THE SMALL PRINT

PRIVACY POLICY.

1. Introduction

This Privacy Policy explains how the Everton Supporters Club East Midlands (ESCEM) ("we", "us", or "the Club") collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

By becoming a member of ESCEM, booking travel, or interacting with the Club, you agree to the practices described in this policy. The Club is committed to protecting your privacy and handling your personal information with transparency and respect.

2. Data Controller

The Data Controller for ESCEM is the Club Chairperson, who is responsible for ensuring that your personal data is handled in compliance with GDPR and this Privacy Policy.

If you have any questions about how your data is managed, please contact: support@escem.co.uk

3. What Information We Collect

We collect and store the following personal information when you become a member or use our services:

  • Full name
  • Address
  • Contact number
  • Date of birth
  • Email address
  • Everton Football Club Forever Blue Plus membership number
  • Payment details (processed securely by Stripe, not stored by ESCEM)
  • Communication preferences (email, WhatsApp, etc.)
  • Booking history (coach travel and ticket requests)

For members under 18, parental or guardian consent is required before collecting any personal information.

4. How We Use Your Information

We collect and process your data to:

  • Manage membership records and verify eligibility
  • Process membership payments via Stripe
  • Manage coach travel bookings and communicate pick-up details
  • Process ticket requests for matches when made available by Everton Football Club
  • Share necessary membership information with Everton Football Club (as required for ticketing and affiliation)
  • Communicate Club news, events, and updates via email, WhatsApp, or social media
  • Ensure compliance with our Constitution, Disciplinary Policy, and Data Protection Policy

Your personal data will never be sold, rented, or shared with any third party for marketing purposes.

5. Lawful Basis for Processing

We process your data under the following lawful bases:

  • Contract: to fulfil our obligations to you as a member (for example, managing membership and bookings)
  • Legal obligation: to comply with legal or financial requirements
  • Consent: for communications, updates, and marketing (you can withdraw consent at any time)
  • Legitimate interest: to operate and improve the Club's services and ensure safety for all members

6. Data Sharing

Your personal data may be shared only with:

  • Everton Football Club, for membership and ticketing purposes
  • Stripe, our secure payment processor, for managing membership subscriptions and payments
  • IT and communications providers used to deliver member services

All third-party partners process your data securely and in line with GDPR.

7. Data Storage and Security

Your data is stored securely and accessed only by authorised Committee members when necessary. We use appropriate technical and organisational measures (such as encrypted systems and password protection) to prevent unauthorised access, loss, or misuse. Any paper-based records are kept securely and destroyed when no longer required.

8. Data Retention

We retain personal data for as long as you are an active member. When membership ends:

  • Basic records (such as name, membership period, and payment history) may be retained for up to three years for administrative or legal purposes.
  • All other personal data will be securely deleted or anonymised once no longer required.

9. Your Data Protection Rights

Under the GDPR, you have the right to:

  • Access a copy of the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Withdraw consent for communications at any time
  • Request transfer of your data to another organisation (data portability)

Requests can be made via email to support@escem.co.uk. We will respond within 30 days.

10. Cookies and Website Data

ESCEM uses analytics tools (such as Google Analytics) to improve user experience, track performance, and understand visitor traffic. You can adjust your browser settings to block cookies if preferred. No personally identifiable information is stored through cookies without your consent.

11. Communication Channels

ESCEM may communicate with members through:

  • Email
  • WhatsApp group updates (for matchday travel and Club news)
  • Social media posts

Members can opt out of non-essential communications at any time by emailing support@escem.co.uk.

12. Data Breaches

If a data breach occurs, ESCEM will:

  • Investigate the incident promptly
  • Notify affected individuals and the Information Commissioner's Office (ICO) within 72 hours, if required
  • Take steps to prevent future occurrences

13. Updates to This Policy

This Privacy Policy will be reviewed annually or whenever required by law. Any changes will be communicated to members as appropriate.

14. Contact Information

For questions, data access requests, or privacy concerns, please contact:

Everton Supporters Club East Midlands (ESCEM)
Email: support@escem.co.uk