Privacy Policy for WHITSTABLE TOWN FOOTBALL CLUB


The event organiser, WHITSTABLE TOWN FOOTBALL CLUB, has the legal responsibility to tell ticket buyers and event attendees how their personal information will be collected and used. You can find their Privacy Policy below or contact them to request it.

Privacy Policy – Whitstable Town Football Club

1. Introduction

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our event ticket shop or otherwise provide your personal data to us.

Whitstable Town Football Club (“we”, “us”, “our”) is the data controller responsible for your personal data.

Our details:
Whitstable Town Football Club
The Belmont Stadium
Belmont Road
Whitstable
Kent
CT5 1QJ

Email: enquiries@whitstabletownfc.club
Telephone: 01227 266012

This policy affects your legal rights and obligations, so please read it carefully.

2. Personal Data We Collect

We may collect, use, store and transfer the following personal data:

  • Name
  • Address
  • Email address
  • Telephone number (where provided)
  • Payment information (processed securely via third-party providers)
  • Details of tickets, products or services purchased
  • Any personal data you provide when contacting us

You may also provide personal data relating to other individuals (e.g. when booking tickets on their behalf). You confirm that you have informed them of this policy and, where required, obtained their consent.

All personal data provided must be accurate and complete. We reserve the right to investigate and record suspected fraudulent activity.

3. Data We Automatically Collect

When you visit our website or ticket shop, we may automatically collect:

  • Device information (device type, operating system, browser type)
  • IP address and unique device identifiers
  • Time zone and language preferences
  • Browsing behaviour and usage data

This data is collected using cookies and similar technologies (see Section 10).

4. How We Use Your Personal Data (Lawful Basis)

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

Contract

To:

  • Process and fulfil ticket purchases
  • Provide products and services
  • Manage event attendance
  • Communicate important event information

Legitimate Interests

To:

  • Operate and improve our services
  • Provide customer support
  • Prevent fraud and misuse
  • Administer our business effectively
  • Respond to enquiries or complaints

We ensure our legitimate interests do not override your rights.

Legal Obligation

To:

  • Comply with HMRC and financial regulations
  • Meet legal and regulatory requirements

Consent

To:

  • Send marketing communications (where required under PECR)
  • Use non-essential cookies

You can withdraw consent at any time.

5. Marketing Communications

We may send you marketing communications about events, news, and offers where:

  • You have provided your consent; or
  • You have purchased from us, and we are permitted to contact you under the “soft opt-in” rules (for similar events and services)

You can opt out at any time by:

Please note that it may take up to 5 working days for changes to take effect.

6. Sharing Your Personal Data

We may share your personal data with trusted third parties, including:

  • Payment processors
  • Ticketing platforms
  • IT and website service providers
  • Email communication providers
  • Professional advisers (accountants, auditors, lawyers)

All third parties are required to process your data securely and in accordance with our instructions.

We may also disclose your data where required by law or to protect rights, property or safety.

7. International Transfers

Some of our service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, including:

  • UK-approved Standard Contractual Clauses (SCCs), or
  • Transfers to countries deemed to have adequate protection

8. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

  • Secure servers
  • Encrypted payment processing (SSL)
  • Restricted access to personal data

However, no system is completely secure, and we cannot guarantee absolute security.

If you are issued with login details or a password, you are responsible for keeping them confidential.

9. Data Retention

We retain personal data only for as long as necessary:

  • Ticketing and financial records: up to 6 years (legal requirement)
  • Marketing data: until you withdraw consent or opt out
  • General enquiries: up to 12 months
  • Account data (if applicable): until account closure

We may retain data longer where required by law.

10. Cookies

Our website uses cookies to improve your experience.

Cookies may include:

  • Essential cookies – required for site functionality
  • Analytics cookies – to understand how visitors use our site (e.g. Google Analytics)
  • Preference cookies – to remember your settings

Non-essential cookies will only be used with your consent via our cookie banner.

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect website functionality.

11. Children’s Data

We may collect personal data relating to children where tickets or registrations are made for youth activities or events.

In such cases:

  • Data should be provided by a parent or legal guardian
  • We take additional care to protect children’s data
  • We only use such data for the specific purpose for which it was provided

12. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request the deletion of your data
  • Restrict processing of your data
  • Object to processing (including marketing)
  • Withdraw consent at any time
  • Request transfer of your data (data portability)

To exercise any of these rights, contact: enquiries@whitstabletownfc.club

We may charge a reasonable administrative fee for excessive or unfounded requests.

13. Complaints

If you are unhappy with how we handle your data, you can contact:

Information Commissioner’s Office (ICO)
Website: www.ico.org.uk

We would, however, appreciate the opportunity to resolve your concerns first.

14. Third-Party Links

Our website may contain links to external websites. We are not responsible for their privacy practices, and you should review their policies separately.

15. Changes to This Policy

We may update this policy from time to time.

You are responsible for reviewing this page periodically. Continued use of our website constitutes acceptance of any changes.

16. GoverLawg Law

The laws of England and Wales govern this policy. Any disputes shall be subject to the exclusive jurisdiction of the English courts.