Privacy and cookie policy

Last updated: 15 October 2026

Who we are

PremarketPlay is a trading name of Linsbury Ltd, a company registered in England and Wales. Linsbury Ltd is the data controller responsible for personal data processed through PremarketPlay. You can contact us about privacy matters at [email protected].

What we collect

• Account data: name, email address, country (used to work out the VAT we must charge) and login details, stored by our membership system.
• Payment data: invoices and payment records. Card details are handled by our payment processor (Stripe); we never see or store full card numbers.
• Agreement records: which version of our terms, refund policy and risk disclosure you accepted, when, and from which IP address.
• Usage data: which Playbook pages members view and when, used to improve the product. We don't record IP addresses or browser details with it.
• Server logs: IP address, browser and request details, kept for security and troubleshooting.
• Emails: messages you send us, and records of the account emails we send you.

Why we use it (legal basis)

• To provide your subscription, take payments and send account emails: performance of our contract with you.
• To charge the right VAT for your country and keep invoices, payment and agreement records: legal obligation (tax and accounting) and our legitimate interest in being able to show what you agreed to.
• To keep the service secure, prevent abuse and improve the product (server logs, sign-up protection, usage data): our legitimate interests.
• Google Analytics: your consent, which you can withdraw at any time.

Who we share it with

We use service providers to operate PremarketPlay, including payment processing, hosting, transactional email, security and analytics. They process personal data only on our instructions:

• Stripe: payment processing.
• DigitalOcean: hosting. Our servers, including the membership system that manages accounts, run there.
• Cloudflare: website delivery, security and the sign-up anti-spam check.
• Postmark: transactional email (account, payment and service emails).
• Microsoft 365: our support mailbox.
• Google: Google Analytics, only if you accept analytics cookies.

Some of these providers process data outside the United Kingdom, including in the United States. Where they do, the transfer is protected by the UK's approved safeguards, such as the International Data Transfer Addendum or the UK-US data bridge. We also share data where the law requires it. We don't sell personal data.

How long we keep it

• Account, invoice, payment and agreement records: while you have an account, then 6 years after your last payment, which is how long we must keep accounting records and may need them for legal claims.
• Usage data: 365 days, then deleted automatically.
• Server logs: 14 days.
• Records of emails we send: about 45 days at our email provider. Copies of notices about changes to our terms are kept with your account records.
• Support emails: 2 years after the conversation ends.
• Google Analytics data: 14 months.

Cookies

We use essential cookies to keep you logged in and to protect sign-up from abuse. The site also stores, in your own browser, your colour scheme choice and which Playbook rows you have already seen, so it can mark new or changed ones. We don't use advertising cookies.

Analytics (optional). With your consent we use Google Analytics 4 to understand how visitors find and use the site (pages viewed, referring site, device type, approximate location). Google Analytics is disabled until you consent to analytics cookies. If you reject analytics, Google Analytics does not load and analytics data is not sent to Google. If you accept, Google Analytics sets cookies (_ga, _ga_*) that last up to 2 years. We don't send Google your name, email or account details. Your choice is stored in a pmp_consent cookie for 6 months; change it any time with "Cookie settings" at the bottom of every page. See Google's privacy policy.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have it corrected if it's wrong;
• have it erased;
• restrict how we use it;
• object to how we use it, where we rely on our legitimate interests;
• data portability: receive the data you gave us in a common machine-readable format, where applicable;
• withdraw your consent at any time where we rely on consent (for analytics, use "Cookie settings").

Some rights have limits; for example, we must keep accounting records for the period above even if you ask us to erase them. To use any of these rights, email [email protected]. We reply within one month.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk. We'd appreciate the chance to deal with your concern first.