Privacy notice

Data controller: Milton Keynes Ice Hockey Club ltd, company number 11917911. Our registered office is The Pinnacle, Building A, 150-170 Midsummer Boulevard, Milton Keynes, Buckinghamshire, MK9 1FD. Contact us at [email protected] or write to Planet Ice, Elder Gate, Milton Keynes, MK9 1DL.

Scope of this notice

This notice applies to accounts, purchases, support, protected streaming and broadcast-graphics operations within the Lightning TV service. The main Milton Keynes Lightning website, merchandise shop, venue and external ticket agents may collect information under their own notices. If information from one of those services is provided to Lightning TV, this notice applies to our use of it here.

Information we collect

We collect the account details you provide, email-verification status, purchases and billing country, policy acceptances, passes and entitlements, discount-code redemptions, support messages and feedback. A discount redemption records the full issued code for authorised internal audit, its type and recipient label, fixture, account and email, time, allocated original and final price, discount and resulting order and entitlement. A multi-game code redemption creates one linked audit record for each included fixture so access and per-fixture limits remain traceable. Rejected attempts retain the matched code where one exists, or otherwise a one-way digest and short ending hint rather than the full unrecognised value. When you use the service, we also record devices, IP addresses, browser details, whether a stream was opened, viewing-session start, heartbeat and end times, player-reported or session-estimated watch time, playback attempts, quality and fault diagnostics, takeovers, security events, and the fixtures you access. If your browser supports it, we record its coarse estimate of connection downlink speed, round-trip time and effective connection category when a protected stream opens.

The connection value is a browser-provided estimate based on recent connection behaviour or connection technology. Lightning TV does not download a separate test file, continuously test the connection or treat the estimate as proof of the actual speed supplied by your internet provider. Some browsers do not provide an estimate.

We receive most information from you and your device. We may also receive payment and billing results from Stripe, discount-code details from authorised clubs, leagues, visiting teams, operational partners, sales or support staff through manual files or configured secure feeds, and broadcast-access results from our streaming providers. Stripe handles payment-card details; Lightning TV does not store full card numbers or security codes.

For match statistics and broadcast graphics, we store league players’ names, team, shirt number, position, GameStats identifier and supplied roster or statistics data. Authorised staff may upload a player headshot. We receive these details from GameStats, the league, teams, players or authorised broadcast staff; they are kept separate from viewer accounts unless a person also chooses to hold an account.

For this open-registration release, we remove the personal records held in the retired beta-invitation, beta-membership and legacy stream-code credential systems, including invitation and code values, purchaser details and their legacy access-session records. Existing accounts, orders and account-entitlement history remain where they have a separate access, support or legal purpose. A minimal retirement audit fact records that the former source was revoked without retaining its code value, purchaser details or legacy access-session data. Ordinary protected-playback security and support records are separate from the retired credential system and continue only for the playback retention period below.

Authorised technical staff can create a single-use, five-minute launch link for a view-only stream check. We store only a cryptographic digest of the launch token, the creating staff account, fixture, creation and consumption times, a digest binding the 30-minute preview to one browser session, and the resulting playback diagnostics. The raw launch token and Amazon stream key are not stored.

Why we use it and our lawful bases

• Contract: to create your account, process orders, deliver purchased broadcasts, provide casting, send service messages, handle support and refunds, and give you a portable copy of information you supplied.
• Legal obligation: to keep required payment, tax, accounting, refund and consumer-rights records and respond to valid legal requests.
• Legitimate interests: to secure accounts and streams, prevent fraud and credential sharing, investigate suspected breaches of the Terms, diagnose playback and connection failures, measure service reliability, protect our legal rights, and improve the service. We balance these interests against your rights and limit the data retained.
• Legitimate interests for match coverage: to maintain accurate team rosters, identify participants, publish match statistics and produce informative live graphics for viewers. We use information connected with a player’s public sporting role and allow corrections through the contact route below.
• Consent: for marketing email and where we introduce an optional storage technology or another use that legally requires consent. You can withdraw consent at any time without affecting earlier lawful processing.

Account, contact and payment-confirmation information is required to enter into and perform a purchase contract. Without it, we cannot create the account, take payment, issue a pass or provide protected playback.

