Privacy Policy

1. General

1.1 Pocklington Rugby Union Football Club ("we", "us", "our") is a not-for-profit amateur sports organisation located at Feathers Field, Percy Road, Pocklington, YO42 2QB. We take your privacy seriously and are the data controller for personal information collected via https://rugbyticketsonline.co.uk/ ("the Site").

We process personal data in accordance with the Data Protection Act 2018, UK GDPR, and all applicable UK data-protection laws.

1.2 This policy explains how we process personal data when you use our Site, purchase tickets, contact us, or interact with us in any way.

1.3 This policy applies to all visitors, users, and individuals whose data we receive directly or indirectly through use of the Site.

2. Your Data

2.1 "Your Data" includes information that identifies you personally, such as:

• Name
• Address
• Email address
• Telephone number
• Payment-related information (processed securely by our payment provider)
• Information submitted through forms or communications

We may create anonymised or de-identified data that cannot identify you. This is not covered by this policy.

3. How We Collect Your Data

3.1 We may collect and process Your Data when:

• You visit https://rugbyticketsonline.co.uk/
• You purchase tickets
• You complete any online form
• You email rugbypock@gmail.com
• You submit feedback or surveys
• You interact with us in any other way

3.2 We may also collect:

3.2.1 IP Address

Used for fraud protection and system administration.

3.2.2 Cookies

Used to improve your browsing experience. See our Cookie Policy on the Site for more information.

4. How We Use Your Information

4.1 We use Your Data to:

• Process ticket purchases
• Administer user accounts (if applicable)
• Provide information you request
• Contact you about orders or enquiries
• Notify you of changes to the Site
• Ensure security and prevent fraud

4.2 We may contact you for club-related updates or marketing only with your consent or where permitted by law.

4.3 We do not sell your data.

5. Unregistered Users

If someone submits your details when buying tickets on your behalf, we will process your information only to fulfil that ticket purchase or enquiry.

We do not publish details or share them for marketing purposes.

6. Data Retention

6.1 We retain Your Data for as long as needed to:

• Complete your ticket purchase
• Meet legal and accounting obligations
• Maintain your account (if created)

6.2 Upon a valid request, Your Data is deleted or anonymised unless law requires retention.

7. Supplier Data

We may process supplier contact details and payment information for business purposes and retain such data as required by law.

8. Failure to Provide Data

If you do not provide required information (e.g., for ticket purchasing), we may be unable to complete your order.

9. Marketing

9.1 With your consent, we may send emails about club events or ticket information.

9.2 You may opt out at any time by:

• Clicking "unsubscribe"
• Emailing rugbypock@gmail.com

10. Disclosure of Your Data to Third Parties

We only share Your Data where necessary:

• Payment processors
• Secure website hosting providers
• Technical service providers
• Legal or regulatory authorities (where required)

We do not share data for advertising, behaviour profiling or third-party marketing.

11. International Transfers

If service providers store data outside the UK, we ensure proper safeguards compliant with UK GDPR.

12. Data Security

We implement appropriate technical and organisational measures including:

• Encrypted data transmission (HTTPS)
• Secure encrypted storage
• Restricted access to authorised personnel only

13. Links to Other Websites

External websites linked from our Site have their own privacy policies. We are not responsible for them.

14. Legal Basis for Processing

We process data based on:

• Contract fulfilment (ticket sales)
• Legal obligations
• Legitimate interests
• Consent (where required)

15. Your Rights

You may request:

• Access to your data
• Correction
• Deletion
• Restriction
• Objection to processing
• Data portability

Contact rugbypock@gmail.com to exercise these rights.

16. Withdrawal of Consent

You may withdraw consent at any time by emailing rugbypock@gmail.com.

17. Updates to This Policy

Changes will be posted on this page. Continued use of the Site indicates acceptance of updated terms.

18. Contact Us

If you have any questions about this policy, contact:

If unsatisfied, you may contact the ICO: https://ico.org.uk/global/contact-us/

19. Google User Data Access, Usage, Storage, Sharing & Deletion

(Required for Google OAuth Verification)

This section explains how we handle Google user data when users sign in using Google OAuth.

19.1 Data We Access

When you sign in using Google, we may access:

• Your Google Account name
• Your Google Account email
• Your Google profile picture (optional)

We do not access Gmail, Drive, Calendar, Contacts, YouTube or any other Google service.

We only request the minimum permissions required for login.

19.2 How We Use Google User Data

We use Google user data only to:

• Authenticate your identity
• Allow secure login to the Site
• Manage your ticket purchases
• Communicate regarding orders

We do not:

• Sell Google data
• Use Google data for advertising
• Use Google data for analytics or profiling
• Use Google data for AI or machine-learning training

All usage is solely for operating https://rugbyticketsonline.co.uk/.

19.3 Storing and Protecting Google User Data

We store only:

• Name
• Email address
• Profile picture URL (optional)
• Internal identifiers

We do not store OAuth tokens or access to any Google account services.

Security measures include:

• Encrypted storage
• HTTPS transmission
• Limited access by authorised personnel

19.4 Sharing Google User Data

Google user data is only shared with:

• Our secure hosting provider
• Our payment provider (only name & email as required for transaction receipts)

We do not share data with advertisers, social networks, analytics companies, or any third party unrelated to ticketing operations.

19.5 Retention & Deletion of Google User Data

We keep Google user data only while your account remains active.

You may request deletion at any time by emailing rugbypock@gmail.com.

Upon request:

• Your account and associated Google data will be deleted within 30 days
• No Google data is retained afterwards

19.6 Google API Services Compliance

We fully comply with:

• Google API Services User Data Policy
• Google Limited Use Policy
• Google Terms of Service
• UK GDPR

We only use Google user data for the purpose displayed on the OAuth consent screen.

Last updated: 2 September 2026