WALTHAMSTOW FC
Privacy Notice
Last updated: March 2026
Walthamstow FC is committed to protecting your personal data and being transparent about how we use it. This Privacy Notice explains what information we collect, why we collect it, and what we do with it. It applies to all personal data collected through our fan survey, website, and any future communications.
1. Who We Are
Walthamstow FC is a community football club based in Walthamstow, London. We are the organisation responsible for your personal data (the ‘data controller’).
If you have any questions about this notice or how we handle your data, please contact us:
| Club name | Walthamstow FC |
| Address | Wadham Lodge, Kitchener Road, E17 4JP |
| andrzej@walthamstowfc.com | |
| Data contact | Andrzej Perkins |
2. What Data We Collect
We collect personal data through two routes: our fan survey and our online shop.
- Your name (optional)
- Your email address
- Information about your matchday habits and preferences
- Your opinions about Walthamstow FC
The above is collected through our fan survey. Through our online shop (merchandise, season tickets, and future single match tickets) we also collect your billing and delivery address, your order and purchase history, and payment details. Payment details are processed securely by our third-party payment provider and are not stored by Walthamstow FC directly. We do not collect sensitive personal data such as health data or government identification numbers.
3. Why We Collect Your Data and Our Legal Basis
We collect your data for the following purposes:
- To build a fan database so we can keep you informed about Walthamstow FC news, upcoming matches, and events
- To understand what fans enjoy and what would improve their matchday experience
- To plan future club initiatives, partnerships, and community activities
The legal basis under UK GDPR for processing your data depends on how we collected it. For fan survey data and marketing communications, the basis is consent — we only contact you if you have actively opted in. For shop transactions, the basis is contractual necessity — we need your data to process and fulfil your order. You can withdraw your consent for marketing at any time (see Section 6).
4. How We Store Your Data
Your data is stored securely in a password-protected digital system accessible only to authorised club personnel. We take reasonable steps to protect your data from unauthorised access, loss, or misuse.
We do not store your data on paper or in any unsecured format.
5. How Long We Keep Your Data
We will keep your personal data for as long as you remain an active subscriber to our communications. If you unsubscribe or request deletion, we will remove your data within 30 days. Please note that if you have made a purchase through our shop, we are required by HMRC to retain financial and transactional records for 6 years regardless of your subscription status. This means your order history and billing details will be kept for this period even if you unsubscribe from marketing communications.
We will also review our fan database from time to time and remove data for individuals who have not recently engaged with the club. Before removing anyone from our database, we will send a single re-engagement email giving them the opportunity to confirm they still want to hear from us. If there is no response, their data will be deleted.
6. Sharing Your Data
We will never sell your personal data to third parties.
We will not share your personal data with any external organisations, including commercial partners, sponsors, or local businesses, without your explicit consent. If we ever wish to share your data with a third party we will contact you separately to ask for your permission. The one exception is our third-party payment provider, who processes your payment details securely when you make a purchase through our shop. They act as a data processor on our behalf and are contractually required to handle your data in line with UK GDPR. Please refer to their own privacy policy for details of how they manage your payment information.
7. Your Rights
Under UK GDPR you have the following rights regarding your personal data:
- The right to access — you can ask us what data we hold about you
- The right to correction — you can ask us to correct any inaccurate data
- The right to erasure — you can ask us to delete your data at any time
- The right to withdraw consent — you can unsubscribe from our communications at any time by clicking the unsubscribe link in any email or by contacting us directly
- The right to complain — if you believe we have mishandled your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk
To exercise any of these rights, please contact us using the details in Section 1.
8. Cookies and the Club Website
Our online shop and any third-party platforms we use may place cookies on your device to enable the site to function and process transactions. We are currently developing a standalone cookie policy which will provide full details. In the meantime, if you have any questions about cookies please contact us at andrzej@walthamstowfc.com.