Thank you for visiting our website, mobile application, or event. Your privacy is important to us, and this privacy policy (“Privacy Policy”) explains how the PSA Group (“we“, “us“, or “our“) collects, processes and protects your personal information across our family of organisations and services.
We provide this Privacy Policy explaining our practices as a controller and the choices you can make about the way we collect and use your personal information to provide our products and services, including any and all websites, mobile applications, our events or other entertainment experiences, or any other electronic and/or digital products and/or services that are made available by us (each a “Service” and together the “Services”).
“Users” are persons, including you, that use or attend the Services. Please take the time to read the full Privacy Policy.
We are committed to handling personal data of Users in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (“EU GDPR”).
If you are located in the European Economic Area (EEA), references to UK GDPR should be read as EU GDPR where applicable.
1.1 Who We Are
The PSA Group consists of:
- Professional Squash Association (“PSA”) – our membership organisation responsible for running the PSA Squash Tour, publishing the weekly PSA World Rankings and operating World Squash Officiating (“WSO”).
- Squash Media & Marketing Limited – our commercial trading entity operating PSA events, SQUASHTV, PSA Website & App, Squash Player Magazine, PSA Squash Store, event ticketing platforms and other activities.
- Squash United Foundation – our charitable foundation.
For the purposes of data protection law, these entities may act as independent controllers or joint controllers depending on the processing activity involved.
Data Protection Officer (DPO):
Responsible person: Julie Shimmin
Advisors: Data Protection People
Email: dataprotection@psasquashtour.com
1.2 Joint Controller Arrangement
Where we jointly determine the purposes and means of processing personal data of Users, for the purpose of the creation of a Fan Profile (“Single Fan View”), we act as joint controllers under Article 26 UK GDPR.
We have entered into a joint controller arrangement which allocates responsibilities for:
- Responding to data subject rights requests
- Providing transparency information
- Maintaining data security
- Managing personal data breaches
- Ensuring lawful processing
You may exercise your data protection rights with any of our entities, and we will coordinate internally to ensure your request is handled appropriately.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal data when you:
- Create an account or membership
- Subscribe to Services or purchase products (including but not limited to SQUASHTV subscriptions, WSO courses, merchandise, and event tickets)
- Use SQUASHTV or our digital platforms
- Register for our events
- Contact customer support
- Sign up for newsletters or marketing
- Participate in surveys or promotions
This may include:
- Name, email address, postal address, telephone number
- Payment and billing information
- Username and password
- Demographic information (such as age and gender)
- Communication preferences
- Member or subscriber ID
- Purchase history
- Viewing history and content interactions
2.2 Information from Third Parties
We may receive personal data from:
- Analytics providers such as Google Analytics and Data Talks
- Marketing platforms such as Meta Ads and Google Ads
- Social media platforms (where you connect accounts)
- Publicly available sources
2.3 Obligation to Provide Personal Data and Consequences of Not Providing It
You are not under a statutory obligation to provide us with your personal data. However, in certain circumstances, you may be under a contractual obligation to provide personal data in order for us to fulfil our contract with you. For example:
- To create an account, subscribe to services, or purchase tickets or merchandise, we require certain information (such as your name, email address, payment details, and delivery address where applicable). Without this information, we will be unable to process your order or provide you with the requested service.
- To access SQUASHTV or other subscription-based services, we require account registration details. Without this information, we cannot grant you access to these services.
- To attend PSA events, we may require certain information for ticketing, security, or event management purposes. Without this information, we may be unable to admit you to the event.
Where the provision of personal data is marked as mandatory (for example, with an asterisk (*) in our forms), failure to provide such data will mean we cannot fulfil the relevant contract or provide the service you have requested. Where the provision of personal data is optional, you are free not to provide it, but this may limit the personalization or functionality of our services. You may also exercise your right to erasure (deletion) at any time (see Section 7), though this may similarly affect our ability to continue providing services to you.
3. How We Use Your Information
We only process your personal data where we have a lawful basis to do so.
3.1 Service Delivery (Contract Performance)
We process your personal data to:
- Provide subscriptions and memberships
- Deliver digital and physical products
- Process payments
- Provide customer support
- Send essential service communications
Legal basis: Article 6(1)(b) UK GDPR – Contract performance.
3.2 Unified Profile (“Single Fan View”) and Profiling
We create a unified profile combining your interactions across our platforms and entities to:
- Provide seamless cross-platform access
- Personalise your experience
- Recommend relevant content
- Improve our Services
- Analyse engagement trends
This involves analysing data such as:
- Viewing history
- Purchase history
- Event participation
- Marketing preferences
- Platform interactions
Legal basis:
- Legitimate interests (Article 6(1)(f)) — to improve and personalise services
- Consent — where required for personalised marketing
Where we rely on legitimate interests, we have conducted a Legitimate Interests Assessment (“LIA”) to ensure our interests are not overridden by your rights and freedoms.
3.3 Marketing Communications
We will only send you marketing communications where:
- You have given consent; or
- We are permitted to do so under applicable electronic marketing laws (such as the Privacy and Electronic Communications Regulations (“PECR”)).
You can manage your preferences at any time by:
- Clicking “unsubscribe” in any marketing email
- Updating your account settings
- Contacting customerservices@psasquashtour.com
Withdrawing consent does not affect prior lawful processing.
3.4 Legitimate Interests Processing
We rely on legitimate interests for:
- Service improvement
- Analytics
- Fraud prevention
- Security monitoring
- Business administration
We ensure such processing is necessary and proportionate.
3.5 Automated Decision-Making
We do not make automated decisions about you. This means we do not use computer systems to make decisions about you without any human involvement that would legally affect you or have a significant impact on you.
While we use technology for everyday tasks — such as sending emails, processing payments, or suggesting content you might enjoy on SQUASHTV — these are not decisions that affect your rights or access to our services.
If this ever changes, we will update this Privacy Policy and seek your permission where required by law.
4. How We Share Your Information
We may share your personal data with:
- PSA Group entities (under our joint controller arrangement)
- Service providers acting as data processors
- Legal authorities (where required by law)
- Third parties and partners where you have explicitly consented
All processors are subject to Data Processing Agreements compliant with Article 28 UK GDPR.
4.1 Service Providers
We share information with trusted third parties who provide services on our behalf, including:
- Payment processing: Stripe
- Customer Data Platform and email delivery: Data Talks
- Cloud hosting: Amazon Web Services (AWS), Fly.io, Data Talks
- Analytics: Google Analytics
- Customer support: Zendesk
- Website and app development: PT Sport Suite
- Fulfilment and shipping: Source Lab
- Video streaming: Dailymotion
These providers are contractually obligated to protect your data and use it only for specified purposes.
5. International Data Transfers
Your personal data may be transferred outside the United Kingdom (“UK”) or European Economic Area (“EEA”).
Where this occurs, we rely on appropriate safeguards, including:
- The UK International Data Transfer Agreement (“IDTA”)
- The UK Addendum to EU Standard Contractual Clauses
- EU Standard Contractual Clauses (where applicable)
- UK adequacy regulations
- The UK–US Data Bridge (where applicable)
We ensure transferred data is protected by appropriate technical and organisational measures.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements.
Once retention periods expire, data is securely deleted or anonymised.
7. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure
- Restrict processing
- Data portability
- Object to legitimate interest processing
- Withdraw consent
- Not be subject to solely automated decision-making
To exercise your rights, contact: dataprotection@psasquashtour.com. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner’s Office.
8. Data Security
We implement appropriate technical and organisational measures, including:
- Encryption in transit and at rest
- Access controls
- Security monitoring
- Staff confidentiality obligations
- PCI-DSS compliant payment processing
- Regular security assessments
9. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential functionality
- Performance analytics
- Functional enhancements
- Personalised advertising
Except for strictly necessary cookies, we will not place cookies on your device unless you provide consent via our Cookie Preference Centre.
You may withdraw consent at any time by revisiting the Cookie Preference Centre.
Analytics and advertising cookies are activated only after consent.
11. Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated by:
- Updating the “Last Updated” date
- Posting prominent notices on our websites
- Sending email notification where appropriate
13. Contact Us
Data Protection Officer
dataprotection@psasquashtour.com
You may lodge complaints with: Information Commissioner’s Office
Website: https://ico.org.uk