We take the privacy of all of our fans, supporters, customers, web site users, and employees (“customers” / “you”) very seriously and take great care to protect their personal information at all times.
This policy was last updated in line with the new GDPR Regulation, April 2018.
We will only process your data in a fair, lawful and transparent way.
This means that data will only be processed if it has been consented to by the customer as part of a business transaction or if processing is necessary for the purposes of our legitimate interests.
We will only collect data required for the purpose of this interest and only use it for the purposes stated. We will not collect unnecessary or unwarranted personal data that is not required for us to perform our business functions.
We do not, as part of our day to day business, have any need to process any sensitive categories of personal data other than for a very small segment of customers whose disability status is checked by the Club to ensure they can access the disabled supporter provisions and tickets.
The Club has an internal Data collection procedure that ensures this is adhered to.
We will make every reasonable endeavour to keep your personal data accurate and up to date. Customers can assist us with this by informing us as soon as possible of any changes to their personal data e.g. if they move address.
Data will be removed from our database after three years for customers who have no longer been in contact with the Club in any voluntary way. This will be determined by an annual data audit. This does not change your lawful rights detailed later in the document.
WHAT INFORMATION DO WE COLLECT?
We may collect personal information about customers from a variety of sources including:
- visits to our stadium, websites, retail outlets;
- purchasing goods or services via our websites, retail outlets, stadium, or box office;
- emails, written and verbal communications and telephone conversations;
- participating in competitions or lotteries;
- attending rugby matches or rugby coaching sessions;
- from other supporters through referral schemes;
- Anonymous personal data to the Rugby Football League Limited and InCrowd Sports Limited for the purpose of internal data analytics reporting.
We will use our reasonable endeavours to ensure that people providing us with personal information are aware that it is being collected and for what purpose it is being collected at the point of collection. In the case of friend referral schemes, we will use our reasonable endeavours to ensure that people providing us with the personal information of others have obtained the consent of the individual that they are referring.
EXAMPLES OF THE INFORMATION THAT WE MAY COLLECT
We may, for example, keep a record of your name, address, email address, date of birth, and telephone number. We may also keep a record of the purchases that you have made from us, the dates and times that you attend our stadium, and details of any correspondence we have entered into with you.
WHY WE COLLECT YOUR INFORMATION
We collect information about you to help us to understand about our customers generally and also to help us to understand more about each individual customer specifically. For example, we would like to know the average age profile of our customers, and how far our customers travel to support us.
We also would like to know about individual customers to help us to understand about their preferences and to help us to provide goods and services that they might find suitable.
HOW WE WILL USE YOUR INFORMATION
We will use personal information for the following purposes:
- To administer transactions and provide products and services and or details of products and services to customers who request them;
- To record, handle and respond to enquiries and complaints;
- For general record keeping purposes;
- To track activity on our website;
- To create an individual profile of each customer so that we can – understand and respect their preferences and privacy, offer products and services that we think might be of interest to them, and customise our communication with them. For example, we may customise our website and marketing communications according to their interest.
DISCLOSURE OF YOUR INFORMATION
We may disclose your personal information to third parties only in limited circumstances, in order to ensure that we manage your data effectively and efficiently, in which case we may need to appoint other organisations to carry out some data processing activities on our behalf. This might, for example, include checking your details against the telephone preference service. We may also need to appoint other organisations to carry out data processing activities such as mailing services and mail order fulfilment.
If Saints or substantially all of its assets are acquired by a third party, in which case personal data held by us about customers will be one of the transferred assets.
In these circumstances we will use our reasonable endeavours to ensure that personal information relating to customers is properly protected and processed under strictly controlled conditions.
SAINTS’ COMMERCIAL PARTNER PROGRAMME
From time to time we choose to work with a selection of carefully selected commercial partners. A list of these is available from us on request and includes our sponsors and partners, and affinity programme providers.
Our commercial partner programme is designed to support Saints and also to bring customers a diverse range of offers that we think might be of interest to them. Communications regarding these will only be sent to customers who have explicitly consented to receive them.
PERSONAL DATA AND THE INTERNET
Saints operates a number of websites including but not limited to www.saintsrlfc.com (“the Saints websites”). The Saints websites contain links to other websites which are provided for the benefit of our customers.
We recommend that customers check the privacy and security policies and procedures of each and every website that they visit including those of our commercial partners, some of which may be branded in Saints colours or with the Saints logo.
The Saints websites include certain chat rooms, forums, message boards, and/or news groups on which customers can post information. Any information that customers chose to post in these areas becomes public information and you should always be careful when deciding to disclose your personal details as part of that information.
In common with many other website operators, we may use standard technology called ‘cookies’ on the Saints websites. Cookies are small pieces of information that are stored by the browser on a computer’s hard drive and they are used to record how people use and navigate websites.
Most browsers automatically accept cookies, but you can usually change your browser to prevent cookies being stored. Please note, if you do turn cookies off this will limit the service that we are able to provide to you and may affect your visitor experience. For further information on cookies and how to switch them off see: www.allaboutcookies.org
SECURITY OF INFORMATION
We are firmly committed to data security. Your data will only be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage. When customers place orders via the Saints websites, we use or offer the use of a secure server. The secure server software encrypts all information before it is sent to us. We take steps to guard against unauthorised access to customer data and have security procedures in place to protect our paper based systems and computerised databases from loss and misuse. We only allow access to them when it is absolutely necessary, and then under strict guidelines as to what use may be made of the personal information contained within them. Although we make every effort to create a secure environment for your personal information, we cannot guarantee the safety of any personal information which you provide to us.
We may monitor or record telephone calls and we may also use CCTV at or near our premises. The primary reason for this monitoring is for training and/or security purposes and also to improve the quality of services that we provide to you.
WHAT DO WE DO WITH YOUR FINANCIAL INFORMATION
We will use your financial information to enable payment authorisation and billing including any online, mail order, or telephone purchases. When you purchase any products from us, your consent is given to provide your financial information and personal information to those third parties necessary to process your transactions with us, such as credit card companies, banks and companies that handle delivery and shipping on our behalf. This includes exchanging information with other companies and organisations for fraud protection and credit risk protection. We will not share your financial information with third parties without your consent for any other reason.
YOUR RIGHTS TO ACCESS YOUR PERSONAL INFORMATION
You have the right to receive a copy of the personal information that we hold about you.
You can request to rectify or erase your personal data at any time by contacting the Club, details of which are on the ‘How To Contact Us’ section later in the document.
There is no fee for this service, enquiries will be completed and rights fulfilled within one month, the period determined by current legislation.
HOW TO CONTACT US
You can also write to: CRM Manager, St.Helens R.F.C. Ltd, Totally Wicked Stadium McManus Drive, St Helens, WA9 3AL