Slough Town FC is committed to protecting your personal data and handling it responsibly.
This policy covers the personal data that Slough Town FC collects whenever you interact with us, including when you use our websites and apps, when you attend events at Arbour Park, and when you correspond with us (such as by email or over the phone). It also covers personal data that we may receive from third parties.
The sections below explain in more detail:
- the types of personal data we collect from you
- the types of personal data we receive from third parties
- why we process your personal data
- who we share your personal data with
- personal data transfers outside of the EEA
- how long we retain your personal data
- your rights to withdraw your consent and to object (including to direct marketing)
- your other personal data rights
- how to contact us and exercise your rights
Personal data Slough Town FC collects from you
We collect personal data from your interactions with us, such as when you engage with our websites and apps, attend an event at Arbour Park, or when you email or phone us.
The personal data we collect from you includes:
- the name and contact details that you provide when you purchase tickets or goods from our clubshop
- your payment and address details
- your marketing preferences, including any consents you have given us
- your browser or device information
- information about your use of our websites and apps
- your communications with us
- information about your attendance at Arbour Park. Photos and video footage of you may be taken at these events
Personal data Slough Town FC receives from third parties
Sometimes we receive personal data from third parties, in particular:
- our commercial partners provide us with your name and contact details if you’ve asked to receive information from Slough Town FC
- our commercial partners provide us with your name and contact details if you’ve purchased an item from our online clubshop
- ticketing providers let us know if you’ve purchased tickets to an event at Arbour Park
- access control providers let us know if your tickets have been used at Arbour Park
- agencies who partner with Slough Town FC in the Community may share information with us about participants that we refer to them
Why Slough Town FC processes your personal data
This section explains the reasons why we process your personal data and our legal bases for doing so.
Consent - If you’ve opted-in to receive information and offers relating to the Club and our commercial partners (for example by ticking a box on one of our websites or apps), then we’ll provide this information to you by email, text, or phone.
We also rely on your consent to process information about your use of our websites, apps and social media sites, so that we can improve your browsing experience and deliver online advertising that is relevant to you.
Wherever we rely on your consent to process personal data, you have a right to withdraw that consent.
Legitimate interests - We process your personal data when necessary to pursue our legitimate interests in the following:
- tailoring our websites and communications for you. We collect information about your engagement with us online (such as pages that you have visited on our websites or apps) and combine that with aggregated insights we have about our supporter base, to build a fuller understanding of your individual preferences
- monitoring, improving and protecting our products, content and services
- checking the credit or debit card details you provide (to process your payments and prevent fraudulent transactions)
- sending you some types of direct marketing, including by email and post
- responding to your comments or complaints
- preventing, investigating and/or reporting fraud, terrorism, misrepresentation, security incidents or crime
- to protect the security of our spectators, staff and other visitors; to enforce our ground regulations; and to help detect and prevent unlawful activity using, for example, incident reports and CCTV footage
- managing legal claims, compliance, regulatory and investigative matters
- administering programmes run by us or our partner agencies that you have chosen to participate in
Contract - We process your personal data when necessary for contractual reasons, such as to administer your account registration and competition entries and to provide products and services that you have requested.
Legal obligation - We are legally required to process your personal data in cases where we need to:
- obtain parental consent to provide services
- respond to certain requests by government or law enforcement authorities
- work with with local Council safety requirements to collect CCTV footage of particular areas around Arbour Park
Who Slough Town FC shares personal data with
We will share your personal data with the following recipients:
- Commercial partners, so they can advise us how best to communicate with you on their behalf. We do not give your data to partners for them to communicate with you directly.
- Facebook, so that we can display relevant advertising to you on their platform (your data is converted into a unique ID before it is shared with Facebook)
- third party suppliers involved in: data insights; website hosting; online personalisation; advertising; systems maintenance; ticketing; database management; identity checking; payment processing; delivery logistics; facilities management; and credit and debt management
- government authorities, local Council or law enforcement officials, to assist with their official requests and comply with our legal obligations
- other football clubs, if we think it’s appropriate to inform them of incidents at Arbour Park involving their supporters
Personal data transfers outside of the EEA
The EEA includes all EU countries, as well as Iceland, Liechtenstein and Norway. Some of the third parties that we share personal data with may need to transfer personal data outside of the EEA, for example to the United States of America.
here your personal data is transferred to a country outside of the EEA and that country is not subject to an EU adequacy decision, we will ensure your data is protected by appropriate safeguards (for example, EU approved standard contractual clauses, a Privacy Shield certification, or a supplier’s Binding Corporate Rules).
How long Slough Town FC retains personal data
We retain personal data about your Season Ticket for as long as you are a member, and for a limited period of time afterwards.
We retain personal data relating to your purchases for several years from the date of the relevant transaction. This is to understand your purchasing preferences and to meet our legal and contractual obligations. If your purchase has enduring relevance then we’ll keep relevant information for as long as we remain responsible to you for that purchase.
Where you have asked us not to send you direct marketing, we keep a record of that fact to ensure we respect your request in future.
CCTV security footage from Arbour Park is held by Slough Borough Council for 30 days, unless we need to hold this data for longer to resolve an issue or to meet a legal requirement.
We also retain information with the potential to give rise to legal disputes for 7 years.
Your rights to withdraw consent and to object (including to direct marketing)
Wherever we rely on your consent to process personal data, you always have a right to withdraw that consent.
You also have the right to object to any use of your personal data for direct marketing purposes, as well as to processing that we undertake based on our legitimate interests (including profiling).
Your other personal data rights
In addition to your rights to withdraw your consent and to object, you have the right to ask us:
- for access to information about your personal data or for a copy of your personal data
- to correct or delete your personal data
- to restrict (i.e. stop any active) processing of your personal data
- to provide you with certain personal data in a structured, machine readable format and to transmit that data to another organisation
- These rights may not always apply, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have a compelling legitimate interest in keeping. If this is the case then we’ll let you know when we respond to your request.
How to contact us and exercise your rights
We will do our best to assist with any queries you have about your personal data. You can contact our Data Protection Officer at any time using the contact details below. When you do so, please provide your full name, your preferred contact information, and a summary of your query.
Data Protection Officer
Slough Town FC, Stowe Road, Slough, Berks, SL1 5QF
If you have unresolved concerns, you also have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred. This is likely to be the Information Commissioner’s Office in the UK.