Privacy Policy


Privacy Notice

We take your privacy very seriously.


What personal data we hold on you

Personal data means any information about an individual from which that individual can be identified.


We collect, use, store and transfer some personal data of our members/supporters [and their parents or guardians].


You provide information about yourself when you register with the Club, and by filling in forms at an event or online, or by corresponding with us by phone, e-mail, face-to-face or otherwise.


The information you give us may include your name, date of birth, address, e-mail address, phone number, gender. We may also ask for relevant health information, which is classed as special category personal data, for the purposes of your health, wellbeing, welfare and safeguarding. Where we hold this data, it will be with the explicit consent of the member or, if applicable, the members parent or guardian.


Where we need to collect personal data to fulfil Club responsibilities and you do not provide that data, we may not be able honour or administer your membership.


Please note, this website contains links to other websites which are provided for your convenience. We are only responsible for the privacy practices and security of this site. We recommend that you check the privacy and security policies and procedures of each and every other website that you visit.


By using this website and giving your information to us, you indicate your consent to us and our commercial partners collecting and using your personal information in accordance with the terms set out in this policy.


We may need to change the terms of this Policy from time to time and changes will be posted on this page (and/or where appropriate, otherwise notified to you). Your continued use of the Site will be deemed to be acceptance of amendments we make.


Why we need your personal data

All personal information that we collect about you will be recorded, used, and protected by us in accordance with applicable GDPR legislation and this privacy policy. We may supplement the information that you provide with other information that we obtain from our dealings with you or which we receive from other organisations, for example, our sponsors and partners.


We will only use personal data for any purpose for which it has been specifically provided.


How we use your personal data

We request that the information you provide is as accurate as possible as this allows us to secure your privacy by differentiating you from others, and creating a “profile” for you so that we can provide a personalised service when you visit the Site and/or we send you emails. Periodically we may send you an email asking you to “Update your Details”. When you go to the update your details section of your account you will be able to specify what we can contact you regarding. There are two options to opt-in or out of which are highlighted below:


Opt-in to receive updates from St Albans City FC – by opting-in to this you will receive regular updates, offers and information regarding ticketing, hospitality, conferences & events, retail, competitions and any breaking news;

Opt-in to receive updates from official partners and selected third parties – by opting-in to this you will receive offers and information from official club partners and selected third parties that the club work with.

If you leave both options unticked the club will no longer contact you.


The only item of personal data that it is obligatory to provide to receive information from us is your email address. However, the more you tell us about yourself, the more we can tailor our communication to your needs. Use of services accessed through the Site may require you to provide further or specific types of information.


We use information about you for these primary purposes:

To perform the services you have requested, such as sending you our newsletters and other information about us. The type of information we may use might include, for example, your name, address, email address, date of birth, telephone number and card or other payment details in relation to goods or services you purchase from us through the Site or otherwise. We will NEVER share your financial information with other third parties for any reason other than processing transactions, fraud and credit risk protection, unless we have your explicit consent.

To alert you to other information, including offers and promotions, relating to us, National League and/or (except where you have indicated otherwise) commercial partners. See below heading ‘Marketing Information’ for more information about this. For example, such information may include newsletters, offers, promotions, occasional surveys and other communications of potential interest from us, our official partners, or National League official partners.

To carry out market research so that we can improve the products and services we offer. Your feedback is valued and helps to shape the products and services we offer. You will have the right to opt-out of receiving or participating in our surveys at any time.

To manage and improve the Site and allow you to use the features offered by the Site. Information we use for this purpose may include (for example) that about your computer and, where available, your IP address, operating system, location and browser type.

We may also supplement the information that you provide with other information that we obtain from our dealings with you or which we receive from other organisations such as our commercial partners and group companies.

In addition, we reserve the right to perform statistical analysis of user behaviour and characteristics to measure interest in and use of the various areas of the Site and to ascertain the number of users that have visited particular web pages. We also keep track of what you do with our newsletters when you receive them for trends and statistics and to evaluate the efficiency of our newsletter and information service. We may provide aggregated and anonymised data (not identifying any individual) only from these analyses to third parties.


Marketing Information

News, offers and opportunities from us and our sponsors and partners (which we provide only with your consent)


We do not sell, rent, or otherwise provide personally identifiable information to third-parties without your consent, except only as set out in the ‘Disclosing (Sharing) of Your Information’ section below.


