Privacy Policy
Effective date: 1 January 2026 · Version: 1.0
This Privacy Policy explains how FORCESCRIPTS LTD ("Company", "we", "us", "our") collects, uses, and protects personal data when you use the Basketball API service at live-basketball-api.com ("Service"). We are committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
FORCESCRIPTS LTD
Suite 10647, 5 Brayford Square, London, United Kingdom, E1 0SG
Email: [email protected]
2. Data We Collect
| Data | Source | Purpose |
|---|---|---|
| Name, email address | Account registration | Account management, billing, support |
| API key, usage logs | Automatically generated / API calls | Authentication, credit deduction, fraud prevention |
| Payment details | Stripe (not stored by us) | Processing credit purchases |
| IP address, browser type | Web server logs | Security, debugging, abuse prevention |
| Language preference | Cookie (bapi_lang) | Displaying the site in your preferred language |
We do not collect payment card numbers. All payment processing is handled by Stripe, Inc. under their own privacy policy.
3. Legal Basis for Processing
- Contract performance (Art. 6(1)(b) UK GDPR): processing necessary to provide the Service you have subscribed to.
- Legitimate interests (Art. 6(1)(f) UK GDPR): security monitoring, fraud detection, service improvement.
- Legal obligation (Art. 6(1)(c) UK GDPR): retention of transaction records for tax compliance.
- Consent (Art. 6(1)(a) UK GDPR): marketing emails, where you have opted in.
4. Cookies
We use the following cookies:
| Cookie | Type | Purpose | Expiry |
|---|---|---|---|
bapi_session | Strictly necessary | Maintains your login session | Session |
bapi_lang | Functional | Stores your language preference | 1 year |
We do not use advertising or tracking cookies. Strictly necessary cookies cannot be disabled as they are required for the Service to function.
5. How We Use Your Data
- Creating and managing your account.
- Processing credit purchases and deducting credits per API request.
- Sending transactional emails (account confirmation, low-credit alerts, purchase receipts).
- Detecting and preventing abuse, fraud, and security incidents.
- Complying with legal obligations (e.g. tax records).
We do not sell your personal data to third parties.
6. Data Sharing
We share personal data only with:
- Stripe, Inc. — payment processing (their privacy policy governs card data).
- Email service providers — transactional emails only.
- Hosting providers — server infrastructure (data processed within the UK/EEA or under appropriate safeguards).
- Law enforcement — when required by law or court order.
7. Data Retention
- Account data: retained for the lifetime of the account, plus 2 years after deletion.
- API logs (IP, endpoint, timestamp): retained for 90 days for security and abuse prevention.
- Transaction records: retained for 7 years for tax compliance (UK law).
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — request deletion of your data ("right to be forgotten"), subject to legal retention requirements.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to restrict processing — ask us to limit how we use your data in certain circumstances.
- Right to object — object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. International Transfers
If personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place (e.g. UK adequacy decisions or Standard Contractual Clauses).
10. Security
We implement industry-standard technical and organisational measures including TLS encryption in transit, hashed password storage (bcrypt), and access controls to protect your personal data against unauthorised access, loss, or disclosure.
11. Children
The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us for immediate deletion.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or a prominent website notice. Continued use of the Service following notice constitutes acceptance.
13. Contact
FORCESCRIPTS LTD — Data Controller
Suite 10647, 5 Brayford Square, London, United Kingdom, E1 0SG
Email: [email protected]