Privacy Policy

Last updated: 30 July 2026

1. Who we are

Never.No UK Ltd, company number 10026189, registered office 5 Richmond Street, 1st Floor, Manchester, England, M1 3HF, trading as Dizplai and part of the Dizplai Ltd group (“Dizplai”, “we”, “us”, “our”), licenses the Dizplai platform to customers producing social TV and audience engagement content, and operates that platform on their behalf. We also run this website and market our products.

This policy explains how we handle personal data. Questions, or any request about your data, go to privacy@dizplai.com.

2. What this policy covers

Our responsibility for personal data depends on why we are handling it. This policy covers four situations.

• Your visit to this website, our marketing, and our customer relationship records. We are the controller. See section 3.
• Account, device and usage data generated by use of the Dizplai platform. We are the controller. See section 4.
• Content that members of the public submit to one of our customers through a feature built on our platform. We are our customer’s processor. See section 5.
• Public social media content our customers collect using our software. We are our customer’s processor. See section 6.

Where we act as a processor, our customer is the organisation that can act on a request about the content. If you contact us instead, we will pass your request to them without delay and tell you that we have done so.

We do not sell personal data.

We hold a limited amount of personal data in order to run the business: account records for the people our customers authorise to use the platform, technical and usage data generated when the platform is used, and records about our own prospective and existing customers. We rely on a small number of service providers, such as hosting, monitoring, support and marketing tools, who process personal data on our instructions under written contract. We do not disclose personal data to anyone else except where the law requires it.

We do use personal data to understand which organisations are interested in our products and to prioritise our own sales activity. This is explained in section 3.

3. Our website, marketing and CRM

This section applies when you visit our website, sign up to something, or come into contact with us as a prospective or existing customer. For this activity we are the controller.

What we collect

• Contact and business details you give us: name, job title, organisation, work email address, telephone number and country.
• Sign-up and download records: newsletter subscriptions, gated content and guides you request, podcast subscriptions, event and webinar registrations, and information you enter into interactive tools on our site such as the Sports Fan Revenue Calculator.
• Enquiries and correspondence: contact form submissions, emails, and notes of calls and meetings.
• Website behaviour: pages viewed, time on page, links clicked, referring source, search terms, forms started and completed, and the device, browser and approximate location derived from your IP address.
• Email engagement: whether you opened our emails and which links you clicked.
• Interest and engagement scores we generate about you and your organisation.

Where we get it

Most of it comes from you. We also collect website behaviour automatically, and we may obtain business contact details from publicly available sources such as your organisation’s website or a professional networking profile, from industry events, and from business information providers. Where we obtain your details from a source other than you, we will tell you within one month of obtaining them, or when we first contact you if that is sooner.

How we use it, and our legal basis

• To respond to your enquiry and provide what you asked for. Our legitimate interests, and steps taken prior to entering a contract.
• To send marketing emails and newsletters about our products, research, podcast and events. For business contacts at organisations, our legitimate interests in promoting our products, with an opt-out in every message. For individuals and sole traders, your consent, or the soft opt-in where you are an existing customer or have discussed buying from us.
• To understand which organisations are engaging with our website and content, and prioritise who our team contacts. Our legitimate interests in the efficient operation of our sales activity.
• To measure how our marketing performs and improve it. Our legitimate interests, and your consent where analytics or advertising cookies are involved.
• To advertise to relevant audiences on third party platforms. Your consent, given through our cookie banner.
• To run events, webinars, competitions and prize draws. Performance of the terms of that activity, and your consent where we publish a winner’s name.
• To maintain our customer relationship management records. Our legitimate interests in running our business.

Interest scores and prioritisation

We use HubSpot, our customer relationship management system, to record your interactions with our website, emails and content, and to generate a score indicating how likely your organisation is to be interested in our products. This is profiling. We use it only to decide who our team should contact and in what order. No decision that affects your legal position, or has any similar significant effect, is made about you automatically: a person always decides whether to get in touch. You can object at any time, and if you do we will stop scoring you. We can provide our assessment of why this use is fair to you on request.