From time-to-time we, and/or our commercial partners (if you have agreed to receive their information when you provided your personal information) would like to contact you to tell you more about the offers, services, products and other initiatives available to you.


We and/or our commercial partners will only contact you by electronic means if you have consented to this. However, if you are an existing member (and have not opted out) we may contact you by electronic means about services, products and initiatives similar to those you have previously received or enquired about (unless you have chosen not to receive such electronic communications).


If, at any time after registering, you would like to change your preference and opt-in or opt-out from receiving communications from us or third-parties you can do this at any time by logging into your account and unsubscribing.


Cookies

The Site uses cookies. A cookie is a small file containing an identity code. With your consent, your computer accepts the cookie and stores it. When you next visit the Site, the code is retrieved, allowing an individual visitor or computer to be recognised. Full information on which cookies we deploy is available in our Cookie Policy.


We are not responsible or liable for the content, privacy policies or services offered by websites other than the Site, including those that link from the Site. We encourage you to read and familiarise yourself with the privacy policies, terms and conditions and/or other notices on other websites you visit.


Children and Young People

We realise and understand that children and young people under the age of 18 (“minors”) may visit the Site, or otherwise interact with us and our commercial partners. It is our policy:


to encourage all minors to consult with their parents or legal guardian before submitting any content or information to us, our commercial partners or other third parties. Users of the Site, or certain services on it, who indicate they are a minor may be asked to provide a valid email address for their parent or guardian so that we may verify parental consent, where required;

not to make a minor’s participation in our activity contingent on the child disclosing any more personal information than is reasonably necessary in order to do so. Anyone known to be a minor may be allowed to participate in certain competitions and promotions, but notification of a win or prize will be sent directly to the parent or legal guardian identified in the initial registration process. Publication of a winning minor’s personal details will require parental or legal guardian consent;

not to actively market to minors; and

not use (or pass to any third party) personal information on persons known to be minors for any commercial purposes.

Some of the facilities or functions accessible through the Site (including betting facilities advertised or accessed through it) are not intended to be accessible by, nor are they actively advertised to, minors.


Parents or legal guardians should supervise minors when online and we recommend parental control tools be put in place. Any minor using the Site and services offered is confirming that they have received the consent of their parent or a guardian to do so.


Storing and retaining your personal data

We are committed to protecting the security of your personal data, which is held in secure data centres in the United Kingdom in accordance with current legislative requirements, industry standards and technology. We will keep the personal data you have provided for as long as we have a relationship with you; once that relationship has ended we will retain it in accordance with this Policy only for as long as we reasonably require and it will then be deleted and destroyed.


Some of the organisations to which we may disclose your personal information after we have obtained your consent (including, but not limited to, our commercial partners) may be situated outside of the European Economic Area, in countries which may not have laws that protect privacy rights as extensively as in the EU or United Kingdom, though we will take all reasonable steps to ensure that your information is still properly protected.


How long we hold your personal data

We keep your personal data as a member while you continue to be a member or are otherwise actively involved with the Club. We will delete this data 12 months after you have ended your membership or affiliation, or sooner if specifically requested and we are able to do so. We may need to retain some personal data for longer for legal or regulatory purposes.


Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.


Once your personal data is received, we store it safely, as set out in this Policy. We do not store any unnecessary financial information, however if you do provide this we encrypt it for additional security.


We cannot guarantee the complete security of our databases, nor that information you supply will not be intercepted while being transmitted to us over the Internet.


If we have given you a password to access certain parts of the Site, you are solely responsible for keeping the password safe and make sure you use a secure browser.


Disclosure (sharing) of your information

We have already described in the ‘Marketing Information’ section of this Policy under what circumstances your personal information may be shared with our commercial and official partners, if you have agreed.


In addition, there are some other reasons why we may disclose your personal information to third parties and these are as follows:


to other companies within our corporate group; and to appoint other organisations to carry out some data processing activities on our behalf. For example, mailing services, payment processing and hosting service providers;

if we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our supporters/members will be one of the transferred assets;

if we are under a duty to disclose or share your personal data to comply with any legal obligation, or to enforce or apply our terms of use or terms and conditions of supply of any of the services provided by us (for example our ground regulations) and other agreements; and/or

protect the rights, property, or safety of us, our commercial partners, our supporters, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction;

Where we share your personal information with third parties we will take all possible steps to ensure that it is properly protected and processed in accordance with this Policy.

