Privacy Policy

How we collect, use, and protect your personal information when you use Sponsero.

Last updated: 12 May 2026 Sponsero Ltd, UK company no. 16667915

This Privacy Notice for Sponsero Ltd (doing business as Sponsero) ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at sponsero.ai or any website of ours that links to this Privacy Notice.
• Use Sponsero, the sponsorship marketplace that connects brands and businesses ("Sponsors") with athletes, sports clubs, sports venues, and sports media properties ("Sponsees") to enable sponsorship arrangements. Sponsero provides the marketplace technology, payment escrow, identity verification, AI-powered matching, and deal workspaces that allow Sponsors and Sponsees to discover each other, agree terms, execute sponsorship deals, and settle payments. Sponsero is not a party to any sponsorship deal formed through the platform.
• Engage with us in other related ways, including any marketing or events.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions, please contact us at info@sponsero.co.

Table of contents

1. What information we collect
2. How we process your information
3. Legal bases for processing
4. Sharing your information
5. Third-party websites
6. Cookies and tracking
7. AI-based products
8. International transfers
9. How long we keep information
10. How we keep information safe
11. Information from minors
12. Your privacy rights
13. Do-not-track features
14. US state privacy rights
15. Other regions
16. Updates to this notice
17. Contact us
18. Review, update, or delete your data

1. What information we collect

Personal information you disclose to us

In short: we collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Services, express an interest in obtaining information about our products and Services, participate in activities on the Services, or otherwise contact us.

The personal information we collect may include:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Job titles
• Usernames and passwords
• Contact preferences
• Authentication data
• Billing addresses
• Payment card details (processed by Stripe — see below)

Sensitive information. We do not process sensitive personal information.

Payment data. If you make a payment through the Services, we may collect data necessary to process it, such as your payment instrument number and security code. All payment data is handled and stored by Stripe. You can review Stripe's privacy notice at stripe.com/privacy.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

In short: some information — such as your IP address and browser characteristics — is collected automatically when you visit our Services.

This information does not reveal your specific identity but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. We use this to maintain the security and operation of our Services and for internal analytics.

The information we collect automatically includes:

• Log and usage data. Service-related, diagnostic, usage, and performance information our servers automatically collect, including timestamps, pages and features used, and error reports.
• Device data. Information about the computer, phone, tablet, or other device you use to access the Services, including IP address, device identifiers, browser type, hardware model, ISP, operating system, and system configuration.
• Location data. Approximate geographic location based on your IP address. You can disable this on your device, though it may affect parts of the Services.

Information collected from other sources

In short: we may collect limited data from public databases and other outside sources.

To enhance our ability to provide relevant services and update our records, we may obtain information about you from public databases, joint marketing partners, affiliate programs, data providers, and other third parties. This may include mailing addresses, job titles, email addresses, phone numbers, IP addresses, social media profiles, and similar.

2. How we process your information

In short: we process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for the following purposes:

• Account creation and authentication. So you can create and log in to your account and keep it in working order.
• Service delivery. To provide the marketplace, matching, escrow, and deal workspace functionality you've signed up for.
• Sponsor–Sponsee matching and recommendations. To surface relevant sponsorship opportunities, including through AI-powered recommendations based on profile information, listing data, and platform activity.
• Identity verification and payout processing. To verify user identity and process payouts through our regulated payment service provider and identity verification provider, including the secure transmission of identity and bank account information required to comply with applicable KYC, anti-money-laundering, and tax obligations.
• User-to-user communications. When you use any of our offerings that allow you to communicate with another user (for example, deal chat).
• Support and feedback. To respond to your inquiries, solve issues, and request feedback about your use of the Services.
• Administrative communications. To send you details about changes to our terms, policies, or service-related notifications.
• Service security and fraud prevention. To keep our Services safe and secure, including fraud monitoring and prevention.
• Enforcement of our Terms of Service. To investigate suspected breaches, including off-platform transactions that circumvent the marketplace, shill bidding, and other prohibited conduct.
• Improvement of AI-powered systems. To refine our matching and recommendation algorithms using aggregated, de-identified platform data. No automated decisions with legal or similarly significant effects are made using these systems.
• Legal claims and compliance. To retain records (such as deal terms, activation proof, and on-platform communications) that may be required to respond to legal inquiries, regulatory requests, or to establish, exercise, or defend legal claims.
• Vital interests. Where necessary to save or protect a person's vital interest, such as to prevent harm.

