Processing data
Privacy Policy
This privacy policy describes how ProgressiveBetting.co.uk collects, uses and protects information about you when you use this website. The website is operated by SportData Limited, a company registered in England and Wales with company number 8219563, registered office: 124 City Road, London EC1V 2NX, United Kingdom ("we", "us"). We are the data controller for the personal data described in this policy.
This policy is updated from time to time; the latest version is always published on this page. It was last updated on: 31 July 2026.
If you have any questions about this policy or about your personal data, please contact us.
What data we collect
Collected automatically from every visitor
- IP address and approximate location derived from it
- Browser and operating system information
- Pages visited, time of visit and how you use the website (server logs and the analytics tools described below)
If you create an account
- Username, email address and password (stored only as a secure hash — we cannot read your password)
- Your language and website usage connected to your account (for example login dates and pages used)
If you buy a subscription
- First and last name and country, provided with your order
- Order details: package, period, amount and payment method
- Payments are processed by PayPal or Revolut — card and bank details are handled by them, not stored by us
Optional features
- SMS notifications: your phone number and country code, if you choose to enable them
- Testimonials: first name, age and the text you submit, if you choose to publish an opinion
- Enquiries: whatever you send us through the contact form or by email
How and why we use this data
We rely on the following legal bases under the UK GDPR and the EU GDPR:
- Performance of a contract — creating and running your account, delivering subscriptions, processing orders, responding to your enquiries, sending account and service emails (for example activation, password reset and payment confirmations).
- Legitimate interests — keeping the website secure and preventing abuse, analysing how the website is used so we can improve it (see "Analytics" below), keeping internal business records, and sending registered users occasional emails about our own products and services — every such email contains an unsubscribe link, and you can also opt out at any time by contacting us.
- Legal obligation — keeping order and accounting records for the periods required by law.
We never sell your personal data.
Analytics
We use analytics tools to understand how visitors use the website so we can improve it. These tools receive technical data (IP address and approximate location, browser information), the pages you visit and the website features you use (for example which statistics you search for). They never receive your name or email address.
- Google Analytics (loaded through Google Tag Manager) — general audience statistics. Google may process this data outside the UK/EU under its own safeguards. You can opt out with the Google Analytics opt-out browser add-on.
- Hotjar — aggregated behaviour analytics such as heatmaps, showing how visitors interact with pages. You can opt out on the Hotjar opt-out page.
- Product analytics — currently Mixpanel and PostHog — feature-usage events for logged-in users. Both are configured with European Union data residency. If you are logged in, events are linked to a pseudonymous numeric user ID together with your subscription status, language and the feature parameters you used; purchases are recorded with the order number, package, amount and currency (never card details). Session recording and automatic click capture are switched off. PostHog additionally honours your browser's "Do Not Track" setting; Mixpanel, Google Analytics and Hotjar do not honour it by default.
You can prevent all of these tools from running by blocking their cookies and scripts in your browser or with a content-blocking extension — the website will keep working. See "Cookies" below for the exact cookie names.
Cookies and how we use them
A cookie is a small file placed on your device that lets the website recognise your browser. We use cookies to keep you signed in, remember your preferences and measure how the website is used. You can delete or block cookies in your browser settings at any time; blocking the essential cookies below will prevent you from logging in.
Essential cookies
| Cookie name | Purpose |
|---|---|
| epro_session | Keeps you signed in during a visit. Deleted when the session ends. |
| epro_remember | "Remember me" — keeps you signed in between visits, if you choose that option when logging in. Persistent. |
| PHPSESSID | Technical session identifier set by the server. Deleted when you close your browser. |
| __cf_bm, _cfuvid, cf_clearance | Set by Cloudflare, which protects and speeds up the website (including the Turnstile bot check on login and registration pages). Used for security; they do not identify you to us. |
Functional cookies
| Cookie name | Purpose |
|---|---|
| hokej, pilka, szukaj | Short-lived (a few minutes) technical flags used by the statistics pages. |
| footStatsSeason, footStatsLeague, footStatsDiv, footStatsType | Remember your selected season, league and filters on football statistics pages for 30 days. |
| *TeamStats*, footExplorer* | Remember your team-statistics and statistics-explorer preferences for 30 days. |
| exitsplash, exitsplash_oto | Make sure a one-time informational overlay is not shown to you twice. |
Analytics cookies
| Cookie name | Purpose |
|---|---|
| _ga, _ga_* | Google Analytics — distinguishes visitors for audience statistics. |
| _hj* | Hotjar — behaviour analytics (heatmaps). |
| mp_*_mixpanel | Mixpanel — product analytics (see "Analytics" above). |
| ph_phc_*_posthog | PostHog — product analytics; PostHog also stores equivalent data in your browser's local storage. |
Who we share data with
We share personal data only with the service providers we need to run the website, and only to the extent described here:
- PayPal and Revolut — payment processing. They receive your order and payment details and act under their own privacy policies.
- SparkPost (EU) — email delivery. Receives your email address, name where applicable, and delivery data for the emails we send.
- Cloudflare — security, content delivery and the Turnstile bot check. Sees the traffic between your browser and our server.
- Google (Analytics, Tag Manager), Hotjar, Mixpanel and PostHog — analytics, as described above.
- Our hosting provider — the servers the website runs on.
Mixpanel, PostHog and SparkPost process data in the European Union. Google, Hotjar and PayPal may process data outside the UK and the EU; where they do, transfers take place under their published safeguards (such as the UK and EU standard contractual clauses or adequacy decisions). We may also disclose personal data where the law requires it.
Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- Access the personal data we hold about you and receive a copy of it
- Have inaccurate data corrected
- Have your data deleted ("right to be forgotten")
- Restrict or object to how we process your data, including direct marketing
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us. You can also delete your account yourself from your profile page. If you believe we have mishandled your data, you have the right to complain to the Information Commissioner's Office (ico.org.uk) or to your local supervisory authority.
How long we keep your data
- Account data — for as long as your account exists; when the account is deleted, the personal data connected to it is removed.
- Order and payment records — for the periods required by tax and accounting law.
- Server logs and security records (which include IP addresses, also stored with sessions, "remember me" tokens and email sign-ups) — for a short period needed for security and troubleshooting.
- Analytics data — for the retention periods of the tools listed above, under their default settings.
Security
The website is served over an encrypted connection (HTTPS), passwords are stored only as secure hashes, and access to personal data is limited to what is needed to run the service. No internet service can be guaranteed 100% secure, but we take reasonable technical and organisational measures to protect your data.
Links to other websites
Our website contains links to other websites. This policy applies only to this website — when you follow a link elsewhere, the destination site's own privacy policy applies. We are not responsible for other websites.
Changes to this policy
When we change what data we collect or how we use it, we update this page and the date at the top. Significant changes may additionally be announced on the website.