securely.

Children's data

Many amateur boxers are under 18. We treat their data with particular care. An under-18 boxer's name and free notes are never shown to other clubs - other clubs see only a reference code plus age, weight and record so they can judge a fair match. We never store or display photographs of boxers. For medical clearance we store only an expiry date ("fit to fight until..."), never any medical detail. A club may only list an under-18 once it confirms it holds the parent or guardian's consent both to record the child's details and to share them with other clubs to arrange bouts. Children do not have accounts and never enter data themselves; only adult club staff do. A parent or guardian can ask us to access or delete a child's record at any time (see Your rights), whichever club entered it. For children in the United States, boxers under 13 are covered by the Children's Online Privacy Protection Act (COPPA); a club must hold verifiable parental consent before listing them, and we never use a child's data for marketing or profiling. See our safeguarding and children's-data policy.

Newsletter

When you create a club, we add your login email to our product-updates and launch newsletter (run by Beehiiv) so we can tell you about new features and offers. It is only ever the adult account email, never a boxer's, and every email has a one-click unsubscribe. You can opt out at any time and it does not affect your account.

Why we use it (lawful basis)

• Contract - to provide your membership and run the service.
• Legitimate interests - to operate the matchmaking directory between member clubs, keep it secure, and prevent misuse.
• Consent - for listing children's data, which the club confirms it holds from the parent or guardian.

Who we share it with

• Other approved member clubs, limited to the matchmaking information described above (and never an under-18's name).
• Processors who run the service on our behalf under written data-processing agreements (GDPR Article 28): Vercel (hosting and serverless compute), Supabase (database hosting), Stripe (payment processing), Resend (transactional email), PostHog (cookieless product analytics, EU-hosted), Beehiiv (our product-updates newsletter), and a machine-translation provider used only to translate club-to-club messages. Some operate outside the UK/EEA; those transfers are covered by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses. You can request details of our processors via the contact page.
• We do not sell your data or use it for third-party advertising.

Retention

We keep account and boxer data while your club is active and for a reasonable period afterwards, then delete or anonymise it. When you ask us to delete a boxer or your club, we delete that data from our live systems and it clears from backups on their normal rotation. After deletion we keep only billing and invoice records that the law requires us to hold (typically about six years). The first-year-free offer is time-limited, so it cannot be repeatedly reclaimed by deleting and re-joining. (If we later keep a minimal anonymised marker to prevent that kind of abuse, it will contain no boxer or child data and we will update this policy first.) We keep the disclosure log (a record of which clubs viewed or contacted your club) for up to two years, and short technical and security logs for a similar period, then delete them.

Your rights

You can ask to access, correct, export, delete or restrict your data, or object to a particular use. Email privacy@boxerconnect.com (or use the contact page). We respond within one calendar month. We may ask you to confirm your identity first, and for a child's record we may ask for proof of parental responsibility - only the minimum needed. We treat erasure of a child's data as a priority and make it as easy to remove as it was to provide. If you are in the UK and unhappy with our response you can complain to the Information Commissioner's Office (ICO).

Data breaches

We have a process to detect, investigate and contain personal-data breaches. If a breach is likely to risk people's rights and freedoms we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and we will tell the clubs (and, for a child's data, the parent or guardian via the club) affected without undue delay where the risk to them is high. You can report a suspected breach or security issue to us at any time via the contact page.

Cookies and analytics

We use one essential cookie to keep you signed in, and we store your language choice in your browser. We do not use advertising or third-party tracking cookies. For product analytics we use PostHog (hosted in the EU), configured cookieless: it records a few usage events so we can see where clubs get stuck, with no advertising cookies and no cross-site tracking, and analytics requests are proxied through our own domain. Because it sets no tracking cookies, we do not ask you to accept a cookie banner. PostHog acts as a data processor under a data-processing agreement, and we never send it a boxer's personal details.

Questions about this policy? Get in touch.