Privacy Policy & Data Protection

Privacy Policy & Data Protection

Your Privacy Matters

At ChampsBase, we value your trust and take data protection seriously. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you interact with our websites and services. It applies globally and follows major privacy standards, including the EU and UK GDPR, Nigeria’s NDPR, Brazil’s LGPD, South Africa’s POPIA, Canada’s PIPEDA, and California’s CPRA. Our goal is to ensure transparency and give you full control over your data and cookie preferences.

Last updated: October 24, 2025 - Version 1.0

This policy explains how ChampsBase collects, uses, shares, and protects your data when you use our websites (across all languages).

It is intended for an international audience and reflects key data protection laws (EU GDPR, UK GDPR, ePrivacy, NDPR/Nigeria, LGPD/Brazil, POPIA/South Africa, PIPEDA/Canada, CPRA/California, etc.).

By “personal data,” we mean any information that identifies you directly or indirectly. ChampsBase acts as the data controller for the operations described below.

We have not appointed a mandatory DPO at this stage; for any questions, write to hello@champsbase.com.

Data Collected and Sources

We collect:

  • Data you provide (e.g., your email and message via the contact form).
  • Data generated by browsing (technical logs, audience measurement cookies, consent preferences, affiliate cookie IDs where accepted).
  • Support-related data (email exchanges).
  • Affiliate data (aggregated events signaling that an account was created at a partner site - without sharing your banking details).

Sources: forms on our sites, analytics tools (with truncated/anonymized IPs when possible), email, anti-spam/anti-abuse systems.
We do not collect “sensitive” data categories under applicable laws.

We process your data only for:

  • Handling contact and requests (contact, media, partnership) → contractual/pre-contractual necessity and/or legitimate interest in responding.
  • Improving the site, usage insights, abuse prevention (aggregated stats, security, anti-spam) → legitimate interest and, for non-essential cookies, your consent via the banner.
  • Affiliate attribution (crediting ChampsBase when an account is created through our links) → legitimate interest and consent for affiliate cookies; see our Affiliation page.
  • Legal compliance (meeting obligations, managing data subject rights, preserving evidence) → legal obligation and/or legitimate interest.

We do not sell personal data and do not build individual marketing profiles.

Cookies and Analytics

We use:

  • Strictly necessary cookies (security, consent, server load).
  • Analytics cookies (aggregated audience measurement, minimized/anonymized where possible).
  • Affiliate cookies (to attribute account creation with your consent).

On your first visit, a banner allows you to accept, refuse, or customize non-essential trackers. You can withdraw consent anytime via the “Manage Cookies” link in the footer or by deleting cookies in your browser settings.

Sharing and Processors

We rely on service providers for hosting, security, analytics, email delivery, anti-spam/anti-fraud, and cookie consent management.

They act only under ChampsBase’s instructions, are bound by Data Processing Agreements (DPAs), and provide adequate safeguards.

Where data is transferred outside your jurisdiction (e.g., outside EU/EEA), we rely on recognized mechanisms (EU Standard Contractual Clauses, supplementary measures, or local equivalents).

Data Retention

We keep data only as long as necessary for its purpose, then delete or anonymize it.

Data Type

Retention (indicative)

Main Legal Basis

Contact messages / emails

Up to 24 months after last interaction

Contract / Legitimate interest

Technical logs (security/abuse)

Max. 12 months

Legitimate interest

Cookie consent records

6–12 months (depending on tool)

ePrivacy obligation / Consent

Aggregated analytics (no direct ID)

25 months (default setting)

Legitimate interest / Consent

Affiliate cookies

30–90 days (partner-dependent)

Legitimate interest / Consent

Data subject rights records

Up to 5 years

Legal obligation

Retention may vary under local laws. ChampsBase always applies data minimization.

Security

We implement reasonable technical and organizational measures: TLS encryption in transit, strict access controls, logging and environment segmentation, backups, and periodic access reviews.

Access to data is limited to authorized staff bound by confidentiality.

No measure is infallible - we maintain incident response procedures and, if required, notify authorities and affected individuals.

Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access, rectification, deletion, restriction, portability, and objection.
  • Withdraw consent at any time for consent-based processing (without affecting past lawfulness).

Some laws (e.g., CPRA) grant additional rights such as opting out of “sharing” for targeted advertising - ChampsBase does not engage in such practices.

📩 To exercise rights: email hello@champsbase.com (identity verification may be required).

📌 You may also lodge a complaint with your local authority (CNIL in France, ICO in the UK, OPC in Canada, ANPD in Brazil, etc.).

Minors

Our sites and content are not intended for minors. Access requires compliance with the legal gambling age in each country.

If you believe a minor has provided us with data, contact us - we will delete it after verification.

Policy Updates

We may update this policy to reflect legal or technical changes.

The date/version at the top of the page is authoritative. Significant changes will be communicated appropriately (banner, page notice).

Contact

For GDPR or other data protection matters: hello@champsbase.com.
Alternatively, use our Contact page.

Reminder: you can adjust cookie preferences anytime via the “Manage Cookies” link in the footer.