Linking your visits

Our cookies allow us to connect the pages you have viewed with the details you give us when you complete a form, so that we understand what you were interested in before you contacted us. We only do this where you have accepted analytics and marketing cookies.

Marketing preferences

Every marketing email we send contains an unsubscribe link, and you can email privacy@dizplai.com to be removed. Unsubscribing stops marketing email but does not stop us replying to an enquiry or contacting you about a service you receive from us.

Where you are a contact at an organisation, we rely on our legitimate interests and you can opt out at any time. Where you are an individual subscriber or a sole trader, we rely on your consent, unless you are an existing customer or have discussed buying from us, in which case we may send you information about similar products with an opt-out in every message.

4. Platform, account and usage data

For this data we are the controller in our own right, independently of our customers.

What we collect. Account records for users our customers create on the platform, including username, role and permissions. Device and technical data, including IP address, browser and device type, operating system and session identifiers. Usage and performance data, including features used, actions taken, error and diagnostic logs, and platform performance metrics.

Why we use it. To operate, secure, support, troubleshoot and improve the Dizplai platform, to investigate incidents and misuse, and to produce aggregated statistics about how the platform performs.

Our legal basis. Our legitimate interests in running and improving a secure and reliable product; and, where the data is needed to deliver a service we have contracted to provide, performance of that contract.

Where we produce statistics or insights for our own product development, we do so on an aggregated basis that does not identify individuals.

Account creation. When an account is created in Dizplai, the only information required is a username and password, set by your organisation’s local administrator. Your account can be deleted at any time by your administrator or on request to us.

5. Content submitted by end users of our customers’ services

Some of our customers use the Dizplai platform to run features that allow members of the public to submit content to them, including text messages, images, voice recordings and video.

Our customer decides what content is collected, how it is used, and how long it is kept. Our customer is the controller. We act as their processor.

In that role we host, store, process, render and play out submitted content on our customer’s instructions. In particular:

• We do not use submitted content for our own purposes. That includes product demonstrations, sales or marketing material, showreels, case studies, benchmarking, and developing, training or evaluating any model, feature or product, unless our customer has separately agreed to it in writing.
• Each customer’s environment is kept separate from every other customer’s environment, and we do not combine one customer’s content with another’s.
• We delete submitted content when our customer instructs us to, and on termination of our contract with them, except where we are required by law to keep a copy.

If you have submitted content to one of our customers and want to access, correct or delete it, contact that customer. If you are not sure who they are, email privacy@dizplai.com and we will help you identify them.

6. Social and public content collected by our customers

Our software collects social media content so that our customers can publish aggregated or individual social posts online, in a broadcast production, on a second screen, or as part of a clip.

Where the content comes from. Either sources that are public and accessible to anyone, such as posts on X, Facebook, YouTube or Instagram, or official application programming interfaces (“APIs”) licensed to us by the social networks themselves. Access to licensed sources requires us to register with the network and pass a qualification process, and each registration is subject to continuous review to confirm that our actual use remains consistent with the use case we declared.

What is collected. As part of collecting a post, our software receives the public profile information attached to it, such as alias, avatar or display name. Our software does not have access to non-public profile information or to non-public posts. We do not access private profile information such as email addresses, physical addresses, date of birth, professional information, social or family relationships, interests, subscriptions, or private messages.

Control and deletion. Content collected in this way sits in our customer’s own environment. Our customer decides how long it is kept, who inside their organisation can see it, and when it is deleted. Dizplai recommends that customers delete collected content as soon as the online or broadcast production has ended.

7. Connecting your own social accounts to Dizplai

Within the platform, a customer may authenticate to a social network in order to retrieve comments left on pages or videos they manage, and to reply to them. Dizplai lets you ingest that content; how you use it is under your control, and we do not use it anywhere else.

