Privacy Policy
How and why we use your information.
Operator and contact
Dear My Team is operated by LHEA UK LTD, company no. 15068925, registered in England and Wales. Registered office: 54 Hartfield Crescent, London, England, SW19 3SD. Contact admin@dearmyteam.com for privacy enquiries or to exercise your rights.
Information we process
Only the operator can access names, email addresses and messages submitted through our contact form. We retain them to handle enquiries and replies. We process your login email, authentication provider and account identifier, nickname, chosen team, country and city, location confirmation time, posts, comments, likes, reports, blocks and settings. If you enable notifications, we store your device push token and notification settings. Hosting and authentication providers may process IP addresses and access logs for security and service operation. Firebase Authentication handles passwords; the operator cannot read them in plain text.
Location verification and visibility
To complete registration, you must confirm your country and city using your device’s current location. Manual entry is not supported. We request device location only after you agree to the notice and press the location button. Device coordinates and your IP address are sent to BigDataCloud to resolve country and city names. Dear My Team does not store precise coordinates or addresses or continuously track your location. Your confirmed country and city appear to other members alongside your nickname, team and subsequent public posts and comments. You can verify your location again in your profile. Contact us to request removal of location labels on older posts. Current location does not establish residence or identity. Using a nickname does not make you fully anonymous to the service operator.
Purposes and legal bases
We process member information to manage accounts and provide the community features you request. We rely on legitimate interests, where necessary, to protect the service, prevent misuse and handle reports. Device location access, optional web push and optional analytics follow the relevant notices and your choices. We may process information to comply with legal obligations when responding to legal requests.
Providers and international processing
Google Firebase provides authentication, data storage, push notifications and consented analytics. Hosting uses Sites and Cloudflare-based infrastructure. BigDataCloud converts location information. The server retrieves and shares football data from API-Football without including member emails, nicknames or locations in those requests. Depending on provider processing locations, data may be processed outside the UK. We review the required contractual safeguards and applicable transfer grounds.
Retention and account closure
We retain accounts and preferences while you use the service. Closing your community account anonymises your public profile, hides your posts and comments, and removes likes, notification preferences and registered push devices. It does not delete your account with the sign-in provider. Report history and security records may be retained with restricted access for as long as needed for disputes, abuse prevention or legal obligations. Providers may apply separate retention periods to backups and access logs. To prevent removed accounts from rejoining, we retain a hash of their verified email and an account-block record separately. Voluntary closure is treated differently from enforced removal.
Choices and rights
Use My account to review your profile, change notifications or close your community account. Withdraw analytics or advertising consent at any time through Cookie settings in the footer. Subject to applicable law, you may request access, correction, erasure, restriction, objection, portability or withdrawal of consent. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.
Analytics and advertising
Firebase Analytics measures events such as page categories, successful sign-ins and community use only with analytics consent. Event parameters do not include email, nickname, post text, precise location or Firebase user ID. For consenting signed-in members, account identifier, team, last activity time and event type are separately stored for administrator operating metrics. Withdrawing consent or closing the account deletes these identifiable activity records. Error logs exclude raw error messages, post contents, emails, tokens and detailed URLs. Advertising areas are currently empty placeholders and do not run advertising tags. Notices and consent procedures will be updated when advertising is introduced.
Law enforcement and information sharing
Before sharing information in response to law enforcement requests or legal obligations, we assess lawfulness and necessity and disclose only the minimum information required under applicable law.