you're the star

← You're the Star

League Admin Data Responsibility Terms

Version 1.1 — in force since 13 July 2026

This section of the platform's Terms of Service governs how personal data — including

player names, pitch statistics, and weight-loss/weight-management scores — is collected,

displayed, and shared by leagues using the platform, and who is responsible for ensuring

that data is processed lawfully.

The Platform (operator of You're the Star, yourethestar.co.uk) acts as a data processor. The Platform

provides the technical infrastructure to store and display data that League Admins choose

to enter, and does not decide what data is collected about players or how it is used

beyond the platform's core functionality.

The League Admin (the individual or organisation registering and administering a

league on the platform) acts as the data controller for all personal data relating to

that league's players, including any weight-loss or weight-management scores. The League

Admin decides what is collected, why, and how it is shared (including on social media).

By registering a league and adding players, the League Admin confirms and agrees that they will:

Obtain explicit, informed, opt-in consent from each player before that player's name,

pitch statistics, or weight-related score is entered onto the platform. Consent must:

Be a clear affirmative action (not a bundled or default-checked box)

Specifically describe what will be shown (e.g. "your name and weekly weight-loss score

will be visible to other league members on the You're the Star leaderboard")

Be requested separately for any use in public social media posts, since this is a

materially different and broader use than an in-app leaderboard

Be capable of being withdrawn at any time

Retain their own evidence of that consent (e.g. a signed form, a ticked box on their own

sign-up system, a recorded verbal confirmation with a timestamp and witness) for as long

as the player's data remains on the platform, and for a reasonable period afterward.

Action a player's withdrawal of consent promptly — including removing them from public

displays on the platform and refraining from further social media use of their data.

Only enter the minimum data necessary — the Platform does not accept, and the League Admin

agrees not to attempt to enter, raw weight figures, medical information, or other special

category data beyond the derived score fields the platform provides for.

Provide the Platform with evidence of consent within a reasonable timeframe (e.g. 5

business days) if requested — for example, in response to a complaint from a player or a

regulatory enquiry.

Each time a League Admin adds a new player, or edits a player's consent-relevant settings

(display visibility, social media flag), the platform requires an explicit, timestamped

attestation before the change takes effect:

> "I confirm that [Player Name] has given explicit, informed consent for their name and

> scores to be displayed on this platform [and used in social media posts, if toggled],

> and that I hold evidence of this consent. I understand that [League Name] is the data

> controller responsible for this consent, not the Platform."

This attestation is logged against the admin's account with a timestamp and cannot be

retroactively edited — only superseded by a new attestation. This creates the practical

audit trail that supports Section 3 and Section 6 below.

The League Admin agrees to indemnify and hold harmless the Platform operator against any

claims, complaints, regulatory action, fines, or losses arising from the League Admin's

failure to obtain or maintain valid consent as described in Section 3, or from the League

Admin entering data beyond what Section 3(4) permits.

The Platform reserves the right to:

Request evidence of consent for any player at any time, particularly following a complaint

Suspend display of a player's data, or a League's account entirely, pending resolution if

there is reasonable cause to believe consent was not properly obtained

Terminate a League Admin's account for repeated or serious non-compliance with Section 3

Where a player (or former player) submits a subject access, rectification, or erasure

request, the Platform will direct them to the relevant League Admin as the data controller

in the first instance, and will provide reasonable technical assistance to the League Admin

in fulfilling the request within 7 calendar days of being notified.

This 7-day internal window is deliberately shorter than the one-month statutory

deadline the League Admin (as controller) has under UK GDPR Art. 12(3), so the

League Admin has time to review the Platform's output and respond to the data

subject within their own deadline.

Independent of the above allocation, the Platform commits to baseline processor obligations:

Never storing raw weight figures — only the derived score

Appropriate technical security measures for all personal data, with enhanced measures

given the special category nature of weight-related scores

A written Data Processing Agreement (see the separate DPA document), which

the League Admin enters into on accepting these terms

Not using league or player data for any purpose beyond operating the platform, without

separate agreement