PRIVACY POLICY

1. Who We Are

The IBB10 Show website and podcast are owned and operated by Dugout AI Ltd, a company registered in England and Wales.

As the data controller, Dugout AI Ltd determines the purposes and means of processing your personal data. If you have any questions about how we handle your data, please contact us using the details above.

2. What Data We Collect

We only collect personal data that is necessary for the purposes described in this policy. The types of data we may collect include:

Data You Provide Directly

• Name — when you submit a question or sign up for our newsletter
• Email address — when you sign up for our newsletter
• Football club affiliation — optionally provided when submitting questions
• Social media handle — optionally provided when submitting questions
• Questions and messages — content you submit via our question form

Data Collected Automatically

• IP address — collected by our hosting provider (Bluehost) for security purposes
• Browser type and device information — collected via standard web server logs
• Pages visited and time spent — via standard server analytics
• Referring website — how you arrived at our site

Data From Third-Party Services

• Podcast listening data — collected by Acast when you listen to our podcast
• YouTube viewing data — collected by YouTube/Google when you watch our videos
• RSS feed data — basic access logs when our podcast feed is fetched

3. How We Use Your Data

We use your personal data for the following purposes:

• To send you our weekly newsletter with IBB10 Show updates, results and news (with your consent)
• To read out or respond to questions you submit for the live show
• To give you a shout-out on air if you provide your social handle
• To improve our website and understand how visitors use it
• To comply with legal obligations
• To protect the security of our website and services

We will never use your data for automated decision-making or profiling that has a significant effect on you.

4. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. Our legal bases are:

Consent (Article 6(1)(a))

We process your email address and name for newsletter purposes based on your consent. You can withdraw consent at any time by unsubscribing from our newsletter or contacting us directly.

Legitimate Interests (Article 6(1)(f))

We process basic website usage data and question submissions based on our legitimate interests in operating the IBB10 Show and engaging with our audience. We have assessed that this processing does not override your rights and freedoms.

Legal Obligation (Article 6(1)(c))

We may process data where required to comply with a legal obligation, such as responding to a lawful request from a regulatory authority.

5. Who We Share Data With

We do not sell your personal data. We may share data with the following third parties only where necessary:

Hosting & Infrastructure

• Bluehost — our website hosting provider, based in the USA (covered by appropriate safeguards)

Podcast & Content Platforms

• Acast — our podcast hosting platform, which collects listener analytics
• YouTube / Google — video hosting and streaming
• Spotify & Apple Podcasts — podcast distribution platforms

Email Services

• Titan Email (via Bluehost) — our email provider for receiving contact form submissions

Legal Requirements

We may disclose your data if required to do so by law, court order, or in response to a legitimate request from law enforcement or regulatory authorities.

All third parties are required to handle your data in compliance with applicable data protection laws.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes it was collected:

• Newsletter subscribers — until you unsubscribe or request deletion
• Question submissions — for up to 12 months after submission, or until the relevant show episode has aired
• Website server logs — typically 30–90 days as determined by our hosting provider
• Email correspondence — for up to 2 years for business record purposes

After the relevant retention period, data is securely deleted or anonymised.

7. Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you (Subject Access Request).

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure ("Right to be Forgotten")

You have the right to request that we delete your personal data in certain circumstances, such as where the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used and machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection supervisory authority:

8. Cookies

Our website uses minimal cookies. The types of cookies we use include:

Essential Cookies

These are necessary for the website to function and cannot be switched off. They do not store personally identifiable information.

Third-Party Cookies

Third-party services embedded on our site (such as YouTube video players and the Acast podcast player) may set their own cookies. These are governed by the respective third parties' cookie and privacy policies:

• Google / YouTube Privacy Policy
• Acast Privacy Policy

You can control and manage cookies through your browser settings. Please note that disabling cookies may affect the functionality of some parts of our website.

9. Third-Party Services

Our website contains links to and embeds from third-party services. We are not responsible for the privacy practices of these services. We encourage you to read their privacy policies:

• YouTube / Google — policies.google.com/privacy
• Acast — acast.com/en/privacy
• Spotify — spotify.com privacy policy
• X (Twitter) — twitter.com/en/privacy
• Broadwater Sports — for our shop at broadwatersports.co.uk
• In The Dugout App — dugout-ai.com

10. Children's Privacy

Our website and podcast are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately at lee@ibb10.com and we will delete the data promptly.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory or operational reasons. When we make significant changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns or requests regarding this privacy policy or how we handle your personal data, please contact us: