RISE

Legal

Privacy Policy

Last updated: 9 July 2026

Your privacy matters to us. This policy explains what personal data we collect, why, on what legal basis, and what rights you have under the General Data Protection Regulation (GDPR).

1. Data controller

The controller of your data is [LEGAL ENTITY / COMPANY NAME], based at [ADDRESS], tax ID [TAX ID]. For any question about your data, contact us at [CONTACT EMAIL].

2. What data we collect

  • Account data: name and email address (via email sign-up or Google sign-in).
  • Athlete registration data: full name, nickname, date of birth, nationality, weight class, gym/team and fight record (wins–losses–draws).
  • Ticket purchase data, where applicable (reserved items and order status).
  • Minimal technical data needed to run and secure the site (e.g. your authentication session).

3. How we use your data

  • Manage your account and sign-in.
  • Process and review your athlete application for the event.
  • Manage ticket reservations and sales.
  • Communicate with you about your application, tickets or the event.
  • Comply with legal obligations and keep the platform secure.

4. Legal basis

We process your data based on your consent (given when you register), the performance of a contract (event participation or ticket purchase) and compliance with legal obligations. You may withdraw consent at any time, without affecting the lawfulness of prior processing.

5. How long we keep it

We keep your data only for as long as needed for the purposes above or as required by law. When no longer needed, it is deleted or anonymised.

6. Who we share it with

  • Supabase — database hosting and authentication.
  • Google — sign-in through your Google account (optional).
  • Vercel — website hosting and delivery.
  • We do not sell your personal data to third parties.

7. Your rights

  • Access your data and obtain a copy.
  • Rectify inaccurate or incomplete data.
  • Request erasure of your data (right to be forgotten).
  • Restrict or object to certain processing.
  • Data portability.
  • Withdraw consent at any time.

8. Cookies

We use only strictly necessary cookies to run the site, namely to keep you signed in. We do not use advertising or third-party tracking cookies.

9. Contact and complaints

To exercise your rights or ask questions, contact us at [CONTACT EMAIL]. You also have the right to lodge a complaint with the competent supervisory authority — in Portugal, the National Data Protection Commission (CNPD), at www.cnpd.pt.

Note: this text is a template. Replace the bracketed fields ([LEGAL ENTITY], [ADDRESS], [TAX ID], [CONTACT EMAIL]) with the real entity details before the official launch. Review by a lawyer is recommended.