Facebook

To run a Facebook search you authenticate through a Facebook login screen, which allows you to retrieve information relating to Facebook pages you manage. You may retrieve display names, avatars and comments from people who have already engaged with you on Facebook.

We do not store or process your Facebook account information outside your implementation of Dizplai, and we never share it with third parties. It is used solely to ingest content from the platform, and only you can initiate that. You control how long Facebook content is kept and who can see it within Dizplai, and each implementation is restricted to your organisation.

You can retrieve:

• From your own Facebook account, after authentication: display name, avatar, user access token.
• From Facebook pages you manage and grant access to: name, avatar, page access token, and posts that have been made public.
• From pages you do not administer: the name and avatar of the page, and public comments. You will not receive the display names and avatars of individual users.

You may use your Facebook login to react or reply to Facebook content, which posts your reaction or reply back to Facebook. This is optional, and Dizplai will never post anything on your behalf unless you take direct action to do so in the Dizplai interface.

You may unlink your Facebook login at any time, and delete any comments you have ingested at any time.

Google Sheets and Google Drive

To import tabular data from Google Sheets we follow the authentication workflow Google requires. You sign in through Google’s own OAuth service, so we have no access to your Google account credentials; we store a token issued by Google that tells us whether sign-in succeeded.

The permissions we request are:

• Google Sign-In: to see your basic personal information, including any personal information you have made public.
• Google Sheets API: read-only access, so that we can import data from the specific Google Sheet you identify. We cannot make changes to your Sheet.

We store the data from the Sheet you choose in your Dizplai account, and update it when you ask us to. You can disconnect by revoking the authorisation within Dizplai, or by revoking Google Sheets API access in your Google security settings.

YouTube

To retrieve comments from YouTube videos and live chat we use YouTube API Services. By using these features of Dizplai you agree to be bound by the YouTube Terms of Service, and you should read the Google Privacy Policy. You may revoke our API client’s access in your Google security settings.

We do not store or process your YouTube information outside your implementation of Dizplai, and we never share it with third parties. You control how long YouTube content is kept and who can see it within Dizplai. You can retrieve:

• Live chat on your own channel, after authentication: display name and avatar.
• Comments on a YouTube video: display name and avatar.
• Video search: display name and link to the video.

8. Who we share personal data with

• Service providers who process personal data on our instructions under written contract, including hosting, content delivery, media processing, monitoring, support, email delivery and marketing tools.
• Our group companies, where they provide services to us on the same contractual terms.
• Advertising and social platforms, where we run campaigns or measure their performance. Where a platform also uses the data for its own purposes, it does so as a controller in its own right, under its own privacy policy.
• Professional advisers, insurers and authorities, where we need to take advice, defend a claim, or comply with a legal obligation.
• A buyer or successor, if our business or part of it is sold or reorganised.

Where we act as a processor, we do not disclose our customers’ content to anyone other than the providers above and our customer. A current list of our sub-processors is available from privacy@dizplai.com.

9. Transfers outside the UK

Some of our service providers, and some of the platforms our customers publish to, are located outside the UK. This includes our customer relationship management and marketing platform, which is provided by a company based in the United States.

Where we transfer personal data outside the UK we rely on UK adequacy regulations covering the destination country, the International Data Transfer Addendum to the EU Standard Contractual Clauses, or another transfer mechanism permitted by data protection law, together with any additional safeguards required.

You can ask us for details of the safeguard applying to a particular transfer.

10. How long we keep personal data

• Platform account records: while the account is active, and 12 months after it is closed.
• Device, usage, diagnostic and log data: up to 13 months, or longer where needed to investigate a security incident or meet a legal obligation.
• Content submitted by end users of a customer’s service: as instructed by that customer.
• Social and public content collected by a customer: as instructed by that customer.
• Prospect and marketing records: 24 months from your last engagement with us, then deleted or anonymised.
• Customer relationship records: for the duration of the relationship, and 6 years afterwards.
• Unsubscribe and objection records: retained so that we can continue to honour them.
• Correspondence about privacy requests: 2 years.

