Privacy Policy

Effective date: 17 September 2026

This Privacy Policy applies to the Locomotive Management app and the Locomotive Management Creator & Agency Battle Portal operated by Locomotive Management Agency Ltd in the United Kingdom.

Privacy contact: admin@locomotivemanagement.co.uk

Information we collect

Depending on your role and how you use the service, we may process:

• Account and identity information, such as your name, portal username, account role, team membership and authentication information. Passwords are stored using one-way password hashing rather than as readable passwords.
• Creator and management information, such as TikTok username/handle, team assignments, availability, recruitment records, performance information, targets, strike records and account status where these features are used.
• Battle and booking information, such as battle dates and times, participant and opponent usernames, battle type, notes, acknowledgements and booking/request status.
• Age-group information used for battle coordination. Agency bookings may record whether an opponent is “Under 18” or “18 or over”. This field does not require a date of birth.
• Agency information, such as agency account details and battle booking/request information.
• Notification and device information, including Firebase Cloud Messaging registration tokens and web push subscription information needed to deliver notifications.
• Security and usage information, including sign-in activity, IP address, browser/device user-agent details, pages opened, form actions and security events used to operate, audit and protect the portal.
• Files and information you choose to upload, for example CSV files used by authorised administrators for battle, target or performance management.

How we use information

We use personal information to provide and administer the Locomotive Management service, including to authenticate users, manage teams and availability, arrange and administer battles, manage agency bookings, provide management and performance features, deliver notifications, maintain security/audit records, investigate technical problems and support users.

Where applicable under UK data protection law, our legal bases may include performance of a contract, legitimate interests in operating and securing the management service, compliance with legal obligations, and consent where consent is the appropriate basis.

Notifications and Firebase

The Android app uses Google Firebase Cloud Messaging (FCM) to deliver notifications such as battle bookings, changes, cancellations, reminders and authorised Locomotive alerts. A device registration token is generated for this purpose and associated with the signed-in portal account so the correct user can receive relevant notifications.

Google may process technical information needed to provide Firebase services in accordance with Google's own terms and privacy practices.

TikTok-related information

The portal may store TikTok usernames supplied for creator management and may use publicly available TikTok information for features such as creator LIVE-status monitoring or performance administration. TikTok is a separate service and its own privacy terms apply when information is processed by TikTok.

Who we share information with

We do not sell personal information. Information may be made available only where needed to operate the service, including to authorised Locomotive Management Owners, Team Admins, Creators or agency users according to their access permissions, and to service providers that support hosting, security and notification delivery.

Key service providers may include our website hosting provider and Google/Firebase. If you choose to follow an external link (for example TikTok or WhatsApp), that external provider will process information under its own privacy terms.

Cookies and local storage

The portal uses essential cookies and browser/app storage for sign-in sessions, remembering authorised devices, security protections, notification setup and identifying the native Android app. These are used to provide the service rather than for third-party advertising.

Security

We use measures intended to protect personal information, including HTTPS encryption in transit, role-based access controls, authenticated sessions, password hashing, security event logging and restricted administrative access. No internet service can guarantee absolute security, but we take reasonable steps to protect the information entrusted to us.

Data retention and deletion

We keep information for as long as it is reasonably needed to operate the service, maintain appropriate business and security records, resolve disputes and meet legal or contractual requirements. Different records may be kept for different periods.

You may ask for your portal account and associated personal information to be deleted where applicable. We will delete or anonymise information that is no longer required, subject to any information we must retain for legal, safeguarding, security, contractual or legitimate record-keeping reasons.

To request account or data deletion, visit Account & Data Deletion or email admin@locomotivemanagement.co.uk.

Your data protection rights

Depending on the circumstances and applicable UK data protection law, you may have rights to request access to your personal information, correction of inaccurate information, deletion, restriction or objection to certain processing, and data portability. Where processing is based on consent, you may withdraw that consent.

You can contact us at admin@locomotivemanagement.co.uk. You may also have the right to complain to the UK Information Commissioner's Office (ICO).

Users under 18

The service is not intended for children under 13. Where a portal user is under 18, use of the service is subject to Locomotive Management's applicable onboarding, safeguarding and consent arrangements. The age-group field used in agency battle bookings is intended only to support appropriate battle coordination.

International processing

Some service providers, including Google/Firebase, may process information outside the United Kingdom. Where this occurs, we rely on the safeguards and contractual arrangements made available by the relevant provider and applicable data protection law.

Changes to this policy

We may update this Privacy Policy when the app, portal or legal requirements change. The latest version will be published at this page with an updated effective date.

Contact

Locomotive Management Agency Ltd
United Kingdom
Email: admin@locomotivemanagement.co.uk