This privacy statement is issued by Yeyecatoo BV, a private limited liability company under Belgian law, with registered office at Molenstraat 205, 2840 Rumst, Belgium, registered in the Crossroads Bank for Enterprises under number 0810.903.766 (VAT BE 0810.903.766), trading under the commercial name "Sunday Squad" (hereinafter: "Sunday Squad", "we" or "us").
We are the controller of the personal data described in this statement. You can always ask questions about your data at privacy@thesundaysquad.com.
This statement applies to everyone whose personal data we process in connection with thesundaysquad.com and the Sunday Squad platform:
Our general terms and conditions also apply to sportfluencers and brands. Article 8 of those terms describes the same subject in contractual terms.
Data: name, email address, password (stored encrypted) or sign-in with Google, language, place of residence and country, sport(s), photo, profile text, the handles of your social channels and their public figures, and, for a collab, your delivery address and clothing size or other details a brand needs to send you a product.
Why: to create and manage your account and profile, to select you for collabs, to carry them out and to email you about them.
Legal basis: performance of the contract (art. 6.1.b GDPR). For publishing profile data, using your name, photo or quotes as a testimonial and processing feedback with your name, we ask for your consent (art. 6.1.a GDPR). You can withdraw it at any time.
Data: your application, your answers to a brand's questions, the status of your application, the content you make for a collab (posts, reels, stories) and its figures (reach, impressions, interactions).
Why: to organise a collab, to present you to the brand, to report the results and to tell you the outcome.
Legal basis: performance of the contract (art. 6.1.b GDPR). Reporting on a collab's results also rests on our legitimate interest in being able to show brands what a collab delivered (art. 6.1.f GDPR).
You can choose to link your Instagram and/or TikTok account to your Sunday Squad account. This is voluntary: you can also take part in collabs without linking. You link an account yourself, on the official Instagram or TikTok sign-in page. We never see your password there.
What we read, only with the permission you give there:
What we do not do: we do not post anything on your behalf, send messages, follow accounts or read your private messages.
Why: to check that the account is yours, to keep your profile up to date, to match you well with collabs and to report the results of a collab to the brand.
Legal basis: your consent (art. 6.1.a GDPR). You can unlink at any time, see "Unlinking an account" below.
What we keep: the access keys (tokens) that Instagram or TikTok give us, encrypted, and the figures we retrieve. As soon as you unlink, we delete the keys and retrieve nothing more.
To find athletes and brands that fit Sunday Squad, we look at publicly available profiles on, among others, Instagram, TikTok, Strava and LinkedIn. We record what is needed for a first assessment: name, public handle, the visible figures and sport, and where applicable a business contact address.
Why: to assess whether we want to propose a collaboration and to approach brands that fit our athletes.
Legal basis: our legitimate interest (art. 6.1.f GDPR) in building a network of athletes and brands. You can object, see "Your rights". When we contact you for the first time, we tell you where we got your data.
Data: name, role, business email address and phone number of contacts, our communication with them and agreements about a collab.
Why: to arrange quotes, briefings and collaborations and to stay in touch.
Legal basis: performance of the contract (art. 6.1.b GDPR) and our legitimate interest (art. 6.1.f GDPR) in maintaining business contacts and making commercial proposals.
We send emails about your account, your application and collabs, and sometimes an update about the platform. For our emails we record whether they were delivered, opened and whether a link was clicked. We do this to see whether emails arrive and to improve our communication.
Legal basis: performance of the contract (art. 6.1.b GDPR) for emails that belong to your account or collab, and our legitimate interest (art. 6.1.f GDPR) for the statistics. You can unsubscribe from updates that are not part of an ongoing collab via the link at the bottom of the email.
When you visit our website, we process technical data such as your IP address, the type of device and browser, the pages you view and the page you came from. This is necessary to make the site work, keep it secure and improve it.
We also measure usage and the results of our advertising with the following services:
These services use cookies or similar techniques and pass data on to the provider. That only happens after you have given your consent in our cookie banner (art. 6.1.a GDPR). Google Analytics and Umami fall under "Statistics"; the pixels of Meta, TikTok and OpenAI fall under "Advertising". Without your consent we do not load them and we pass nothing on to these providers.
We keep your choice for 12 months in a cookie of our own (ss_consent) on your device. After that, or when we add a new service, we ask again. You can change or withdraw your choice at any time via "Cookie settings" at the bottom of every page. Besides this choice, we use necessary cookies, for example to keep you logged in, remember your language choice and keep the site secure. No consent is needed for those.
To be able to show that you made a choice, we record every choice in the banner in a log: the time, your choice for statistics and advertising, your previous choice, the language, the version of the banner and of this statement, the content of the cookie, your IP address, your browser type and, if you are logged in, your account. Legal basis: our legitimate interest in being able to show that a choice was made (art. 6.1.f GDPR; see also art. 7.1 GDPR). We use this log only as proof and to count choices, not to follow you.
We do not sell personal data.
Some of these service providers are located outside the European Economic Area. In that case we make sure a valid transfer mechanism is in place, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
We keep your data for as long as you have an active account or profile, and for up to 24 months after you deactivate it, unless we have to keep it longer to carry out an ongoing licence, to meet a legal obligation or to handle a dispute.
For linked accounts: we delete the tokens as soon as you unlink or Instagram or TikTok withdraws access. Figures we retrieved earlier are kept for the period above.
We keep the log of cookie choices for 36 months after the choice.
Data of people who have not signed up, we keep for as long as it is relevant to a possible collaboration, and delete on request.
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. If you gave consent, you can withdraw it at any time, without affecting the lawfulness of the processing before the withdrawal.
You can exercise your rights by emailing privacy@thesundaysquad.com. We reply within 30 days. Sometimes we first ask you to confirm your identity, so that we do not give your data to the wrong person.
Do you want us to delete your data? Email privacy@thesundaysquad.com with the email address of your account. We delete your data within 30 days, except what we still have to keep by law or for an ongoing agreement. We will tell you what that is.
You can unlink a linked account in two ways:
If you also want the figures we already retrieved to be deleted, email privacy@thesundaysquad.com.
We take appropriate technical and organisational measures to protect your data, including encrypted connections, encrypted storage of passwords and tokens, and limited access to data. Still, no system is completely secure. If you notice anything suspicious, please let us know.
If we cannot resolve something together, you can lodge a complaint with the Belgian Data Protection Authority:
Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels contact@apd-gba.be www.gegevensbeschermingsautoriteit.be
If something important changes in how we handle your data, we publish a new version of this statement and let those we can reach by email know. Earlier versions remain available at a fixed address, for example /privacy/v1/.
Version 1.1 — 24 October 2026: we record your choice in the cookie banner as proof, see "Our website" and "How long we keep data".
Version 1 — 24 October 2026: first version of the privacy statement.
Last updated: October 2026 Yeyecatoo BV, trading under the commercial name Sunday Squad Molenstraat 205, 2840 Rumst, Belgium — BE 0810.903.766 privacy@thesundaysquad.com — thesundaysquad.com