11. Security

We are committed to protecting personal data. Our measures include role-based access control on a least-privilege basis, multi-factor authentication for administrative and production access, encryption of data in transit, encryption at rest for stored content, logical separation between customer environments, access logging and monitoring, documented patching and vulnerability management, encrypted backups, and confidentiality obligations and security training for our people.

No system is completely secure. When signing in to Dizplai, check that you are on a legitimate Dizplai domain with a valid SSL certificate, for example *dizplai.com.

12. Cookies

We use cookies and similar technologies in four groups:

• Essential cookies, needed for the site to function. These are always on.
• Analytics cookies, which tell us how the site is used.
• Marketing and CRM cookies, set by HubSpot, which record your visits and link them to any form you complete so that we understand what you were interested in.
• Advertising cookies and pixels, set by third party platforms, which allow us to show you relevant advertising and measure whether it worked.

All except essential cookies are only set once you have agreed to them through our cookie banner, and you can change or withdraw your choice at any time using the cookie settings link on our site.

13. Your rights

Where we are the controller, you have the right to ask us to give you a copy of the personal data we hold about you, correct it, delete it, restrict how we use it, or transfer it to another organisation where that right applies. You can object to our use of it where we rely on legitimate interests, and you can object to direct marketing and to profiling for marketing purposes at any time, which we will always honour. Where we rely on your consent, you can withdraw it at any time.

Email privacy@dizplai.com and we will respond within one month.

Where we are acting as a processor for one of our customers, we will forward your request to them, because they are the organisation that can act on it.

If you are unhappy with how we have handled your personal data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would ask that you give us the opportunity to put things right first.

14. Children

The Dizplai platform is a business product and is not directed at children. Where a customer builds a feature on our platform that is used by members of the public, that customer is responsible for setting and enforcing any age restriction.

15. Dizplai Unofficial World Cup Predictor

This section covers the personal data we collect when you use the Unofficial World Cup Predictor. For this product we are the controller.

Account and login data. You can sign in with Google, Facebook or email. When you do, we receive limited information from that provider, including your name and email address. We use this to create and manage your account, authenticate you, and contact you about the service. We do not receive your social media password, and we do not post anything to your Google or Facebook account.

We also receive your date of birth from the sign-in provider, which we use to confirm you are old enough to take part and to establish eligibility for any prize. We do not use it for marketing segmentation.

Marketing. If you have opted in to marketing, we also use your email address to send you updates, offers and news about the Predictor and about Dizplai, on the basis of your consent, and you can withdraw it at any time using the unsubscribe link in any email.

Analytics. We use Google Analytics 4 to understand how people use the Predictor, including the pages and features visited, interactions with our widgets, and general device and browser information. We use this on an aggregated basis to improve the product and the experience.

Cookies. Essential cookies are required for the Predictor to work, including keeping you signed in, and are always active. Analytics cookies are only set once you have agreed to them through our cookie banner, and you can change your choice at any time. If you do not agree, only the essential functions needed to run the site remain active.

Legal basis. We process account and login data to provide the service you have signed up for and to manage your account. We process analytics data on the basis of your consent, which you can withdraw at any time. We send marketing emails on the basis of your consent.

Retention. We keep Predictor account data while your account is open and for 12 months after you close it, and analytics data for up to 14 months.

16. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new date at the top, and where a change materially affects you we will tell you directly. Changes take effect when they are posted.

17. Contact

Any queries about this policy, or about how we handle personal data, can be sent to privacy@dizplai.com.

Never.No UK Ltd, trading as Dizplai
5 Richmond Street, 1st Floor, Manchester, England, M1 3HF