What is our Personal Data retention policy?
We will keep your Personal Data for as long as you are a registered user of one of our digital platforms, or for as long as is necessary for us to provide products or services for you, and for a limited period of time afterwards.
Once you no longer wish to be engaged with BCFC we may still need to keep hold of your data if there is a legal reason for doing so (such as for tax purposes where you have made purchases through one of our digital platforms or where we need to resolve any disputes with you).
How do we keep your Personal Data secure?
We adopt industry standard security processes to ensure your data is kept safe and secure and to prevent unauthorised access or use or loss of your data. We also make sure that third parties who need to handle your data when helping us to deliver our services are subject to suitable confidentiality and security standards.
Despite the security measures we implement, please be aware that the transmission of data via the internet is not completely secure. As such, we cannot guarantee that information transmitted to us via the internet will be completely secure and any transmission is at your own risk.
Your rights as a data subject
At any point whilst BCFC is in possession of or processing your Personal Data, you may have the following rights:
Right of access – you have the right to request a copy of the Personal Data that we hold about you.
Right of rectification – you have a right to correct Personal Data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the Personal Data we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply you have a right to restrict the processing of your Personal Data.
Right of portability – you have the right to have the Personal Data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing, as well as processing we undertake based on our legitimate interests.
Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.
If you want to exercise any of these rights, please contact us. You don’t have to pay a fee to exercise your rights, unless your request is clearly unfounded, repetitive or excessive (in which case we can charge a reasonable fee). Alternatively, we may refuse to comply with your request in these circumstances. Where your request is legitimate, we will always respond within one month (unless there is a legal reason to take longer, such as where your request is particularly complex). We may also need you to confirm your identify before we proceed with your request if it is not clear to us who is making the request.
In addition to the above, you may get in touch with the ICO (Information Commissioner’s Office) if you are concerned about the way in which we are handling your Personal Data. However, where possible, we would really appreciate you speaking with us first if you have any concerns.
Controlling your personal information (Official Supporters Club)
You have supplied your data to us to allow us to offer the Official Supporters Club service that you have signed up for. Without being able to process the data, we will not be able to provide the service. This will also involve sharing it with Official Supporters Club HQ and any one of the network of Supporters’ Clubs branches around the globe that you have applied to join. We will share personal data, such as your name, date of birth and contact details, with the representatives of the Official Supporters Club HQ and any Supporters’ Club branch that you have applied to join in order for the HQ and branch to be able to communicate with you and offer the benefits of membership that you have signed up for.
Beyond that, you may choose to restrict the use of your personal information in the following ways:
Whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes.
If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us.
We may use your personal information to send you promotional information about third parties which we think you may find interesting but not if you tell us that you do not wish this to happen.
In addition, we will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law.
You may request details of personal information which we hold about you under the EU & UK General Data Protection Regulations (GDPR). If you would like a copy of the information held on you, please write to us at St. Andrew’s @ Knighthead Park, Cattell Road, Birmingham B9 4RL or email dpo@bcfc.com. If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.