Your rights regarding your personal data

As a data subject you may have the right at any time to request access to, rectification or erasure of your personal data; to restrict or object to certain kinds of processing of your personal data, including direct marketing; to the portability of your personal data and to complain to the UK’s data protection supervisory authority, the Information Commissioner’s Office about the processing of your personal data.


As a data subject you are not obliged to share your personal data with the Club. If you choose not to share your personal data with us we may not be able to register or administer your membership.


We may update this Privacy Notice from time to time, and will inform you to any changes in how we handle your personal data.


Accessing your personal information:

You have the right to see a copy of the information that we hold about you. Please contact [email protected], you will be required to complete a subject access request form and the club will endeavour to fulfil this request for you in a reasonable, timely manner.


Update and amend your personal information:

You have the right to ask that the information we hold about you is corrected by updating/changing your profile preferences or by contacting us as above. We encourage you to update your personal information promptly if it changes.


Opt-out of being contacted:

You have the right to ask that we and/or our commercial partners stop contacting you by accessing your online account and clicking the relevant boxes on the screen upon which you provide information or by contacting us at [email protected].


Close your account/delete your personal information:

You (and any parent/guardian of a minor) have the right to request that we close your account and/or delete your personal information from our database. We will make all reasonable efforts to comply with this request. However, it may not be possible to delete an entry without some delay and without retaining some residual personal information because of backups and records of deletions (including to ensure we no-longer communicate with you) or because we are required to retain personal information for other lawful requirements.


Where to make a complaint

If you have a complaint regarding any aspect of your personal data or this privacy policy, please write to us at the above address. If you are still not satisfied with the outcome of your complaint, you may write to the Information Commissioner’s Office at the following address:


Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF


You can also contact the Information Commissioner’s Office using their online form: https://ico.org.uk/global/contact-us/email/


This Policy was last updated in May 2018.


Contacting us

If there are any questions regarding this privacy policy you may contact us using the information below.

www.stalbanscityfc.com

St Albans

Clarence Park

AL1 4PL

UK

[email protected]


Privacy Policy - Kaizen

Introduction

This policy sets out how we collect, process and hold your personal data if you visit our online shop or otherwise provide personal data to us. We are Kaizen Ticketing Solutions LTD of 459b Green Lanes, London, N13 4BS. We are the data controller of your personal data.

This policy affects your legal rights and obligations so please read it carefully. If you have any questions, please contact us via email or call us on 0208 858 0709.

Personal data we collect

We collect, process, store and use personal data when you book a ticket or purchase a piece of merchandise including your name, address and email address together with payment information. We may also collect personal data that you give to us about other people if you register them to attend an event. You agree that you have notified any other person whose personal data that you provide to us of this privacy notice and, where necessary, obtained their consent so that we can lawfully process their personal data in accordance with this policy.

All personal data that you provide to us must be true, complete and accurate. If you provide us with inaccurate or false data, and we suspect identify fraud, we will record this.

You do not need to provide us with any personal data to view our online shop. However, we may still collect the information set under the Data we automatically collect section of this policy, and marketing communications in accordance with the Marketing Communications section of this policy.

When you contact us by email or post, we may keep a record of the correspondence and we may also record any telephone call we have with you.

Data we automatically collect

When you visit our online shop, we, or third parties on our behalf, automatically collect and store information about your device and your activities. This information could include (a) your computer or other device's unique ID number; (b) technical information about your device such as type of device, web browser or operating system; (c) your preferences and settings such as time zone and language; and (d) statistical data about your browsing actions and patterns. We collect this information using cookies in accordance with the Cookie section of this policy and we use the information we collect on an anonymous basis to improve our online shop and the services we provide, and for analytical and research purposes.

Marketing Communications

If you opt in to receive marketing communications from us you consent to the processing of your data to send you such communications, which may include newsletters, blog posts, surveys and information about new events. We retain a record of your consent.

You can choose to no longer receive marketing communications by contacting us via email, clicking unsubscribe from a marketing email or updating your preferences in your online account. If you do unsubscribe to marketing communications, it may take up to 5 business days for your new preferences to take effect. We shall therefore retain your personal data in our records for marketing purposes until you notify us that you no longer wish to receive marketing emails from us.

