Last updated: November 2022

Privacy Policy

This privacy policy describes how we StatsBomb Services Limited (“we”, “our” or “us”) may collect and use personal data about you in connection with our website or as part of our analytics services (the “Services”), and your rights in relation to this personal data. We are a “controller” of such personal data for the purposes of applicable data protection law.

1. The personal data we collect

We collect the following personal data:

  • Contact information. When you log in to our platform, or access our website at to ask us a question, request a free demo through our “Contact Us” link, or request to be added to our newsletter mailing list, we collect certain information such as your first name, last name, email address and other business contact information.
  • Player data. We collect statistical data relating to professional athletes for use in our Services. We collect this data from broadcast feeds, directly from teams and other public sources. This includes identifiers (including name and date of birth), career data, and event data. Whilst we generally do not process health data or other “special category data”, we may process limited physical data obtained from publicly available sources including a player’s height and weight, and we may record when a player is substituted in a game due to injury (but not any details of such injury).

2. How we use your personal data and the legal basis for this

We may use your personal data for the purposes set out in the table below. We have also set out our “legal basis” under data protection law for each of these uses.

Use Purpose Legal basis for use
Communicating with you We may use your personal data to communicate with you when you ask us a question, request a demo, or otherwise use our Services. It is necessary for us to process this personal data in order to carry out your request.
Marketing We may use your personal data to send you marketing messages relating to our Services. To the extent required by applicable law, we obtain your consent before sending marketing messages to you. Where we rely on your consent, you can withdraw this at any time by contacting us in accordance with this policy, or by following the applicable unsubscribe links presented to you in our marketing communications.
Improving our Services and customising your experience We analyse information about how our users interact with our Services to provide an improved experience for our customers of all our Services, including product testing and site analytics. It is in our legitimate business interests to use the information available to us for this purpose, so we can understand any issues with our Services and improve user experience.
Statistics in our Services We use statistics which may include personal data relating to athletes within our Services. It is in our legitimate interests to obtain and use publicly available information to provide a data analytics service to the sports and media industry.

To the extent any personal data constitutes “special category data”, we process such data on the condition that it has been manifestly made public by the data subject.

Complying with our obligations We may process your personal data to comply with legal or regulatory requirements. This is so we can comply with our legal obligations.

3. Cookies and other tools

We use browser cookies and similar technologies to collect and store certain information when you access or interact with our website. A cookie is a small text file which is sent by a website, accepted by a web browser and then placed on your hard drive. The information collected from cookies lets us know that you visited our website in the past, and helps you avoid having to re-enter information during your visit or on subsequent visits.

You have the right to choose whether or not to accept cookies, unless they are strictly necessary. However, if you choose to refuse or remove cookies, this could affect the availability and functionality of our website.

Necessary cookies

These cookies are required to enable core functionalities of the website and products. Without these cookies, services you have asked for, like remembering your login details may not be provided. If you disable these cookies via your browser settings certain parts of the website and products may not function for you.

Platform Host Description Expiry (Days)

A JavaScript plugin that alerts users of the use of cookies on this website. 90

Analytical/performance cookies and third party cookies

These cookies help us improve or optimise the experience we provide. They allow us to measure how visitors interact with the website and products (for example with which parts are clicked on and the length of time between clicks). We use this information to improve the user experience and performance of the website and products. We use third-party web analytics software on our websites and apps (such as Google Analytics and Heap), further information about these partners can be found below.

Platform Host Description Expiry (Days) Region
Heap **

A set of cookies to collect information and report site usage statistics including personally identifying individual visitors and session replay. Heap cookies allow us to understand our users' needs better, helping us to make our products the best they can be. Any sensitive data such as the player being searched for is removed from this data. 730 US
Google Analytics **

A set of cookies to collect information and report site usage statistics without personally identifying individual visitors. ‘_ga’, the main cookie used by Google Analytics, enables a service to distinguish one visitor from another and lasts for 2 years. Any site that implements Google Analytics, including Google services, uses the ‘_ga’ cookie. Each ‘_ga’ cookie is unique to the specific property, so it cannot be used to track a given user or browser across unrelated websites. 730 EU
Pardot (Salesforce) **

Pardot sets first-party cookies for tracking purposes and sets third-party cookies for redundancy. Using first-party and third-party cookies together is standard in the marketing automation industry. We don’t store personally identifying information, only a unique identifier. First-party cookies are set on Pardot domains and tracker subdomains. 730 US, UK, Germany, France and Japan

Targeting cookies

These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose, so that when you are on another website, you may be shown advertising based on your browsing patterns on our website. We may also show you advertising on our website based on your browsing patterns on other websites that we have obtained from our advertising partners. You can obtain more information about our partners below.

