Privacy notice – Spires Park Fundraiser
Last updated: [date]
Who we are
Magherafelt Sky Blues FC ([club address]) is the data controller for the personal information collected through this website for the Magherafelt Sky Blues Spires Park Fundraiser. Questions or requests: [privacy contact name / role], [club contact email].
What we collect
- Bar cart orders (on the day): the name you give, the hole you're on, what you ordered (drinks are free), any optional donation and whether it was given by cash or card, so the cart can find you. If you pick your name from the golfer list, the order is linked to your group's progress on the course (pace of play). No card details are collected online.
- Bookers: name, email, phone, team name, package, payment status, notes.
- Players: name, handicap, whether under 18, scores and (if you upload one) a photo of your scorecard.
- Sponsors: company name, contact name, email, phone, sign wording and logo.
- Technical: a single essential login cookie for committee members; a one-way scrambled (hashed) form of your IP address for a few hours to stop spam. No analytics, advertising or tracking cookies.
Why we use it, and our lawful basis
- To take and manage your booking or sponsorship, run the tee sheet, contact you about the day, and take payment – contract / steps before a contract.
- To score the competitions and show a public live leaderboard and competition results (names and scores only) – legitimate interests in running a fair, enjoyable event. Under-18s are only ever shown as initials, and anyone can ask to be shown as initials.
- To send a reminder before the event and the results afterwards – legitimate interests / contract.
- To tell you about future club fundraising events – only if you tick the optional box (consent). You can withdraw at any time by replying to any email or contacting us.
- Scorecard photos let the committee check a card if a score is queried – legitimate interests.
Children
If a player is under 18 we ask the booker to confirm a parent or guardian agrees. We only hold their name, handicap and scores, and show initials only in public.
Who we share it with
Only the people and services we need: the organising committee and volunteer scorers (scorers can't see contact or payment details); Moyola Park Golf Club (tee sheet names only); our sign writer (sponsor names, wording and logos); and service providers acting for us – Akamai/Linode (website hosting, London, UK), Brevo (EU) (sending emails) and Telegram (committee group chat notifications, which may be processed outside the UK under Telegram's own safeguards). We never sell your data.
How long we keep it
Contact details, booking requests, scorecard photos and logs are deleted or anonymised about 3 months after the event (by 2027-07-30). Results (names and scores) are kept for 1 year. Encrypted backups expire within 14 days. If you opted in to hear about future events, we keep your name and email until you unsubscribe.
Your rights
You can ask for a copy of your data, to correct it, to delete it, to object to its use (including the leaderboard) or to withdraw consent. Contact [privacy contact name / role], [club contact email]. We'll reply within one month. If you're unhappy you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Security
The site uses HTTPS only; committee passwords are hashed; access is role-based; backups are encrypted.