We handle and process data in accordance with the General Data Protection Regulation 2018 (“GDPR”) and the Privacy and Electronic Communications Regulations 2003.
We are committed to protecting and respecting your data and privacy, and this policy details how we collect, handle and process data in regards to personal information.
The legal basis for collecting and processing your data may be:
- Consent – you may have given us your consent to use your data for example when you tick a box to receive marketing emails, offers and newsletters. You can withdraw your consent at any time.
- Contractual obligation – to enter into a contract with us we need your personal information (including financial information) to process and fulfil the contract for example to make a booking; buy a ticket for an event or make a donation.
- Legal obligation – if required by law to process personal information for example to comply with health and safety and equality obligations or to provide information to the police to prevent fraud or criminal activity.
- Legitimate interest – for a genuine business reason that does not override your rights, freedom or interests for example administrative purposes, or using your purchase history to send you personalised offers.
Collecting Information
them so we can make sure we are sending you relevant information. We may track subsequent online actions.
With regard to each of your visits to our Website we collect the following information:
- technical information, including the Internet protocol (IP) address used to connect your computer/device to the Internet,
- information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed or searched for etc. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our site.
Using Information
The above information is used to:
- provide our services to you and enable us to process, administer and manage your orders, contracts, accounts and;
- create an account so that we understand and respect your preferences;
- inform you about changes to our products and services or new products and services;
- inform you about fundraising activities, programmes and holiday clubs and sessions offered;
- inform you about YCFC matches and events with which The Foundation are associated or involved with;
- communicate information about any agreement you may have with us or have enquired about;
- inform you about offers, events and promotions that may be of interest to you;
- improve the services We offer you (which may sometimes include undertaking customer research);
- keep a record of your relationship with us and how you prefer to be contacted;
- analyse your personal information to create a profile of your interests and
- Funders for compliance purposes, research, reporting and improvement of strategic planning and business decisions or funding;
- Email distribution service;
- SMS distribution service;
- IT companies who support our Website and other business services;Analytical or search engine provider to assist us with the improvement or optimisation of our Website;
- Credit reference agency for the purpose of assessing your cred
- it score where this is a condition of us entering into a contract with you.
- York City Football Club in respect of the accounting and administrative support services provided to the Foundation;
We may share personal information with other organisations such as the Premier League and Premier League Charitable Fund, the English Football League and English Football League Trust, the FA, the County FA, the Office for National Statistics and other governing bodies and funders for compliance purposes, research, reporting and improvement of strategic planning and business decisions or funding.
We never sell personal information to third parties.
Our Website may, from time to time, contain links to and from the websites of our commercial partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Children and Young People’s Privacy
We understand that children and young people under the age of 14 years (“Children”) may visit our Website and use our services. Children
The information we may collect, hold and process about you, provided by you, may include:
- Name
- Address
- Email address
- Telephone number(s)
- Bank details and/or payment details
- Gender
- Dietary requirements
- Health and genetic information
- Billing information
- Details of other people within your group booking including name and age
- Purchase/transaction history
- Your preference for how we communicate with you about our activities
- Photographs
- IP address
- Information gathered by use of cookies in your web browser
- Information that is available publicly, including social media username if you interact with us through social media channels
- Record of accidents and treatment received
Information is provided to us when you contact us with an enquiry; use or register on our Website; forward an item to a friend; make a purchase, booking or donation; fill out a survey or other form; request us to provide you with information; enter a competition or prize draw or engage in a promotion or survey; book an event or fundraising activity or engage in one of our programmes, holiday clubs or sessions, by phone or email or online via our Website or via or OfficialSoccerSchools; sign up for a newsletter or update preferences; contact us via email, mobile messaging or when posting on or communicating via our social medial platforms; become a sponsor, advertiser or funder; become a mascot or provide content for our materials or by communicating with us via any other channel.
We maintain a record of your transaction history, but we never store your payment card number/paypal history.
We keep a record of the emails we send you, and we may track whether you receive or open
- preferences so we can contact you with information most relevant to you;
- to administer prize draws and competitions you have entered;
- to resolve an enquiry or progress a complaint;
- comply with legal and regulatory obligations placed on The Foundation.
Storing Information
All personal information we hold is stored on our secured servers in the UK and EU.Access to our information is strictly controlled. We may disclose your details to police, regulatory bodies, local authorities, football governing bodies and the Independent Football Ombudsman or legal advisors if so required. If any of the organisations to which we disclose your personal information is situated outside the European Economic Area (EEA) we would take reasonable steps to ensure that your information is properly protected including safeguards such as using contractual provisions to ensure your information is properly protected.
Sharing Information
We do not share your information with any third party without your agreement unless we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use or terms and conditions of purchase and other agreements; or to protect the rights, property, or safety of The Foundation, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Any third party providers used by us to fulfil our contractual obligations to you will only collect, use, store and disclose your information in the manner and to the extent necessary for them to provide their services to us. We have written agreements in place with each third party to ensure that your information is kept securely, is not used for any other purpose and is deleted when no longer required.
Such third party providers may include:
-
may need their parent or guardian’s permission to do this and may be asked to confirm they have that permission and we reserve the right to verify parental or guardian consent where required.
We do not actively market to Children. We do not share Children’s personal information for any commercial purpose.
Individuals Rights
You have the right at any time to ask for a copy of the information we hold about you and confirmation of how it is being processed. You will be required to verify your identity when making a request.
You also have the right to request that we correct inaccuracies to your information, and request that we delete some or all of your personal information for example if it is no longer necessary for us to hold it for the purpose it was provided and we have no legal basis to retain it.
If you would like to make a request for information or to notify us of any updates, amendments or corrections to previously collected, please email [email protected]
COVID Protocol
The Government regulations in regards to Test, Track and Trace relating to COVID 19 supersede all policy and procedure.
Sharing of information will only be done where necessary to meet the guidelines.
COVID consent from each individual participant & their family/household, will represent confirmation of agreement to take part in the scheme as this is required prior to attendance in the relevant programme.