Privacy Policy

Cookies Notice
Cookies are small text files stored on your computer by your browser. They are used for many things, such as remembering whether you’ve visited the site before, so that you remain logged in – or to help us work out how many new website visitors we get each month. They contain information about the use of your computer but do not include personal information about you e.g. they don’t store your name.

This Cookie Policy applies to our website, which includes any website or mobile application operated by or on behalf of Newport County AFC Supporters Society Limited (‘the Trust’), regardless of how you access the network. By accessing the Website, you agree that this Cookie Policy will apply whenever you access the Website on any device. Any changes to this policy will be posted here. We reserve the right to vary this Cookie Policy from time to time and such changes shall become effective as soon as they are posted. Your continued use of the Website constitutes your agreement to all such changes.

We may collect information automatically when you visit the Website, using cookies. The cookies allow us to identify your computer and find out details about your last visit. You can choose not to allow cookies, and you can delete cookies via the settings on your browser. If you do, we cannot guarantee that your experience with the Website will be as good as if you do allow cookies. The information collected by cookies does not personally identify you; it includes general information about your computer settings, your connection to the Internet e.g. operating system and platform, IP address, your browsing patterns and timings of browsing on the Website and your location. Most internet browsers accept cookies automatically, but you can change the settings of your browser to erase cookies or prevent automatic acceptance if you prefer. Remember that if you turn off cookies in your browser then these settings apply to all websites and not just our website.

The Data Protection Act 2018 controls how your personal information is used by organisations, businesses or the government.

The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR). GDPR sets out a number of different reasons a company may collect and process your personal data, including:

Consent

In specific situations, we can collect and process your data with your consent – e.g. when you sign up to receive our email newsletter or for membership of the Trust. When collecting your personal data, we’ll always make clear to you which data is necessary in connection with a particular service.

Contractual obligations

In some instances, we need your personal data to comply with contractual obligations. For example, if you sign up for Trust membership, we need your email address and postal address to deliver benefits in line with the package purchased.

Legal compliance

We may be legally bound to collect and process your data. For example, if someone is involved in criminal activity or fraud, we may need to pass details to law enforcement.

Legitimate interest

We require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running the Trust. For example, we may use information on your membership level to target you with specific marketing campaigns.

How we collect your personal data

There are a number of ways in which we may collect information about you, not limited to:

• When you sign up as a member and provide your email address, date of birth and other contact information.
• When you email us/contact us through social media.
• When you sign up for our email newsletter.
• When you have given a third-party permission to share information they hold about you with us.
• When you complete a survey.
• When you sign up for a Trust event or campaign.

The type of personal data we collect

The data we may collect includes your name, your email address, phone number, postal address and date of birth.

How and why we use your personal data

We use your data to provide you with appropriate information about the Trust and our activities.

The data privacy law allows this as part of our contractual obligations and legitimate interest in understanding our members and providing the highest levels of service. We will hold your data in our systems for as long as is necessary for each relevant activity or as long as is set out in any agreement we have with you.

Protection of your personal data

The security of your personal data is important, and we take care to handle and store it as best we can. This includes using encrypted https links between our web server and your browser which means that all data passed between you and us cannot be intercepted.

We do not store your card details ourselves when you sign up for membership or make a one-off donation, but instead use Stripe Payment Services via WooCommerce, who are a PCI compliant payment processing provider for all orders placed online.

We also regularly assess the safety of our servers and electronic storage in line with industry standards.

Length of time we keep your personal data

We only keep your data for as long as is necessary for the purpose it was collected. In the case of membership of the Trust, it is retained as long as the membership remains active.

You also have the right to access and rectify mistakes in the data we hold about you at any time, and each of our email newsletters has a link to unsubscribe at the bottom should you wish to opt out.

You can also make any changes to your personal information by updating your online account or contacting the Trust office.

Data processor

Data is processed by, or under the direction of, Trust officials.

We share your data with Newport Association Football Club Limited to facilitate membership benefits in line with the membership package chosen.

We never share your data with other third parties without consent unless there is a legal duty for us to do so.

Complaints

If you are at all unhappy about the handling of your data, you can send a complaint to the Information Commissioner’s Office by calling 0303 123 1113 or go online to www.ico.org.uk/concerns

If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.