Privacy notice

Who we are

This notice covers this website. Slough Town FC ("the club", "we") decides how the personal data collected through it is used, which makes us the controller under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Buying tickets, memberships, hospitality or shop items, entering competitions and coming to Arbour Park are covered by the club's full privacy policy.

What this website collects

This site has no accounts and takes no payments. What it does handle:

• Messages and sign-ups you send us. If you use a form on this site (contact the club, a team or academy contact box, or the Business Club), we keep what you enter: your name, email, phone number if you give it, your message and the page you sent it from. If you tick the box, we also keep that you'd like club news, offers and events.
• Your basket. Items you add to the shop basket are kept in your own browser until you check out or clear them. We don't see them.
• Technical data. Like every website, the servers that deliver these pages see your IP address, browser and device type, the page you asked for and when. Our hosting provider uses this to deliver the site, keep it secure and fix faults.
• Visit counts. Our hosting provider counts page views and visits for us (for example how many people opened the homepage, and from which kind of device) without cookies and without building a profile of you. We only see totals.
• Your cookie choice. Whether you allowed videos and calendar sync is saved in your browser so we don't keep asking. See the cookie policy.
• Videos and calendar sync, only if you allow them. If you say yes, YouTube (for Rebels TV and match videos) and ECAL (to add fixtures to your calendar) load on this site and collect data under their own privacy policies. If you say no, they don't load.
• Analytics, only if you allow it. If you say yes, Google Analytics records which pages you visit, roughly where you are (town or region, from your IP address) and what device you use, so we can see how the site is used. It sets the _ga cookies. If you say no, it doesn't load.
• Marketing, only if you allow it. If you say yes, the Meta pixel tells Meta (Facebook and Instagram) which pages you visit here, so the club can see whether its adverts on those apps work and show them to the right people. It sets the _fbp cookie. If you say no, it doesn't load.

Why we use it and our legal basis

• To answer your message or sign-up: our legitimate interest in replying to people who contact the club, or taking the steps you ask for.
• To send you club news, offers and events, only if you ticked the box: your consent, which you can withdraw at any time by telling us.
• To run the site, keep it secure and see how it is used (technical data and visit counts): our legitimate interest in providing a working, safe website and improving it.
• To load YouTube and ECAL, Google Analytics and the Meta pixel: your consent, which you can withdraw at any time from Cookie settings at the bottom of every page.
• To remember your cookie choice: this is strictly necessary to respect that choice.

We don't sell your data and we don't make automated decisions about you. The only advertising use is the Meta pixel, and only if you allow marketing cookies.

Who we share it with

We use trusted suppliers who only act on our instructions:

• Lovable, which hosts the website and provides the visit counts.
• Supabase, which stores and delivers the site's photos, videos, fonts and news, and stores the messages and sign-ups sent through the site's forms.

Google provides Google Analytics for us if you allow it. It processes that data on our behalf under Google's data processing terms.

If you allow marketing cookies, Meta (Facebook and Instagram) receives data from the pixel. The club and Meta are jointly responsible for collecting it; Meta is responsible for what it does with it afterwards. Read Meta's privacy policy (opens in a new tab).

If you allow them, Google (YouTube) and ECAL receive data directly from your browser and are responsible for it themselves. Read Google's privacy policy (opens in a new tab) and ECAL's privacy policy (opens in a new tab).

Links on this site take you to other services run by others, such as Fanbase for tickets and SumUp for the club shop. Their own privacy policies apply once you are there.

Some of these providers may process data outside the UK. Where they do, they protect it with the safeguards UK law requires, such as UK adequacy regulations or the UK International Data Transfer Agreement.

How long we keep it

• Server logs: kept by our hosting provider for a short period for security, then deleted.
• Visit counts: kept as totals that don't identify you.
• Your cookie choice: 12 months, then we ask again. You can clear it sooner by clearing your browser data.
• Messages and sign-ups: as long as we need them to deal with your enquiry, and no longer than 2 years after our last contact. News and offers consent: until you withdraw it.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected or deleted, to restrict or object to how we use it, to have it moved to another organisation, and to withdraw consent at any time. Withdrawing consent doesn't affect anything done before you withdrew it.

Unless you've sent us a message or signed up through a form, we usually hold very little from this site that can be linked to you. Contact us and we will help either way.

Contact us or complain

Write to the Data Protection Officer at Slough Town FC, Arbour Park, Stoke Road, Slough SL2 5AY, or use the club's contact page.

If you're unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk (opens in a new tab) or on 0303 123 1113. We'd appreciate the chance to put things right first.

Changes to this notice

We will update this page if the site starts collecting anything new, for example a newsletter sign-up or a fan account. The date at the top shows when it last changed.