If you separately opt in to marketing email, we use your account email to send Lightning TV news, upcoming broadcast information and offers. Marketing consent is optional, is not shared for another organisation’s marketing, and can be changed at any time from Account. Withdrawing it does not stop necessary account, purchase, security, support or service messages.

Who receives information

Access is limited to authorised Lightning TV support, commerce and technical staff who need it. Internal access is enforced through named permission roles and account-specific exceptions: only superusers can create or change role definitions, while authorised access managers can assign those configured roles and exceptions to staff accounts. Authorised commerce staff can see full issued discount-code values and redemption reports, including the account email, for issuance control, fixture operations, reconciliation, support, fraud prevention and financial audit. Authorised staff can use a per-user investigation view showing stream opens, watch time, devices, sessions, attempts, coarse browser connection estimates, purchases, access grants, support cases and feedback when handling support, refunds, security or suspected Terms breaches. Connection estimates are diagnostic indicators only and staff must consider them alongside playback and service records. We use service providers for payment and tax processing, hosting and backups, Amazon IVS streaming, Google Cast delivery, transactional email, monitoring and security. They may process only the information needed for their service under contractual and security controls. We may also disclose information where law requires it or to establish, exercise or defend legal claims.

Player names, team details, shirt numbers, positions, match statistics and selected headshots may be sent to the rink vMix production system and displayed in live or recorded coverage. Only authorised graphics and match operators can configure that transfer.

International transfers

Some providers may process information outside the United Kingdom. Where no UK adequacy regulation applies, we require an appropriate transfer mechanism and safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses. Contact us for information about the safeguard relevant to a provider.

Cookies and device storage

We use the strictly necessary cookies and browser storage described in our Cookie notice. We do not currently use advertising or optional analytics cookies on Lightning TV pages.

How long we keep information

• Account and entitlement information is kept while the account is active and afterwards where needed to deal with access, legal or deletion requests.
• Payment, tax, order, discount-code issuance, import, status-change and redemption records are configured for up to 2555 days so we can meet accounting, tax, refund, access-audit and legal obligations. Revoking or replacing a code does not erase its historic uses.
• Fixture-bound data created for an internal protected Test fixture may be deleted when staff remove that rehearsal fixture; order, payment and linked support records are retained under their normal periods, with the deleted fixture link removed where necessary.
• Support cases are configured for up to 730 days after they are no longer active, unless a dispute or legal duty requires longer.
• Playback sessions, diagnostics, telemetry and technical-preview records are configured for up to 90 days, except security evidence linked to an unresolved incident.
• Player identities, roster history and match statistics are kept while needed for current coverage and an accurate historical sporting record. Headshots are reviewed when rosters change and removed or replaced when they are no longer suitable for those purposes or a valid correction or objection requires it.
• Backups expire on a protected rolling schedule; deleted information may remain inaccessible in backups until that cycle completes.

Personal records in the invitation, beta-membership and legacy stream-code credential tables are not kept under these general periods: they are removed as part of retiring those access systems. This does not delete an account, purchase, refund, support case, ordinary protected-playback record or account-entitlement history that has its own continuing purpose and retention basis.

We review records and securely delete or anonymise them when the applicable purpose and retention period end.

Your rights

Depending on the information and lawful basis, you may ask us for access, correction, deletion, restriction, portability, or to object to processing. You may withdraw consent where consent is the basis. These rights are not absolute; if an exemption applies, we will explain our decision.

Your right to object: you can object at any time to processing based on legitimate interests. Tell us your circumstances and we will stop unless we can demonstrate compelling legitimate grounds or the processing is needed for legal claims. You can always object to direct marketing.

Email [email protected] to exercise a right or make a subject access request. We may need to verify your identity. You can also complain to the Information Commissioner's Office.

Children’s information

Purchases must be made by an adult. The service is not intended to collect information directly from a child without the involvement of a parent or guardian. Contact us if you believe a child has provided account information without appropriate permission.

Automated controls

Automated controls enforce email-verification, payment, entitlement, rate-limit and one-active-viewing-session rules and may flag suspicious activity for staff review. We do not use account data to make solely automated decisions that produce legal or similarly significant effects. Contact support if you believe an automated control made an error.

Changes to this notice

The version at the top identifies this notice. We will publish changes here and bring material new uses to account holders’ attention before they begin where required.