3. Legal bases for processing

In short: we only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.

If you are located in the EU or UK, the GDPR and UK GDPR require us to explain the legal bases we rely on:

• Consent. Where you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Performance of a contract. Where processing is necessary to provide the Services you've signed up for.
• Legitimate interests. Where we have a legitimate business interest that does not outweigh your rights — for example, to analyse how our Services are used, prevent fraud, and improve your experience.
• Legal obligations. Where processing is required to comply with the law (tax, AML, regulatory cooperation, court orders).
• Vital interests. Where processing is necessary to protect a person's vital interests.

4. Sharing your information

In short: we may share information in specific situations and with the categories of third parties listed below.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us. We have contracts in place with each of them to safeguard your personal information. They cannot use it for any purpose other than the one we instruct.

The categories of third parties we may share personal information with are:

• AI platforms (e.g. OpenAI)
• Payment processors (e.g. Stripe)
• Sales and marketing tools (e.g. CRM and outreach)
• Cloud computing services
• Communication and collaboration tools
• Data analytics services
• Data storage service providers
• Finance and accounting tools
• Performance monitoring tools
• User account registration and authentication services
• Website hosting service providers

We may also share your personal information in the following situations:

• Business transfers. In connection with any merger, sale of company assets, financing, or acquisition of all or part of our business.
• Affiliates. With our affiliates, who must honour this Privacy Notice.
• Business partners. Where necessary to offer you certain products, services, or promotions.
• Other users. When you share personal information publicly on the Services (for example, in your public sponsee profile), it may be viewed by all users.

5. Third-party websites

In short: we are not responsible for the safety of any information you share with third parties we link to.

The Services may link to third-party websites, online services, or mobile applications that are not affiliated with us. We do not make any guarantee regarding any such third parties and will not be liable for any loss or damage caused by their use. The inclusion of a link does not imply an endorsement.

6. Cookies and tracking

In short: we may use cookies and similar tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to gather information when you interact with our Services. Some technologies help us maintain security, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

7. AI-based products

In short: we offer products and features powered by artificial intelligence and machine learning.

As part of our Services we offer features powered by artificial intelligence, machine learning, or similar technologies (our "AI Products"), including sponsor–sponsee matching, AI-powered outreach assistance, and platform optimisation.

We provide these AI Products through third-party service providers ("AI Service Providers"), including OpenAI. Your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of the AI Products. You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

All personal information processed using our AI Products is handled in line with this Privacy Notice and our agreements with the AI Service Providers. No automated decisions with legal or similarly significant effects are made by these systems.

8. International transfers

In short: we may transfer, store, and process your information in countries other than your own.

Our servers and service providers operate in the United States, European Union, United Kingdom, and Ireland. Your information may be transferred to, stored, and processed in any of these locations.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, please be aware that these countries may not have data protection laws as comprehensive as those in your country. We will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.

European Commission's Standard Contractual Clauses. We use the European Commission's Standard Contractual Clauses for transfers of personal information between us and our third-party providers. These clauses require all recipients to protect personal information originating from the EEA or UK in accordance with European data protection laws. Our Standard Contractual Clauses can be provided upon request.

9. How long we keep information

In short: we keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, AML, or legal claims requirements). No purpose in this notice will require us to keep your personal information for longer than the period of time in which you have an account with us, plus any additional period required by law.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it. If this is not immediately possible (for example, because it is stored in backup archives), we will securely store the information and isolate it from further processing until deletion is possible.

10. How we keep information safe

In short: we aim to protect your personal information through organisational and technical security measures.

We have implemented appropriate technical and organisational security measures designed to protect any personal information we process. However, despite our safeguards, no electronic transmission or information storage technology can be guaranteed 100% secure. Although we will do our best to protect your personal information, transmission to and from our Services is at your own risk. You should access the Services only within a secure environment.

11. Information from minors

In short: we do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age (or the equivalent age as specified by law in your jurisdiction), nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18, or the parent or guardian of such a minor who consents to their use. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete the data from our records. If you become aware of any data we may have collected from a child under 18, please contact us at info@sponsero.co.

