Privacy policy

Who we are

High Goal Fantasy Polo (“High Goal”, “we”) is run by Northrule Ltd, United Kingdom. Northrule Ltd is the controller of the personal data described here. For anything about your data, email [email protected].

What we collect

• Your account: your name, email address and password, whether you have confirmed the email address, and which version of these terms and this policy you agreed to and when. We store only a secure hash of the password, never the password itself.
• Your game: your clubs, players, facilities, leagues and the actions you take in the game. Club activity is public by design and shown on your club's page with the time it happened.
• What you send or add: messages, profile claims, photos, descriptions and listings. A claim includes what you tell us to verify it and how to reach you; only admins see those, and we clear the contact details 90 days after the claim is decided or withdrawn. We remove the hidden details a photo file carries (such as where and when it was taken, and the camera) before we store it, and when you remove a photo we delete the file.
• Reports and contact messages: what you write, the page you came from, and the email address you type, if any. They are stored for our admins to work through and emailed to the team, and deleted after 12 months.
• The membership waitlist: the email address you give us, and your account if you were signed in.
• Payments (when membership opens): Stripe handles card details; we never see or store them. We keep a Stripe customer reference and your membership dates.
• Technical data: our hosting and security providers process IP addresses and request logs to deliver the site and protect it from abuse. We keep the IP address of sign-in, sign-up, password-reset, report and waitlist requests for up to 24 hours to limit repeated attempts, then delete it.

With your consent only, we use Google Analytics to understand how the site is used (pages visited, device type, rough location). We don't use advertising trackers, and we don't sell or share your data for marketing.

Why we use it

• To run your account and the game (performing our contract with you).
• To keep the site secure and working, and to prevent abuse (our legitimate interests).
• To understand how the site is used, with Google Analytics, only if you agree (your consent).
• To email you when membership opens, if you joined the waitlist (your consent; you can withdraw it at any time with the link in that email, or by emailing us).
• To take payment for membership and keep the records the law requires (contract and legal obligation).

Cookies

These cookies are needed for the site to work, so we don't ask for consent:

• hg_session keeps you signed in. It lasts up to 30 days, or until you sign out.
• hg-help remembers whether you have the help text switched on. It lasts a year.
• hg-consent remembers your cookie choice. It lasts a year.

Optional: if you accept analytics cookies, Google Analytics sets _ga cookies (up to two years) to tell visits apart. Nothing is loaded unless you click Accept, and you can change your mind any time with “Cookie settings” at the bottom of every page.

Who processes it for us

• Our hosting provider (a server in the European Union), where the site and database run.
• Cloudflare, which delivers and protects the site.
• Cloudflare R2, where encrypted backups are kept.
• Cloudflare Email Service, which sends our emails (account links, and reports to our team).
• Google, for analytics, only if you accept analytics cookies.
• Stripe, for membership payments, once membership opens.

Where a provider handles data outside the UK or EU, it does so under the standard contractual protections the law requires.

How long we keep it

We keep your account and game data while your account is open. You can delete your account from your account settings, or ask us to. It is erased 30 days later, so you can change your mind until then, except records we must keep by law (for example payment records). Erasing removes your name, email address, password, photos, profile content and claim details. Your clubs stay in their leagues as computer-managed clubs under a plain name, so league tables and past seasons stay whole, and messages you sent stay in the other person's conversation, shown as from a former owner. Backups roll off within six months. Waitlist emails are deleted once membership opens and we have told you, or sooner if you ask.

Your rights

Under UK and EU data protection law you can ask to see, correct, delete or take a copy of your data, and object to or restrict how we use it. You can download a copy of your data, change your email address and delete your account yourself in your account settings. For anything else, email [email protected]. If you are unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Players, teams and other real people

High Goal shows public sporting facts about real polo players, teams, grooms and ponies: names, results, titles and handicaps. If you are one of them and want a profile corrected or removed, email us or claim the profile from its page.

Changes

If we change this policy we will update the date at the top, list the change here, and tell account holders about significant changes on their next visit. See also our terms.

• 5 October 2026: account settings (download your data, change your email, delete your account), email confirmation, how long we keep claim contact details and reports, and Cloudflare Email Service added to the list of providers.
• 4 October 2026: first version.