mysa

Privacy Policy

Last updated: 15 October 2025

1. Introduction

This Privacy Policy explains how Mysa Digital ("we", "our", or "us") collects, uses, stores, and protects personal data obtained through mysa-digital.com, pondera.live, and any related services or applications (collectively, "our platforms").

By accessing or using our platforms, you agree to the terms of this Privacy Policy.

2. Data Controller

Mysa Digital
48 Providence, CM0 8JU, United Kingdom
Email: privacy@mysa-digital.com

Mysa Digital is the data controller responsible for determining the purposes and means of processing personal data collected via our platforms.

3. Data We Collect

We may collect and process the following categories of data:

  • Personal Identification Data: Name, email address, contact information, and account details.
  • Transactional Data: Payment information processed through Stripe, including limited billing details.
  • Usage Data: Information on how you access and interact with our platforms (including IP address, browser type, and pages visited).
  • Technical Data: Cookies, local storage data, and device identifiers used for analytics and functionality.
  • User-Generated Content: Any text, images, quiz entries, or media submitted via our platforms.

4. How We Collect Data

We collect data through:

  • Account registration and login forms
  • Contact forms and email communications
  • Payments processed via Stripe
  • Analytics via Google Analytics
  • Email marketing through SendGrid and Mailchimp
  • Cookies and similar technologies used for analytics and to store user preferences (such as player names on Pondera)

Users are presented with a banner allowing them to consent to or decline cookies.

5. How We Use Personal Data

Your data is used for the following purposes:

  • To operate and improve our platforms and services
  • To manage user accounts and authentication
  • To process payments, subscriptions, and renewals
  • To communicate with users, including service updates and marketing (where consented)
  • To provide technical support and respond to enquiries
  • To analyse usage and performance of our platforms

6. Legal Basis for Processing

We process personal data under the following lawful bases:

  • Consent (e.g. marketing emails, cookie usage)
  • Performance of a contract (e.g. managing subscriptions or user accounts)
  • Legal obligations (e.g. accounting and record keeping)
  • Legitimate interests (e.g. improving our services, ensuring security)

7. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected. Inactive accounts are permanently deleted after two (2) years of inactivity.

If a user requests deletion, their data will be permanently removed within 30 days following confirmation of their request.

8. Data Sharing and Third Parties

We may share limited personal data with trusted third parties who assist us in providing our services, including:

  • Google Analytics – website analytics and performance tracking
  • SendGrid and Mailchimp – email communication and marketing distribution
  • Stripe – payment processing

All third-party providers are contractually obligated to handle personal data securely and in compliance with applicable laws.

We do not sell or rent personal data to any third party.

9. International Data Transfers

Although Mysa Digital primarily operates within the United Kingdom, some of our third-party service providers may process data in other jurisdictions. Where applicable, we ensure appropriate safeguards are in place in line with the UK GDPR, such as Standard Contractual Clauses.

10. Cookies

Our platforms use cookies and similar technologies for analytics and functional purposes. Users may choose to accept or decline non-essential cookies via the on-screen cookie banner.

Details on cookie categories:

  • Essential cookies: Required for site functionality (cannot be disabled).
  • Analytics cookies: Used to improve performance and user experience.
  • Preference cookies: Store user settings, such as player names on Pondera.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encryption, secure hosting, and access controls. While we strive to ensure full security, no system is entirely immune to unauthorised access or misuse.

12. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

You may exercise these rights by contacting privacy@mysa-digital.com.

13. Children's Privacy

Our platforms are intended for users aged 13 years and above. We do not knowingly collect personal data from children under 13. If such data is discovered, it will be deleted immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates the most recent revision. Continued use of our platforms after updates constitutes acceptance of the revised policy.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

Email: privacy@mysa-digital.com
Address: Mysa Digital, 48 Providence, CM0 8JU, United Kingdom

For information about our Terms and Conditions, please see our Terms of Service.