Privacy Policy

1. Who is responsible for your data

7th Hill, trading as MyT20Team, is the data controller for personal data processed through myt20team.com and the MyT20Team service.

48 Subbaiah Gowder Nagar
Thondamuthur Road, Vadavalli
Coimbatore, Tamil Nadu 641041
India
Privacy contact: privacy@myt20team.com

2. What we collect

Data	Why we have it
Name and email address	To create your account, sign you in, and send service emails such as match results, invites and receipts.
Password (stored only as a secure hash)	To keep your account yours.
Game data — teams, crests, squads, matches, tournaments, standings, chat messages	It is the product. Without it there is no team to come back to.
Subscription status and plan	To give you the right access and match allowance.
Billing country and the last four digits and type of card	Passed to us by our payment provider so we can support you and apply the right currency and tax. We never receive or store full card numbers.
Technical data — IP address, browser and device type, pages visited, error logs	To keep the service secure, diagnose faults, understand what is being used, and work out which country you are in so the pricing page shows the right currency. The country lookup happens as the page is served and is not stored.
Messages you send us	To answer you, and to keep a record of what was agreed.

We do not collect special-category data, we do not track you across other websites, and we do not buy personal data from third parties.

3. Why we are allowed to use it

Where the UK/EU GDPR applies, our lawful bases are:

• Contract — running your account, your matches and your subscription.
• Legitimate interests — keeping the service secure, preventing abuse and fraud, fixing faults, and understanding aggregate usage.
• Legal obligation — tax and accounting records.
• Consent — optional marketing email and any non-essential cookies. You can withdraw consent at any time.

Where India's Digital Personal Data Protection Act, 2023 applies, we process your data on the basis of the consent you give when you create your account and subscribe, and for the legitimate uses that Act permits.

4. Who we share it with

We share personal data only with the providers who help us run the service:

Who	What for
Paddle.com Market Ltd (Paddle)	Merchant of Record — takes payment, calculates tax, issues invoices and handles billing queries. Paddle is a separate controller for the payment data you give it. See Paddle's privacy policy.
Cloudflare, Inc.	Hosting, DNS, security and delivery of this website. Processes technical data such as IP addresses to serve and protect the site.
Our email provider	Sending account, match and receipt emails, and receiving your messages to us.
Our application hosting and database provider	Running the game and storing your account and game data.

We may also disclose data where the law requires it, or to establish or defend legal claims. We do not sell your personal data, and we do not share it for advertising.

Other managers can see your public profile: your display name, your teams, their crests, your results and standings, and any messages you send in match or tournament chat. Your email address is never shown to other users.

5. International transfers

Our providers operate globally, so your data may be processed outside the country you live in, including in the United Kingdom, the European Economic Area, the United States and India. Where data leaves the UK or EEA, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

• Account and game data — while your account is open, and for 12 months after a subscription ends so you can pick up where you left off. Then deleted or anonymised.
• Billing and tax records — as long as tax law requires, typically 6–8 years.
• Support emails — 24 months.
• Server and security logs — up to 12 months.

Ask us to delete your account sooner and we will, subject only to records we must keep by law.

7. Your rights

Depending on where you live, you have the right to:

• get a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• object to or restrict certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting what was done before;
• nominate someone to exercise these rights on your behalf in the event of death or incapacity (DPDP Act, India).

Email privacy@myt20team.com and we will respond within 30 days. There is no charge.

If you are unhappy with how we have handled your data you can complain to your data protection authority — the Information Commissioner's Office in the UK, your national supervisory authority in the EEA, or the Data Protection Board of India.

8. Security

Traffic is encrypted with TLS. Passwords are stored only as salted hashes. Access to production systems is limited to those who need it and protected by multi-factor authentication. Card details never touch our systems — they go directly to our payment provider. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant regulator as the law requires.

9. Children

MyT20Team is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has given us personal data, email privacy@myt20team.com and we will delete it.

10. Cookies

This marketing website sets no cookies of its own and stores nothing on your device. The game itself uses one strictly necessary cookie to keep you signed in. Details are in our Cookie Policy.

11. Changes to this policy

If we change how we handle personal data we will update this page and, where the change is significant, email subscribers. The date at the top shows when it was last updated.

12. Contact

7th Hill, trading as MyT20Team
48 Subbaiah Gowder Nagar
Thondamuthur Road, Vadavalli
Coimbatore, Tamil Nadu 641041
India
privacy@myt20team.com