Privacy policy

Clitheroe Rugby Union Football Club is the data controller for the information described here. We are a community rugby club run by volunteers.

Contact for anything to do with your data: enquiries@clitheroerugby.com, or write to us at Silcock Park, Littlemoor Road, Clitheroe, Lancashire BB7 1ER. Club telephone 01200 422261.

We only collect what we need to do the thing you asked for.

• Shop orders. Your name, email address, phone number, delivery or collection address, what you ordered and any notes you add. We need these to make up your order, let you know when it is ready and post it if you chose post. Payment is taken by SumUp on their secure page: we never see or store your card details.
• Sponsorships. Your contact details plus your business name, website and logo. Showing your business on this website, the clubhouse screens and our social media is the point of the sponsorship, so those business details are published. Your personal contact details are not.
• Social membership. Your name, email address, mobile number and address, so we can set your membership up on Stacky, the club's bar discount app, and confirm it to you.
• Event tickets. Your name and email address, the names of the people you are buying for and your answer to any question the event asks, such as dietary requirements.
• Contact, hire and volunteer forms. Your name, email address, phone number and whatever you write in the message. These forms send an email to the club officer who handles that subject. They are not stored in the website's database.
• Volunteer logins. A small number of club volunteers have logins to run the shop, news and orders. For them we hold a name, email address and role.

Playing memberships are registered through the RFU's Game Management System (GMS), not this website. The RFU's own privacy policy covers what you give them there. Facility bookings are made through Lemon Booking under its privacy policy; we receive the booking details so we can run the clubhouse and pitch.

Where you buy something from us (kit, a sponsorship, a membership or a ticket), we process your details to perform that contract. Where you send us an enquiry or register interest in volunteering, we rely on our legitimate interest in replying to you and running the club. We keep accounting records because the law requires it.

We do not sell or rent your information. We share it only with the services that make the website work:

• SumUp takes card payments. They see your card details; we do not.
• Supabase hosts the website's database and file storage, in the EU (Ireland).
• Vercel hosts the website itself and keeps short-lived server logs, which include your IP address, for security.
• Resend delivers the emails we send you, such as order confirmations.
• Stacky runs the bar discount scheme. For social members we pass on the name, email address and mobile number needed to set you up.
• Lemon Booking handles facility hire, and the RFU handles playing registrations, as described above.

Some match reports embed a post from the club's Facebook page. Facebook may set its own cookies when that post loads. See our cookie notice.

• Orders, sponsorships, memberships and tickets: six years after the end of the financial year they fall in, because HMRC requires us to keep accounting records for that long.
• Enquiries and volunteer interest: in the club mailbox while we deal with them, and no longer than two years.
• Your basket: a cookie on your own device for 30 days, or until you check out.

Match reports, team news and photographs on this website and our social media may name adult players and show them playing. For anyone under 18 we follow RFU guidance on photography and consent. If you would like a photograph or mention of you or your child taken down, email us and we will remove it.

Under UK data protection law you can ask us to:

• tell you what information we hold about you and give you a copy;
• correct anything that is wrong;
• delete your information;
• stop or restrict how we use it;
• give you your information in a form you can take elsewhere.

To do any of these, email enquiries@clitheroerugby.com. We will reply within a month. If you ask us to delete your information we will remove it from the website and our mailboxes, except for the accounting records we are required to keep, and we will confirm when it is done.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk.

This website is not aimed at children and we do not knowingly collect information from anyone under 16 through it. Junior membership is arranged by a parent or carer through GMS.

If we change this policy we will update the date at the top of the page. Anything that materially changes how we use your information will also be announced on the website.