Privacy Policy

last updated: 01/08/26

1. About this policy

This explains what Pink Ladies Games (PLG) does with personal data on pinkladiesgames.com, Machina and Tornea, and in running a global network of licensed local organisers.

In short: if you booked a place at an event, the organiser in your country decides what happens to your data, not us — we run the platform they use. Everything else on this site is ours to decide: who visits, who applies to run an event, who we talk to. We do not sell data.

2. Who we are

Hercules Trophy Middle East fz llc, trading as Pink Ladies Games, registered in the Creative City free zone, Fujairah, United Arab Emirates, under trade licence 2705/2012. You can reach us through the contact page on this site for anything about personal data.

We are established in the UAE, so UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data is our home law; its Executive Regulations had not been issued as of the date of this policy. Because we serve organisations and participants across Europe and elsewhere, we run the whole network to the European GDPR standard everywhere, rather than one rulebook per country. Where your own country's law gives you a stronger right, that right applies.

3. The two hats we wear

This is the most important distinction in this policy, because it decides who you deal with.

If you visit this site, subscribe, or apply through Machina, PLG is the controller of your data. The same is true if you are a sponsor, partner or media contact. But if you book a place at an event run by a licensed local organiser, and your data goes into Tornea, the local organiser is the controller and PLG acts only as its processor — we operate the platform on the organiser's instructions, we do not decide what happens to your data. If you book in the United Arab Emirates or Belgium, the PLG group company running that country is the controller. If you attend a medical consultation at an event, the medical provider is an independent controller of that information, entirely separate from us.

Even where we act as a processor, we remain a controller for a narrow set of our own purposes: calculating the fees due to us, keeping the platform secure, meeting our own legal obligations, and producing anonymised network statistics. We do not use participant data for our own marketing and we do not sell it.

4. What we collect when we are the controller

From visitors: device and usage data through cookies, and anything you submit in a form. From chapter applicants: identity, role and contact details, account activity, everything submitted in the application — team capacity, market view, sponsor pipeline, budget assumptions — our assessment notes, and correspondence. From sponsors, partners and media contacts: contact details and the history of our dealings. From subscribers: name, email, country and engagement data. Before contracting with any organisation, we also screen it and the people who control it against sanctions and adverse media, and we re-screen periodically.

5. When we are the processor: participant data in Tornea

The local organiser decides what participant data is collected and why. We supply the platform and act only on its instructions. That means the organiser's own privacy notice, not this one, governs what happens to your data if you booked through them.

To exercise a right over your data — access, correction, deletion — ask the local organiser first. If a request reaches us instead, we will pass it on and tell you we have done so, because we cannot act on data we do not control. If the organiser does not respond, you can come to us; we cannot decide the request on their behalf, but a licensed organiser that ignores its participants is in breach of its agreement with us and we will take it up.

Every country-level agreement contains a data processing agreement under which we commit to process data only on documented instructions, bind everyone with access to confidentiality, apply appropriate security, only engage sub-processors with authorisation, assist with rights requests and regulator inquiries, notify breaches without undue delay, delete or return data at the end of the agreement, and support audits.

6. Why we use data, and on what basis

We rely on your consent where we send you something you subscribed to, or where cookies go beyond what is strictly necessary. We rely on the steps needed to enter into or perform a contract where we assess a chapter application or manage a signed agreement. We rely on our legitimate interest where we run and secure this website, screen counterparties for legal and reputational risk, or reach out to an organisation about the chapter programme — always with an opt-out. Where we act purely as a processor for a local organiser's platform, the organiser holds the legal basis, not us.

7. Who we share it with

PinkRibbon International, for chapter applications and joint assessment — it is an independent controller for its own charitable governance. The relevant local organiser, but only its own participants' data. Our hosting, payment, email and screening suppliers, acting as processors or independent controllers under written agreements. Authorities, where the law requires it. We do not sell data, we do not share participant data between countries, and we never give sponsors access to participant lists.

8. International transfers

Our platforms and suppliers are spread across the UAE, the EU, the US and wherever local organisers operate. Where data leaves the European Economic Area, we rely on adequacy decisions where available, and otherwise on the European Commission's Standard Contractual Clauses together with our own security requirements. Where data leaves the UAE, we apply the same clauses as our safeguard, pending the PDPL's Executive Regulations.

9. How long we keep it

Website analytics for up to 14 months. Subscriber data until you unsubscribe. Applications that don't proceed for 24 months. Signed agreements for their life plus seven years. Confidentiality agreements for ten years. Compliance screening records for five years. Financial records for seven years. Participant data in Tornea for as long as the local organiser instructs.

10. Your rights

You may request access, correction, deletion, restriction or portability of your data, object to what we do with it, and withdraw consent at any time. If your data is in Tornea because you booked an event, direct your request to the local organiser first, as explained in section 5. Otherwise, contact us through this site and we will respond within 30 days. You may also complain to the UAE Data Office, your national data protection authority, or the relevant EU authority.

11. Cookies

Strictly necessary cookies run without asking. Analytics and advertising cookies run only after you accept them through the cookie banner, and you can withdraw that choice at any time.

12. Children

This site is for adults acting professionally or seeking information. We do not knowingly collect data about children. Age limits for taking part in an event are set by the local organiser.

13. Automated decisions

Machina flags budget assumptions that fall outside our benchmark — that is a prompt for a conversation, not a decision. No decision about an organisation or a person is taken by automated means alone; approval is always a human decision by PLG, with PRI consulted.

14. Changes to this policy

We update this policy as our practices, suppliers or the law change. Where a change materially affects data we already hold about you, we will tell you before it takes effect.

Practical

How can I change my team profile? 

Go to "My Account" on the website. Select "My Team" and log in. Then, click on "Edit Your Team" in the top left corner. Make your changes and don't forget to click "Save". All done!

How do I change a player in my team?

To add or remove players, follow the same steps as you would to edit your team profile. Once you're on the "Edit My Team!" page, scroll to the very bottom. There, you’ll see the current players, the invited players, and you can invite new players by entering their email address and sending the invitation. Once they confirm their invitation, they will be added to your team.

I can't edit my team after logging in. What's happening?

This likely means you have two accounts registered. In this case, only one account is linked to your team. Check your inbox to find which email address is associated with your team. If you can’t find it, email us at info@pinkladiesgames.com, and we’ll fix it for you!

How do I edit my personal profile?

Go to "My Account" on the Pink Ladies Games website. Then, click on "My Profile" and log in. You’ll be taken directly to your personal profile, where you can make any changes. Be sure to click "Save" when you're done!

Sign up

Make it personal

Bonus points

Hoe bonuspunten verdienen? 

Als je team vóór het verstrijken van de deadline (ongeveer een week voor het evenement zelf) 100% compleet is, dan heb je meteen 5 bonuspunten op zak en heb je direct een handige voorsprong. Speel je voor de eerste plaats? Dan laat je de pre-event bonus best niet links liggen.

Wat is 100% compleet? Als je een slogan, teamfoto, joker, teamsong, bio, teamspelers en een kapitein hebt ingevuld! Daarnaast zet je nog het goed doel naar jouw keuze in de spotlight. Laat je creativiteit de vrije loop en bekijk gerust eens andere teams voor inspiratie.  

Wat is de joker? 

De joker zet je in op die ene battle die je team het best kan. Je krijgt immers meer bonuspunten, naarmate je beter presteert op die battle. Kies hem voor de deadline, want daarna is het te laat!

Hoe mijn teampagina delen op sociale media?

Niet moeilijk, even de link (=URL) bovenaan kopiëren van je teampagina en die plakken in je berichtje.

Safety

Contact us