Lawful processing of your personal data

We will use your personal data in order to comply with our contractual obligation to supply to you the tickets to an event that you have booked or merchandise you have ordered, including to contact you with any information relating to the event or merchandise, and to deal with any questions, comments or complaints you have in relation to the event or merchandise.

We may also use your personal data for our legitimate interests, including dealing with any customer services you require, enforcing the terms of any other agreement between us, for regulatory and legal purposes (for example anti-money laundering), for audit purposes and to contact you about changes to this policy.

Who do we share your data with?

We may share your personal data with any service providers, sub-contractors and agents that we may appoint to perform functions on our behalf and in accordance with our instructions, including payment providers, email communication providers, IT service providers, accountants, auditors and lawyers.

Under certain circumstances we may have to disclose your personal data under applicable laws and/or regulations, for example, as part of anti-money laundering processes or protect a third party's rights, property, or safety.

We may also share your personal data in connection with, or during negotiations of, any merger, sale of assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

Where we hold and process your personal data

Some or all of your personal data may be stored or transferred outside of the European Union (the EU) for any reason, including for example, if our email server is located in a country outside the EU or if any of our service providers or their servers are based outside of the EU. We shall only transfer your personal data to organisations that have provided adequate safeguards in respect of your personal data.

Cookies

A cookie is a small text file containing a unique identification number that is transferred (through your browser) from a website to the hard drive of your computer. The cookie identifies your browser but will not let a website know any personal data about you, such as your name and/or address. These files are then used by websites to identify when users revisit that website.

Our online shop uses cookies so that we can recognise you when you return and personalise your settings and preferences. Most browsers are initially set up to accept cookies. You can change your browser settings either to notify you when you have received a cookie, or to refuse to accept cookies. Please note that our online shop may not operate efficiently if you refuse to accept cookies.

We also use Google Analytics to monitor how the online shop is used. Google Analytics collects information anonymously and generates reports detailing information such as the number of visits to the online shop, where visitors generally came from, how long they stayed on the site, and which pages they visited. Google Analytics places several persistent cookies on your computer's hard drive. These do not collect any personal data. If you do not agree to this you can disable persistent cookies in your browser. This will prevent Google Analytics from logging your visits.

Security

We shall process your personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. All information you provide to us is stored on our secure servers. Any payment transactions are encrypted using SSL technology.

Where we have given, or you have chosen a password, you are responsible for keeping this password confidential.

However, you acknowledge that no system can be completely secure. Therefore, although we take these steps to secure your personal data, we do not promise that your personal data will always remain completely secure.

Your rights

You have the right to obtain from us a copy of the personal data that we hold for you, and to require us to correct errors in the personal data if it is inaccurate or incomplete. You also have the right at any time to require that we delete your personal data. To exercise these rights, or any other rights you may have under applicable laws, please contact us via email.

Please note, we reserve the right to charge an administrative fee if your request is manifestly unfounded or excessive.
If you have any complaints in relation to this policy or otherwise in relation to our processing of your personal data, you should contact the UK supervisory authority: the Information Commissioner (www.ico.org.uk).

Our online shop may contain links to other sites of interest. Once you have used these links to leave our site, you should note that we do not have any control over that other site. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this policy. You should exercise caution and look at the privacy policy applicable to the site in question.

Retention

If you register with us, we shall retain your personal data until you close your account.
If you receive marketing communications from us, we shall retain your personal data until you opt out of receiving such communications.
If you have otherwise made a booking with us or contacted us with a question or comment, we shall retain your personal data for 48 months following such contact to respond to any further queries you might have.

General

If any provision of this policy is held by a court of competent jurisdiction to be invalid or unenforceable, then such provision shall be construed, as nearly as possible, to reflect the intentions of the parties and all other provisions shall remain in full force and effect.

This policy shall be governed by and construed in accordance with the law of England and Wales, and you agree to submit to the exclusive jurisdiction of the English Courts.
We may change the terms of this policy from time to time. You are responsible for regularly reviewing this policy so that you are aware of any changes to it. If you continue to use our online shop after the time we state the changes will take effect, you will have accepted the changes.