Peterborough United Football Club Ltd is a company registered in England and Wales our company number 290803.
Our registered office is at Peterborough United Football Club Limited, Weston Homes Stadium, London Road, Peterborough, PE2 8AL.

Overview
This is our updated privacy policy which falls in line with the General Data Protection Regulations (GDPR). This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data and keep it safe.

Maintaining the security of your data is a priority and we are committed to respecting your privacy rights. We pledge to handle your data fairly and legally at all times. We are also dedicated to being transparent about what data we collect about you and how we use it.

This policy provides you with information about:

• How we use your data
• What personal data we collect
• How we ensure your privacy is maintained
• Your legal rights relating to your personal data.

General
We use your personal data:

• To provide goods and services to you
• To manage any registered account(s) that you hold with us
• To verify your identity
• For crime and fraud prevention, detection, and related purposes
• With your agreement, to contact you electronically, by phone or direct mail about products and services which we think may interest you
• Where we have a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).

We use the information we collect about you from this website to process your order, manage your account and to keep you updated throughout the order/delivery process. Please provide telephone numbers in case we need to contact you about your order. You do not have to tell us your phone number, but it will help us to contact you quickly if we have a question about your order.

To complete your transaction, you will be transferred to a secure payment gateway. We will not store your payment details on this website.

Sharing data with third parties
To make certain services available to you, we may need to share your personal data with some of our service partners. These include IT, delivery and marketing service providers.

We only allows our service providers to handle your personal data when we have confirmed that they apply appropriate data protection and security controls. We also impose contractual obligations on service providers relating to data protection and security, which mean they can only use your data to provide services to us and to you, and for no other purposes.

Other third parties
Aside from our service providers, we will not disclose your personal data to any third party, except as set out below. We will never sell or rent our customer data to other organisations for marketing purposes.

We may share your data with:

• Our carefully selected partners who provide us with products and services (for example delivery agents).
• To comply with our legal obligations
• To exercise our legal rights (for example in court cases)
• For the prevention, detection, investigation of crime or prosecution of offenders
• For the protection of our employees and customers.

International transfers
To deliver products and services to you, it is sometimes necessary for us to share your data outside of the European Economic Area. This will typically occur when service providers are located outside the EEA or if you are based outside the EEA. These transfers are subject to special rules under data protection laws.

If this happens, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. Our standard practice is to use ‘standard data protection clauses’ which have been approved by the European Commission for such transfers. Those clauses can be accessed here.

How long do we keep your data?
Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.

What personal data do we collect?
We may collect the following information about you:

• Your name, age/date of birth and gender
• Your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address
• Purchases and orders made by you
• Your on-line browsing activities on our website
• Your password(s)
• Your communication and marketing preferences
• Your correspondence and communications with us

Our website is not intended for children and we do not knowingly collect data relating to children.

This list is not exhaustive, and, in specific instances, we may need to collect additional data for the purposes set out in this Policy.

How we protect your data
We are committed to keeping your personal data safe and secure.

Our security measures include: –

• Encryption of data
• Regular cyber security assessments of all service providers who may handle your personal data
• Regular scenario planning and crisis management exercises to ensure we are ready to respond to cyber security attacks and data security incidents
• Security controls which protect our entire infrastructure from external attack and unauthorised access
• Internal policies setting out our data security approach and training for employees.

What you can do to help protect your data
If you are using a computing device in a public location, we recommend that you always log out and close any website browser when you complete an online session.

In addition, we recommend that you take the following security measures to enhance your online safety both in relation to this website and more generally: –

•  Keep your account passwords private. Remember, anybody who knows your password may access your account.
• When creating a password, use at least 8 characters. A combination of letters and numbers is best. Do not use dictionary words, your name, email address, or other personal data that can be easily obtained. We also recommend that you frequently change your password.
• Avoid using the same password for multiple online accounts.

Your rights
You have the following rights:

• The right to ask what personal data that we hold about you at any time, subject to a fee specified by law (currently £25)
• The right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you free of charge
• The right to opt out of any marketing communications that we may send you (as set out above)

If you wish to exercise any of the above rights, please contact us at [email protected]

Legal basis for processing customer personal data
We collect and use customers’ personal data because is it necessary for:

• The pursuit of our legitimate interests (as set out below)
• The purposes of complying with our duties and exercising our rights under a contract for the sale of goods to a customer
• Complying with our legal obligations.

In general, we rely on legitimate interest as our legal basis for communications.

In accordance with the ICO (Information Commissioner’s Office) guidelines, if you have purchased a product through one of the E-Commerce portals, the contract (purchase) will form the lawful basis for processing.

Our legitimate interests
In accordance with the ICO (Information Commissioner’s Office) guidelines, a lawful basis for processing data is legitimate interests.

This includes that we have identified this as an appropriate basis and we only use customer data in ways they would reasonably expect.

Legitimate interests may include commercial interests by being a member of a professional body, personal introduction or in a sector with shared common interests or broader societal benefits.

We acknowledge that the following are in-line with legitimate interests as a basis:

• Selling and supplying goods and services to our customers
• Protecting customers, employees and other individuals and maintaining their safety, health and welfare
• Promoting, marketing and advertising our products and services
• Sending promotional communications which are relevant
• Improving existing products and services and developing new products and services
• Complying with our legal and regulatory obligations
• Preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies
• Handling customer contacts, queries, complaints or disputes
• Protecting our employees and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to us; – effectively handling any legal claims or regulatory enforcement actions taken against us
• Fulfilling our duties to our customers, colleagues, shareholders and other stakeholders.

Cookies
Our websites use cookies to collect information. This includes information about browsing and purchasing behaviour by people who access our websites. This includes information about pages viewed, products purchased and the customer journey around our websites. Detailed information is set out in our Cookie Policy.

How to stop the use of your personal data for processing, your right to withdraw
There are several ways you can stop direct marketing communications from us. If you have an account, log in into your account and change your preferences or email [email protected]

Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated.

Contact information
If you have any questions about how we use your personal data that are not answered here, or if you want to exercise your rights regarding your personal data, please contact us by any of the following means:

– e-mail us at: [email protected] or

– write to us at: Peterborough United Football Club Ltd, Weston Homes Stadium, London Road, Peterborough, PE2 8AL.

Updated
This policy was last updated in September 2020