Privacy Policy - Decision-Making in Sport

1. Who We Are

Decision-Making in Sport (“we”, “us”, or “our”) operates the calibration testing platform at www.decisionmakinginsport.com. We are a data controller for the purposes of UK GDPR and the Data Protection Act 2018.

For any data-related queries, please contact:

Allan Macdonald| allan@decisionmakinginsport.com | www.decisionmakinginsport.com

2. What Data We Collect

2.1 Account Registration Data

When you create an account, we collect:

Name
Work email address
Password (stored in encrypted form — we cannot access it)
Professional role / job title
Sex (optional)
Region
Years of experience in sport
Self-assessed confidence rating relative to peers

We do not collect or store your organisation’s name as a data field. Your work email address may incidentally identify your employer, but this information is never extracted, shared, or used for any purpose.

2.2 Test and Assessment Data

During and after calibration tests, we collect:

Your answers and confidence ratings for each question
Your scored results (Brier Score, Calibration, Discrimination, Accuracy)
Timestamp of test completion
Historical results over time

2.3 Payment Data

Payments are processed securely by Stripe. We do not receive or store your full card details. Stripe’s privacy policy applies to payment processing: stripe.com/gb/privacy.

2.4 Technical Data

We may collect standard technical data including IP address, browser type, and session data for security and service functionality purposes.

3. How We Use Your Data

We use your data for the following purposes:

Service delivery: To provide and manage your account and test access
Results: To calculate and display your calibration metrics and historical results
Team reporting: To share your results with your team manager where you are part of an organisational team account (see Section 6)
Benchmarking: To create aggregated, anonymised benchmarks by sport, profession, and industry (see Section 5)
Communications: To respond to your queries and provide support
Legal/financial obligations: To process payments and maintain financial records

4. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

Performance of a contract: to deliver the services you have purchased.
Legitimate interests: to improve our platform and methodology using anonymised, aggregated data; and to share results within your team account.
Legal obligation: to comply with financial and record-keeping requirements.

5. Benchmarking and Research Use

We use assessment data to build benchmarks across sports, professions, and industries. This use is strictly subject to the following conditions:

All data used for benchmarking is fully anonymised and aggregated before use.
No individual person will ever be identifiable from any published benchmark, statistic, or research output.
No organisation will ever be identifiable from any published benchmark, statistic, or research output.
Your individual results will never be published, shared, or used in any way that could identify you.

Example: a benchmark statistic such as “the average Brier Score for performance analysts in football is X” is derived from many users’ data and does not identify any individual or club.

6. Sharing Your Data With Your Manager

If you join the platform as part of an organisational team account, your individual results may be visible to the team manager(s) for that account. This is a standard feature of team accounts and enables organisations to monitor collective decision-making calibration.

Important: If you are joining via a team account, you should be aware that your manager may have access to your individual results. By completing registration and accepting these terms, you consent to this access. If you have questions about whether this applies to you, please contact your organisation or email us at allan@decisionmakinginsport.com before proceeding.

We will never share your individual data with any other third party, including other organisations, commercial partners, or research institutions, without your explicit written consent.

7. Data Storage and Security

Your data is hosted by 123 Reg Ltd (a UK-registered company), whose infrastructure includes servers in the United Kingdom and Amazon Web Services (AWS). Data may therefore be processed in or transferred to the United States as part of 123 Reg’s standard infrastructure. 123 Reg complies with applicable UK GDPR international transfer requirements, including the UK International Data Transfer Agreement where applicable.

We implement appropriate technical and organisational measures to protect your data, including:

Encrypted connections (HTTPS/SSL) across the platform
Password-protected account access
Encrypted password storage — passwords are hashed and cannot be read by us or any third party
Restricted admin access to personal data

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) within 72 hours of becoming aware, as required by UK GDPR.

8. Data Retention

We retain your personal data for as long as your account remains active. If you close your account, your personal data will be deleted or anonymised within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. payment records, typically 6–7 years).

Aggregated, anonymised data derived from your results may be retained indefinitely as it no longer constitutes personal data.

9. Automated Decision-Making

We do not use your data for automated decision-making or profiling that produces legal effects or similarly significant effects on you.

The calibration scoring on our platform is algorithmic, but it exists solely for your personal insight and professional development. It does not affect your legal rights, access to services, or any decision made about you by a third party.

10. Your Rights

Under UK GDPR, you have the following rights:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data (“right to be forgotten”), subject to legal obligations.
Right to restriction: to request that we limit how we process your data.
Right to data portability: to receive your data in a structured, machine-readable format.
Right to object: to object to processing based on legitimate interests.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email: allan@decisionmakinginsport.com

We will respond within one calendar month. In complex cases, we may extend this by a further two months and will inform you if this is necessary.

If you are not satisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: ico.org.uk | Phone: 0303 123 1113

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

11. Third-Party Services

We use the following third-party processors:

Stripe (payment processing) — stripe.com/gb/privacy
123 Reg / Amazon Web Services (hosting and infrastructure) — 123-reg.co.uk/legal/privacy-policy

We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.

12. Cookies

Our platform uses cookies necessary for account login and session management. We do not use tracking or advertising cookies.

Essential cookies used on this platform include:

Session management (keeping you logged in)
Security features

You can control cookies through your browser settings, however disabling essential cookies may prevent you from using certain features of the platform.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the platform. The “Last Updated” date at the top of this document reflects the most recent revision.

14. Contact

For any questions or concerns about this Privacy Policy or how we handle your data:

Email: allan@decisionmakinginsport.com

Website: www.decisionmakinginsport.com