Privacy Policy

Correct Score is a football prediction and live-score service. This policy covers the website at correctscore.co and every page on it. Where this policy says “we” it means the people who operate Correct Score; where it says “you” it means anyone who visits the site or holds an account.

We are the data controller for the information described below. If you want anything on this page explained before you use the site, write to us first — the contact address is at the foot of this document.

We collect the minimum that lets the site work and lets us bill correctly. Nothing here is sold, and nothing here is collected for advertising profiles we build ourselves.

• Account details. Your email address and a hashed password. We never store your password in a readable form and cannot recover it for you — only reset it.
• Billing details. Your subscription tier, renewal date and payment history. Card numbers are handled entirely by our payment processor and never reach our servers.
• Usage data. Which pages you open, which markets and sports you browse, and which teams you favourite. This tells us what to build next.
• Technical data. IP address, browser and operating system, device type and referring page. Collected in server logs and used for security and performance work.
• Anything you send us. The content of support emails and any account details you include in them.

Every use below is tied to running the service. We do not repurpose your data for anything you would not expect from a prediction site.

• Serving live scores, fixtures, tables and daily predictions.
• Creating and securing your account, and letting you sign back in.
• Taking payment, applying your plan, and issuing refunds.
• Sending service email only — verification, password resets, receipts and replies to your own support messages.
• Measuring how the site performs in aggregate so slow pages and broken flows get fixed.
• Detecting fraud, account sharing and automated abuse.
• Meeting legal, tax and accounting obligations.

If you are in the UK or the EEA, the UK GDPR and GDPR require us to name a lawful basis for each use. Ours are:

• Contract. Account creation, subscription management and delivery of the predictions you have paid for.
• Legitimate interests. Security, fraud prevention, aggregate analytics and product improvement — balanced against your rights, and never used for profiling that has a legal effect on you.
• Consent. Non-essential cookies and any optional marketing email. You can withdraw consent at any time without losing access to the service.
• Legal obligation. Financial records we are required to retain.

We do not sell, rent or trade personal data. It is shared only with the suppliers that make the service run, each bound by a data-processing agreement and each permitted to use the data only on our instructions.

• Hosting and infrastructure. Serving the site and storing the database.
• Payment processing. Taking card payments and handling renewals and refunds.
• Email delivery. Sending verification, reset and receipt messages.
• Analytics and advertising partners. Aggregate measurement and the ads shown on free pages. What these set is itemised in the Cookie Policy.
• Legal disclosure. Where a valid court order or legal obligation compels it, or to protect our rights and the safety of users.

Some suppliers process data outside your country. Where that happens, transfers rely on Standard Contractual Clauses or an equivalent approved safeguard.

• Account data — for as long as your account is open, then deleted within 30 days of a deletion request.
• Billing records — retained for the period tax and accounting law requires, typically six years, even after the account closes.
• Server logs — rotated within 90 days.
• Support email — kept for 24 months so we can see the history of a case.

Prediction records themselves carry no personal data. They stay published permanently, because a track record you can only see the good half of is not a track record.

Traffic is encrypted in transit with TLS. Passwords are stored only as salted hashes. Administrative access is restricted to the accounts that need it and is logged. No system is perfectly secure, and we will not claim otherwise — but if a breach ever affects your data and creates a risk to you, we will tell you and the relevant regulator within the deadlines the law sets.

Depending on where you live you have some or all of the following rights. Exercising them is free and will never cost you access to the service.

• Access — get a copy of the data we hold about you.
• Rectification — have anything inaccurate corrected.
• Erasure — have your data deleted, except records we must legally keep.
• Portability — receive your data in a machine-readable file.
• Objection and restriction — object to processing based on legitimate interests, or ask us to pause it while a dispute is resolved.
• Withdraw consent — at any time, for anything based on consent.
• Complain — to your national data protection authority. In the UK that is the Information Commissioner’s Office.

Correct Score is for adults aged 18 and over. We do not knowingly collect data from anyone under 18, and we do not market the service to them. If we learn that an account belongs to a minor, we close it and delete the data attached to it.

When this policy changes, the date at the top of the page changes with it. If a change materially affects how we handle your data, we will email account holders before it takes effect rather than relying on you to notice. Continuing to use the site after that point means you accept the updated policy.