Privacy Policy

Who we are

We are Chester le Street Town Football Club. This privacy policy provides a clear explanation of the data we collect and what we use it for. This privacy policy covers the three web sub-domains operated by Chester le Street Town FC.

These are:

https://chesterlestreet.football (Our main website)

https://youth.chesterlestreet.football (A website dedicated to our youth teams)

https://members.chesterlestreet.football (A website dedicated for our subscribed members)

Data Protection Officer

The Data Protection Officer (DPO) is Joe Burlison.

What personal data we collect and why we collect it

Members

If you wish to become a member through our members website we will collect the following data about you and store it in our database.

  • Title
  • Forename
  • Surname
  • Player Name
  • Email address
  • Address (billing and delivery if different)
  • Telephone Number
  • Direct Debit mandate (via GoCardless)

We do this to ensure we can take your scheduled membership fees and contact you in the event of any issues processing your payment. Please note any request to delete the information we store for you as a member will, by default, mean you are no longer a member of Chester le Street Town FC

Shop

If you wish to buy goods through our shop we will collect the following data about you and store it in our database.

  • Title
  • Forename
  • Surname
  • Email address
  • Address (billing and delivery if different)
  • Telephone Number

We do this to ensure we can fulfill the order and may use the information to contact you about the order.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

‘Contact Us’ forms

The ‘contact us’ forms we use on the websites generate an email which is sent to the relevant person within Chester le Street Town FC.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

We use a cookie to remember whether you have view any videos/popup notifications/splashscreeens so as to ensure that you are not served the videos/popup notifications/splashscreeens every day. Typically these cookies last 2 weeks.

If you use our shop and place items in your cart we will use 3 cookies to ensure you have a satisfactory shopping experience, for example if you close your browser the selected items will remain the cart should you choose to navigate back the cart.

  • woocommerce_cart_hash
  • woocommerce_items_in_cart
  • wp_woocommerce_session_

The first two cookies contain information about the cart as a whole and helps us know when the cart data changes. The final cookie (wp_woocommerce_session_) contains a unique code for each customer so that it knows where to find the cart data in the database for each customer. No personal information is stored within these cookies.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

We share a limited amount of data we receive with the following companies for the following reasons:

Who Why What
MailChimp We use mailchimp to send bulk emails to our members. Mailchimp are not permitted to pass your details to anyone else. Email Address, forename and surname
CaptainForm We CaptainForm to store raw data on our members. This includes youth registration data, treasurer reimbursement requests and team registrations. CaptainForm are not permitted to pass your details to anyone else. Youth registration data, treasurer reimbusement information and team registration information
GoCardless GoCardless are our Direct Debit provider, as such we share limited member information with them.. GoCardless are not permitted to pass your details to anyone else. Email, Names, Address
Stripe Stripe are our payment provider for orders taken through the shop. If you choose to store you card details for future purchases these details are stored by stripe and not by ourselves. Stripe are not permitted to pass your details to anyone else. Card Details
Dropbox We use dropbox as a central storage solution for youth information. This includes storage of rendered (pdf) registration forms and team registrations. This information is accessible to limited youth committee members only on a need to know basis (eg those responsible for welfare, safeguarding). Dropbox are not permitted to pass your details to anyone else. Youth registrations and team registration information.
Onesignal
We use onesignal to provide we based push notification to your web browser in the event of new content. You must opt in to receive these notifications and you can switch them off at any time. No personally identifiable information is provided to OneSignal

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

If you place an order order on our website but cancel it we will keep this data for 30 days before automatically deleting it.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

If you would like to request an export of your data, or would like to request us to delete your personal data please fill in the following form. Once we have confirmed your identity we will action your request with 10 days.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Our contact information

Written enquiries are to be sent for the attention of:

Data Protection Officer, Moor Park, Chester le Street, DH23EZ.

Additional information

What data breach procedures we have in place

In the event of data breach will will notify users immediately, and inform them of the breach and what information may have been taken.

We will also notify Durham FA, the local authorities and police.

What third parties we receive data from

We do not receive any 3rd party data.

What automated decision making and/or profiling we do with user data

We do not undertake any automated decision making and do  not profile our users based on user data.