12. Your privacy rights

In short: depending on where you live, applicable law may give you rights to access, change, or delete your personal information.

In some regions (the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws, including:

• The right to request access and obtain a copy of your personal information
• The right to request rectification or erasure
• The right to restrict the processing of your personal information
• The right to data portability (where applicable)
• The right not to be subject to solely automated decision-making
• The right to object to processing in certain circumstances

You can make such a request by contacting us using the details in Section 17 below. We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or the UK data protection authority (the ICO). If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent

If we are relying on your consent to process your personal information, you have the right to withdraw it at any time by contacting us using the details in Section 17. This will not affect the lawfulness of processing before withdrawal, nor processing carried out on other lawful grounds.

Opting out of marketing

You can unsubscribe from our marketing emails at any time by clicking the unsubscribe link in any of our emails, or by contacting us. We may still send you service-related messages necessary to administer your account.

Account information

If you would like to review or change information in your account or terminate it, you can:

• Log in to your account settings and update your user account directly.
• Contact us using the details in Section 17.

On termination, we will deactivate or delete your account and information from our active databases. We may retain certain information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and comply with applicable legal requirements.

Cookies

Most web browsers are set to accept cookies by default. You can usually choose to set your browser to reject cookies, though this may affect parts of the Services.

If you have questions or comments about your privacy rights, you may email us at info@sponsero.co.

13. Do-not-track features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your privacy preference not to have data about your online browsing activities monitored. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals.

California law requires us to let you know how we respond to web browser DNT signals. Because there is currently no industry or legal standard for honouring DNT signals, we do not respond to them at this time.

14. US state privacy rights

In short: if you reside in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific privacy rights.

Categories of personal information we collect

The table below shows the categories of personal information we have collected in the past twelve (12) months.

We will use and retain the collected personal information as needed to provide the Services, or for as long as you have an account with us, plus any retention period required by law.

Sharing of personal information

We may disclose your personal information to our service providers under a written contract. We may use your personal information for our own business purposes, such as undertaking internal research for technological development. This is not considered to be "selling" of your personal information.

We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We have disclosed Categories A, B, and D to service providers for a business or commercial purpose in the preceding twelve (12) months.

Your rights

You have rights under certain US state data protection laws. These include:

• The right to know whether we are processing your personal data
• The right to access your personal data
• The right to correct inaccuracies in your personal data
• The right to request the deletion of your personal data
• The right to obtain a copy of the personal data you previously shared with us
• The right to non-discrimination for exercising your rights
• The right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects

Depending on your state, you may also have additional rights such as the right to obtain a list of third parties to which we have disclosed personal data, the right to limit use of sensitive personal data, and the right to appeal a decision.

How to exercise your rights

To exercise these rights, please email us at info@sponsero.co or submit a request via the contact details in Section 17. Upon receiving your request, we will need to verify your identity before we act on it.

Appeals

If we decline to act on your request, you may appeal our decision by emailing us at info@sponsero.co. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine the Light" law

California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes. If you are a California resident, please submit your request in writing using the contact details in Section 17.

15. Other regions

In short: you may have additional rights based on the country you reside in.

Australia and New Zealand

We collect and process your personal information in line with Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You have the right to request access to or correction of your personal information at any time using the details in Section 17. If you believe we are unlawfully processing your personal information, you may complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

Republic of South Africa

You have the right to request access to or correction of your personal information at any time using the details in Section 17. If you are unsatisfied with how we address a complaint, you can contact The Information Regulator (South Africa): general enquiries at enquiries@inforegulator.org.za and complaints at POPIAComplaints@inforegulator.org.za.

16. Updates to this notice

In short: yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. If we make material changes, we may notify you by prominently posting a notice or by directly contacting you. We encourage you to review this Privacy Notice periodically.

17. Contact us

If you have questions or comments about this notice, you may email us at info@sponsero.co or contact us by post:

Sponsero Ltd 86–90 Paul Street London EC2A 4NE England, United Kingdom

18. Review, update, or delete your data

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we hold about you, details of how we have processed it, correction of inaccuracies, or deletion. You may also have the right to withdraw your consent to our processing.

To submit a request, please email info@sponsero.co. We will respond within the timeframe required by applicable law.

© 2026 Sponsero Ltd. Company no. 16667915.