Privacy Policy

1. Introduction

Shrewsbury Town Football Club Foundation, known as Shrewsbury Town Foundation ("we", "us", "our", or "the Foundation"), is committed to protecting and respecting your privacy. We are a registered charity in England and Wales (charity number 1125101) and a company limited by guarantee (company number 06614473). This Privacy Policy explains what personal data we collect about you, how and why we use it, who we share it with, how long we keep it, and the rights you have in relation to your personal data.

It applies to personal data we collect through this website and any related online services we operate, and to personal data you give us when you interact with the Foundation.

We are the data controller responsible for your personal data.

Our contact details:
Shrewsbury Town Football Club Foundation
The Croud Meadow, Oteley Road, Shrewsbury, SY2 6ST
Telephone: 01743 289177
Email: admin@foundationstfc.co.uk

If you have any questions about this policy or how we handle your personal data, please contact us using the details above.

2. Scope of this Policy

This policy covers personal data collected through this website. Some services are delivered through trusted third-party platforms that operate under their own privacy policies, including:

• Donations – made through JustGiving. When you donate, JustGiving's privacy policy applies in addition to this one.
• Shrewsbury Town Football Club – the football club is a separate organisation with its own website and privacy policy.

Where you follow a link to one of these services, we encourage you to read the relevant provider's privacy policy. We are not responsible for the privacy practices of third-party websites or services.

3. The Personal Data We Collect

We may collect, use, store and transfer the following categories of personal data about you:

• Identity Data – your name, username or similar identifier, title, date of birth and gender (where relevant).
• Contact Data – your postal address, billing address (where different), email address and telephone numbers.
• Transaction Data – details of payments and donations to and from you. Card payments are processed securely by our payment and fundraising providers; we do not store full card details ourselves.
• Technical Data – your internet protocol (IP) address, browser type and version, time zone setting and location, operating system, device information and other technology on the devices you use to access this website.
• Usage Data – information about how you use our website, including pages visited and links clicked.
• Marketing and Communications Data – your preferences in receiving marketing from us and your communication preferences.

We do not routinely collect any special categories of personal data (such as data about health, race or ethnicity) through this website. Where we do need to collect such data for a specific purpose (for example, health or accessibility information so that you can take part safely in one of our programmes), we will tell you and rely on an appropriate lawful basis.

4. How We Collect Your Personal Data

We collect personal data:

• Directly from you – when you create an account, sign up for or enquire about one of our programmes, sign up for newsletters or communications, enter a competition or survey, or contact us.
• Automatically – as you interact with our website, through cookies and similar technologies.
• From third parties – such as fundraising platforms (for example JustGiving) and analytics providers, where you have used those services.

5. How and Why We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly we use it under one or more of the following lawful bases:

• Performance of a contract – to provide the programmes and services you sign up for, and to manage your account.
• Legitimate interests – to run and improve our website and services, keep them secure, understand how participants and supporters use them, and (where appropriate) to keep you informed about the Foundation.
• Consent – where you have given us permission, for example to send you certain marketing communications.
• Legal obligation – to comply with our legal and regulatory duties.

Specific purposes for which we use your data include:

• Processing programme bookings, enquiries and donations
• Managing your account and supporter relationship
• Sending you marketing communications you have requested
• Responding to your enquiries and providing customer support
• Operating, maintaining, securing and improving our website and services
• Complying with our legal obligations

We will not sell your personal data to third parties.

6. Marketing and Your Choices

We may send you news and updates about the Foundation, our programmes and our fundraising where you have agreed to receive them, or where we are otherwise permitted to do so by law. You can opt out of marketing communications at any time by:

• Using the "unsubscribe" link in any marketing email; or
• Contacting us at admin@foundationstfc.co.uk; or
• Updating your preferences in your account.

Opting out of marketing will not stop us sending you service-related messages, such as order confirmations or important updates about your account.

7. Cookies

Our website uses cookies and similar technologies to make the site work, to remember your preferences and to understand how the site is used. You can control cookies through your browser settings and our cookie controls.

8. Who We Share Your Personal Data With

We may share your personal data with:

• Service providers and processors acting on our behalf – including our website hosting and development provider, payment processors, email and marketing platforms, and analytics providers. These parties are only permitted to process your data on our instructions and under a written contract that requires them to keep it secure.
• Fundraising platforms such as JustGiving, where you donate through them.
• Regulators, law enforcement and other authorities where we are required to do so by law.
• Professional advisers such as lawyers, auditors and insurers where necessary.

This website is hosted and maintained on our behalf by our website provider, Shoothill Ltd, who acts as a data processor in relation to data collected through the site and processes it only on our instructions.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

9. International Transfers

We aim to store and process your personal data within the UK and the European Economic Area (EEA) wherever possible. Where any of our service providers transfer your data outside the UK, we will ensure a similar degree of protection is given to it by relying on an appropriate safeguard, such as UK "adequacy regulations" or standard contractual clauses approved for use in the UK.

10. Data Security

We have put in place appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. Access to your personal data is limited to those who have a genuine business need to access it. We also have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

11. How Long We Keep Your Personal Data

We will only keep your personal data for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting or reporting requirements. When we no longer need your personal data, we will securely delete or anonymise it.

Different retention periods apply to different types of data. For example, transaction records are typically retained for 10 years to meet tax and accounting obligations, while marketing preferences are kept until you ask us to stop or your account is closed.

12. Your Legal Rights

Under data protection law, you have the right to:

• Request access to your personal data (a "subject access request").
• Request correction of personal data that is inaccurate or incomplete.
• Request erasure of your personal data where there is no good reason for us to continue processing it.
• Object to processing of your personal data, including for direct marketing.
• Request restriction of processing of your personal data.
• Request transfer (portability) of your personal data to you or a third party.
• Withdraw consent at any time where we are relying on consent to process your data.

You will not usually have to pay a fee to exercise these rights. To make a request, please contact us at admin@foundationstfc.co.uk. We may need to verify your identity before responding, and we aim to respond to all legitimate requests within one month.

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, or by calling 0303 123 1113. We would, however, appreciate the chance to address your concerns first, so please consider contacting us in the first instance.

13. Children's Privacy

We recognise that many of our participants are children. Where we collect personal data relating to a child (for example, for youth programmes and other activities for young people), we will only do so with the consent of a parent or guardian where required, and we will take particular care to protect that data.

If you are under 16, please get your parent or guardian's permission before providing us with any personal data. If you believe we hold data about a child without appropriate consent, please contact us so we can address it.

14. Third-Party Links

Our website may contain links to third-party websites, plug-ins and applications (including those of our partners and funders). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Where changes are significant, we will take reasonable steps to bring them to your attention. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions, comments or requests regarding this Privacy Policy or our handling of your personal data, please contact:

Shrewsbury Town Football Club Foundation
The Croud Meadow, Oteley Road, Shrewsbury, SY2 6ST
Email: admin@foundationstfc.co.uk
Telephone: 01743 289177