Privacy policy

1) Who we are (Data Controller)

This website is operated by [Pro Climbing League Ltd] (“PCL”, “we”, “us”, “our”).

Registered address: Langsdown DFK, Clifton House, Bunnian Place, Basingstoke, RG21 7JE

Contact (privacy): info@proclimbingleague.com.

Data Protection Officer (DPO): We have not appointed a DPO.

2) What this policy covers

This policy explains what personal data we collect on this website, how and why we use it, who we share it with, how long we keep it, and your privacy rights under the UK GDPR and EU GDPR (together, “data protection law”).

3) The data we collect

a) Data you provide

Newsletter sign-up: name (optional), email address, preferences.

Forms (contact, partners, gyms, press accreditation): name, email, role/organisation, location, message, and any other information you choose to provide.

Downloads/registrations: name, email, company, job title where relevant.

b) Data collected automatically

Technical data: IP address, device and browser type, operating system, pages viewed, referring site/UTM parameters, and timestamps.

Cookies/trackers: See our Cookie Policy and Cookie Preferences link in the footer for details and controls.

We do not collect special category data (e.g., health/biometric data) via the website. If our events display athlete biometrics as part of the broadcast, that data does not come from this website.

4) Why we use your data and our lawful bases

  • Run and secure the website
  • Respond to enquiries
  • Send newsletters and updates
  • Analytics and improvement
  • Legal and regulatory

5) Who we share your data with (processors/recipients)

We use trusted service providers to operate the site. They process personal data on our instruction

Hosting/CDN: [Vercel/Webflow/Cloudflare/Other] (website hosting, delivery, security).

Email & CRM: [Mailchimp/Klaviyo] (newsletter and mailing lists).

Forms & storage: [Native forms / Typeform / Google Workspace / Airtable].

Analytics: [Plausible/Matomo] (privacy-centric analytics).

Anti-spam/bot protection: [hCaptcha/Cloudflare Turnstile].

Media delivery: [Cloudinary/Webflow CDN].

Ticketing: [Kaboodle] (you may be redirected to their site—your data will be processed under their privacy policy).

We have data processing agreements in place with our processors. We may also share data where required by law or to protect our rights, users, or the public.

6) International data transfers

If we transfer your data outside the UK/EU/EEA, we use appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and/or the UK IDTA/Addendum. You can contact us for more information.

7) Retention—how long we keep data

Newsletter data: until you unsubscribe, plus a limited suppression list to respect your opt-out.

Form submissions (contact/partners/gyms/press): up to 24–36 months after last meaningful contact, unless we need to keep records longer for legal reasons.

Server logs/security records: up to 12 months unless needed to investigate incidents.

We’ll delete or anonymise data after these periods.

8) Your rights

You have the right to access, rectify, erase, and port your data, and to restrict or object to certain processing. Where we rely on consent, you may withdraw it at any time (e.g., by clicking “unsubscribe” in emails).

To exercise your rights, contact info@worldclimbingleague.com. We may need to verify your identity. We aim to respond within 1 month.

You also have the right to lodge a complaint with your local data protection authority.

UK: Information Commissioner’s Office (ICO).

EU/EEA: your national Data Protection Authority.

9) Cookies and similar technologies

We use cookies and similar technologies to run the site and (with your consent) to measure traffic. For details, categories, and how to change your choices at any time, see our Cookie Policy and Cookie Preferences in the footer. Non-essential cookies will not load without your consent.

10) Event filming and photography

Our events are filmed and photographed. By attending, you may appear in recordings and stills used for editorial, promotional, and archival purposes in any media. If you have questions or require accommodations, please contact [neil@worldclimbingleague]. Venue signage at each event provides additional details.

11) Children

This website is not directed to children. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will take appropriate steps.

12) Security

We implement technical and organisational measures appropriate to the risk, including HTTPS encryption, access controls, least-privilege principles, and monitoring. No method of transmission or storage is 100% secure.

13) Third-party links

Our website may link to third-party sites (e.g., ticketing platforms or broadcast partners). Their privacy practices are governed by their own policies.

14) Changes to this policy

We may update this policy from time to time. We will post the new version here and update the Effective date. Significant changes may also be communicated by email or on-site notice.

15) How to contact us

Questions, requests, or complaints about this policy or your data:

Email: info@proclimbingleague.com

Post: Pro Climbing League Ltd, Langsdown DFK, Clifton House, Bunnian Place, Basingstoke, RG21 7JE

Website analytics

With your consent, we use PostHog to measure visits to public pages and newsletter signup requests accepted by our email provider. PostHog processes this analytics data in its EU region in Frankfurt.

We store a random browser identifier in your browser's local storage to connect page visits and signup requests. Analytics includes the page path, form placement, browser and device information, and the referring website. We do not send your email address or form contents to PostHog, identify you by name, or record your screen.

Browser storage

Pro Climbing League Ltd uses the first-party cookie pcl_cookie_consent to remember your analytics and website preference choices, notice version and choice date for 180 days. Optional PostHog storage uses names beginning ph_. Local storage holds a random browser identifier and analytics state until cleared; it has no automatic expiry. Session storage holds session and window identifiers for the tab session. If local storage is unavailable, the analytics library may use cookies configured for 180 days. These storage lifetimes are separate from the duration of your consent and retention of collected events.

Changing your choice

You can reject analytics or withdraw consent using Cookie settings in the footer. Withdrawal stops future analytics and clears accessible PostHog browser storage and legacy Klaviyo cookies. The page may reload to stop an active tracker. This does not itself delete previously collected events. Previously collected events are retained for up to one year.

Newsletter marketing permission is separate from analytics consent. Rejecting analytics does not prevent newsletter signup or unsubscribe you from an existing subscription.

Signup popup preferences

When you accept Website preferences in Cookie settings and our email provider accepts your signup, Pro Climbing League Ltd sets the first-party cookie pcl-newsletter-signed-up. It stores only the value 1 for up to one year to prevent automatic signup popups in this browser. It contains no email address or identifier.

This choice is optional and off by default. It applies to your next successful signup. You can sign up without it. Permission to remember your signup is separate from newsletter marketing permission and analytics consent.

Your permission is recorded in pcl_cookie_consent for 180 days. Neither optional purpose is enabled before you agree. Accept all enables both available purposes; Reject optional disables both. Customize lets you choose each purpose separately and Save choices. Consent expiry or withdrawal can clear signup memory before its one-year lifetime ends. Older analytics-only choices do not authorize signup memory; we ask for a fresh choice. Provider acceptance does not verify subsequent email confirmation.

We also use session storage pcl-newsletter-shown, with the value 1, to remember when the signup popup has opened or a signup has been accepted. This prevents repeated automatic openings during the current tab session, including reloads and navigation. If session storage is unavailable, we remember this only for the current page lifecycle.

You can withdraw signup memory permission and delete the signup cookie by turning off Website preferences and selecting Save choices. You can also remove the saved signup cookie using “Clear saved signup memory” in Cookie settings in the footer. This does not unsubscribe you, change analytics permission or reset suppression for the current tab session. Clearing browser data or letting the cookie expire also removes this recognition. Manual signup buttons remain available.