Platform Host Description Expiry (Days)
LinkedIn ** This domain is owned by LinkedIn, the business networking platform. It typically acts as a third-party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. Session
Twitter ** This domain is owned by Twitter. The main business activity is: Social Networking Services. Where twitter acts as a third-party host, it collects data through a range of plug-ins and integrations, that is primarily used for tracking and targeting. 730
YouTube ** YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. Session

Third-party cookies

Some of the above cookies are not fully controlled by us: these are the cookies identified with a “**” in the above list. You should review the privacy and cookie policies of these parties to find out how they use cookies and the information they collect through cookies. You also have the option to disable all third-party cookies via your browser settings. When you withdraw consent for cookies, please make sure that you refresh the page or browse to a different page on our website, to ensure that the cookies are removed from your browser.

As of the date of this Cookie Policy, these instructions are available for commonly used browsers through the following links:

If you use Microsoft Edge:

If you use Internet Explorer:

If you use Safari:

If you use Firefox:

If you use Chrome:

If you use different devices, make sure you configure the settings of the corresponding browser according to your preferences.

If you wish to opt-out of tracking by Google Analytics across all websites you can do so here and to opt-out of Google Analytics for Display Advertising and customize Google Display Network ads in general please go to or Google Analytics' currently available opt-outs for the web.

If you wish to opt out of targeting and interest-based advertising, you may visit the following websites for more information on how to do this: or

Further information about cookies

To find out more about cookies please visit: or see which contains further information about behavioural advertising and online privacy.

4. How and when we may share your personal data

We may share your personal data with the following categories of third parties in the following circumstances:

Group companies:
We may share your personal data with our group companies from time to time.

Service providers and business partners:
We may share your personal data with our service providers and business partners that provide business services for us for the purposes set out above. For example, we may engage with companies to host our data, process secure payments, and send newsletters and marketing messages.

Where required by law:
We may share your personal data with law enforcement agencies, regulators, courts, other government authorities or other third parties where we believe it necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party.

In the context of a transaction:
We may share your personal data with potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merge with another company or we sell or transfer all or a portion of our assets or business.

5. International data transfer

We host our data in AWS servers in the United Kingdom and in Germany.

Your personal data may be transferred to, stored, and processed in a country outside the hosting location including to jurisdictions which are not regarded as providing the same level of protection for personal data as the laws of your home country.

Where we have transferred your data to such countries, we have put in place appropriate safeguards (such as approved contractual commitments) in accordance with applicable legal requirements to provide adequate protections for your personal data. For more information on the appropriate safeguards we have in place and to obtain a copy of such safeguards, please contact us at the contact information set out below.

6. Your rights over your personal data

You have certain legal rights regarding the personal data we hold about you. For example, subject to applicable laws, you can ask us:

  • Right of access: to see what personal data we hold about you;
  • Right to rectification: to correct inaccurate personal data;
  • Right to erasure: to erase your personal data;
  • Right to restrict processing: to restrict our use of your personal data;
  • Right to object: to object to our processing of your personal data; or
  • Right to data portability: to receive your personal data in a structured, commonly used and machine readable format, or for us to port your personal data to another data controller.

Please note that these rights are not absolute, and we will likely require additional information from you in order to honour your requests.

If you would like to exercise any of these rights, please send us an email at The website of the Information Commissioner’s Office (“ICO”), available at, includes additional information you may find helpful in order to understand to your rights under applicable data protection laws.

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similar significant effects on you.

7. Information security and storage

We implement security measures designed to safeguard and maintain the integrity and confidentiality of your personal data. We evaluate and update these measures on a regular basis. However, no information system can be completely secure, so we cannot guarantee the absolute security of your personal data.

We keep your personal data for as long as it is needed for the purpose for which it was collected. When deciding how long to keep your personal data, we take into account our legal obligations. We may also retain records to investigate or defend against potential legal claims.

8. Contact us

StatsBomb Services Limited is a company incorporated in England and Wales with company number 10377735, and registered address at University Of Bath Innovation Centre Carpenter House, Broad Quay, Bath, United Kingdom, BA1 1UD. We are registered as a controller with the ICO with registration number ZA798590.

If you have questions or concerns regarding the way in which your personal data has been used, please contact us at

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you can make a complaint to the ICO on 0303 123 1113 or at or the data protection authority of your country of residence.