The General Data Protection Regulation (GDPR) seeks to protect and enhance the rights of data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU. GDPR does not apply to information already in the public domain.
Leeds United (LUFC) takes your privacy seriously and we are committed to protecting your personal information.
This Privacy Notice applies to personal data (i.e. information concerning any living person (Data Subject)) held by LUFC as data controllers that is not already in the public domain. It explains what personal information we collect, how we collect and use that personal information, with whom we will share it, why and in what circumstances.
LUFC is pleased to provide the following Privacy Notice which covers its websites, mobile applications and mobile websites (Platforms) except where you are notified of another privacy notice or policy by the specific LUFC entity which collects your personal information.
The address for LUFC (a company incorporated in England and Wales under number 06233875) is Leeds United, Elland Road, Leeds, LS11 0ES. If you would like to get in touch with us, you can also find contact details in the ‘How to Contact Us’ section below.
You might find external links to third party websites on our Platforms and those websites may have their own privacy notices which are different to this Privacy Notice. Our Privacy Notice does not apply to your use of a third party site and you should therefore make sure that you are comfortable with their privacy notices prior to using those sites.
LUFC uses the information collected from you to provide such organisational services as you request from us. In you making initial contact you consent to the LUFC maintaining a dialogue with you until you either opt out (which you can do at any stage) or we decide to desist from promoting our services.
The type of information that we may collect will differ depending on the type of service we are offering or the request you make of us. Such information may include your:
LUFC will only collect the information necessary so that it can provide you with its organisational services.
In order to meet its obligations, LUFC utilises the following third parties:
Selling of tickets for LUFC tournaments
Selling of merchandise via in store, online or telesales methods on behalf of LUFC
Selling of merchandise via in store or telesales methods on behalf of LUFC
The official TV channel service of LUFC
LUFC will ensure that each such third party organisation is contractually obliged to be fully GDPR compliant.
Legal Basis for Processing Personal Data
We will only collect, process, use, share and store your personal information where we are satisfied that we have an appropriate legal basis for doing so. This may be because:
You may withdraw your consent to the processing of your personal information at any time by contacting the Data Privacy Officer (see the ‘How to Contact Us’ section below).
LUFC may, on occasion, pass your personal data to third parties exclusively to process such data on our behalf. We require any such third parties to agree to process your personal information based on our instructions and requirements consistent with this Privacy Notice and the GDPR.
LUFC will only retain your personal information for as long as is reasonably necessary for the purposes for which it was collected and in line with our data retention policy. For example, we will normally keep contractual information for a period of ten years after the expiry of any such contract so that, if we need to establish, exercise or defend our legal interests, we may deal with any dispute or concerns that may arise.
Your personal information will be held by LUFC within the European Economic Area (EEA) only, be this on-premise or in cloud services.
Your Rights as a Data Subject
At any point whilst LUFC holds your personal information, you have a number of rights available to you, including the following:
You can exercise these rights in the first instance by contacting the Data Privacy Officer (see ‘How to Contact Us’ section below). Should you wish to do so, we will require you to provide additional information to confirm your identity as follows:
We will advise you promptly if we require further information in order to fulfil your request.
Further to the rights set out above, you can request the following information from us:
We may amend this Privacy Notice from time to time to keep it up to date with legal requirements, best practice and/or the way we operate our business. If we decide to change our Privacy Notice we will place any updates on this webpage and the privacy sections of any relevant Platforms. Please therefore check this page and the privacy sections of any relevant Platforms periodically in order to view the latest version of our Privacy Notice.
How to Contact Us
The primary point of contact for all issues arising from this Privacy Notice is our Data Privacy Officer, who can be contacted by email at:
or by post at:
Data Privacy Officer
In the event that you have any questions, concerns or wish to make a compliant about how your personal data is being processed or regarding our compliance with this Privacy Notice, we would encourage you to contact our Data Privacy Officer in the first instance. We will investigate and attempt to resolve complaints and disputes as quickly as possible. If you do not get a response within 30 days you can complain to the Data Protection Regulator (the Information Commissioner’s Office).
Date of issue: May 2018