Privacy Policy

This website is operated by Doncaster City Football Club Ltd (company number 14179792), referred to in this policy as "we", "us", or "the club". We are the data controller for personal information collected through this website.

You can contact us about data matters via our contact page.

We collect personal information in the following circumstances:

• Contact form — your name, email address, and the contents of your message when you submit an enquiry through our contact page.
• Payments — when you make a purchase (club shop, pitch sponsorship, player sponsorship, or a club donation), your payment is processed securely by Stripe. We do not store your card details. We receive your email address and the name you provide at checkout, along with a record of the transaction.
• Shop orders — your name, email address, and delivery address when placing an order through the club shop.
• Sponsor details — your name and business name if you choose to sponsor a player or a virtual pitch square.

We do not use cookies for advertising or tracking, and we do not use third-party analytics services.

We use the information we collect to:

• Respond to your enquiries and messages
• Process and fulfil your orders and sponsorship arrangements
• Display your sponsor name on the website where you have agreed to this
• Send you transactional emails related to your order or enquiry
• Comply with our legal obligations

We will not use your personal information for marketing without your explicit consent, and we will never sell your data to third parties.

We process your personal information on the following legal bases under UK GDPR:

• Contract — processing necessary to fulfil an order or sponsorship arrangement you have entered into with us.
• Legitimate interests — responding to contact form messages and enquiries.
• Legal obligation — retaining transaction records as required by law.

We retain contact form messages for up to 12 months. Order and payment records are kept for 7 years in line with HMRC requirements. We will delete your data sooner if you ask us to and there is no legal reason to retain it.

We share your information only where necessary:

• Stripe — payment processing. Stripe is PCI-DSS compliant. See Stripe's privacy policy.
• Resend — transactional email delivery (contact form notifications).

We do not share your personal data with any other third parties.

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (where no legal obligation requires us to keep it)
• Object to or restrict certain processing
• Receive your data in a portable format
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us via our contact page. We will respond within one month.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

This website uses a session cookie solely to keep administrators logged in to the club management system. This cookie is strictly necessary for that functionality and is not used for tracking or advertising. No third-party cookies are set.

We may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the website after any changes constitutes acceptance of the updated policy.