London City Lionesses
Website Privacy Notice
- LCL Sports Group Limited t/a London City Lionesses (“the Club”) uses your personal data when you interact with us through the London City Lionesses website (www.londoncitylionesses.com), register an account with us, purchase tickets or merchandise, attend our matches and events, participate in our community football programmes, enter competitions or prize draws, provide feedback or respond to surveys, apply for a role with us, interact with us as a supplier, partner, seek media accreditation or press or broadcast access, engage with us as a local resident, or otherwise engage with us online or offline.
- We also use personal data to manage the safety and security of our venues and facilities, to identify, scout and recruit players, to send direct marketing, to manage and optimise our website, to assess our engagement with our fans and offer them enhanced services, to prevent, investigate and report fraud, crime and security incidents, and to comply with our legal and regulatory obligations.
- When you apply for a role with us, we may process special category data as part of the recruitment process, including for the purposes of assessing your fitness for the role and identifying any reasonable adjustments that may be required.
- Our full privacy notice below can tell you more about how we use personal data, including the different rights you have (including your right to object to our use of data for certain purposes).
1. What does this notice cover?
This privacy notice describes how LCL Sports Group Limited t/a London City Lionesses (“the Club”, also referred to as “we” or “us”) uses your personal data. It applies in respect of the personal data we collect, use and process when you use our website www.londoncitylionesses.com. It also applies to any personal data we collect in your interactions with the Club online and offline, including if you visit us at the Copperjax Community Stadium, purchase tickets to our matches at other venues, data we may handle if you or your employer supply or partner with the Club, data collected from applicants as part of job applications, information we may obtain from vendors or publicly available sources, and the data we collect and use to send direct marketing
This notice also describes your data protection rights, including a right to object to some of the processing which we carry out. More information about these rights, and how to exercise them, is set out in the “What rights do you have?” section.
2. What information do we collect?
We collect most of this information from you directly. For example, data is collected when you register an account with us, when you purchase tickets or merchandise, when you sign up for marketing communications, when you enter competitions, when you attend our venues, when you otherwise interact with us online or offline, or through application forms and CVs, obtained from your passport or other identity documents, from forms completed by you or from correspondence with you.
We also collect some information about you from other people or organisations, as set out in the next section titled “What information do we receive from third parties?”
| Category of Data | Description |
|---|---|
Identity and Contact Data | Name, age/date of birth, gender, address, email address, telephone number, username and password |
Delivery Data | Your payment and delivery details, including billing and delivery addresses and credit card details, where you make purchases from us |
Ticketing Data | Ticket purchase history, season ticket details, match and event attendance records, accessible seating requirements and preferences. |
Marketing Data | Your marketing preferences, including any consents you have given us |
Feedback Data | Your product preferences, your contact history and feedback on your London City Lionesses experiences (through reviews and surveys). |
Device Data | Information related to the browser or device you use to access our website including IP address, location information, usage information (for example the date, times and frequency you access our Sites), browser type, hardware type (please see our cookies policy for more details). |
Special Category and Criminal Offence Data | Health or disability related information (e.g. for accessible ticketing), religion (e.g. as part of dietary requirements), criminal offence data (e.g. where we enforce football banning orders or investigate alleged criminal conduct at our venues) and equal opportunities monitoring information, including information about your ethnic origin, sexual orientation and religion or belief. Where you apply to become a player at the Club, we will also collect additional health-related data as part of the pre-signing medical assessment process, including past medical history, menstrual and hormonal health information, current medications, allergy information, family medical history, sporting injury history, concussion history, current physical or mental health symptoms or concerns. |
Communication Data | Records of communication (where permissible) and communication metadata. |
Security Data | CCTV footage and other information obtained through electronic means. |
Community Programme Data | Participant registration details, emergency contact information, parental or guardian consent records, participant age and date of birth, relevant health or medical information (e.g. allergies, medical conditions or disabilities relevant to participation), safeguarding records, and attendance records in connection with community football programmes, coaching sessions, camps and related activities. |
Application-Related Data | Copy of passport or other identification documentation, curriculum vitae (CV), cover letter, employment history, education history, qualifications and skills, reference contact information, position preferences, willingness to relocate, desired salary, interests and aspirations, background screening information if relevant and bank account information if we re-imburse expenses. |
Scouting and Player Analysis Data | Match footage, performance statistics, physical attributes, tactical analysis notes, injury history (where publicly available or provided by you, the relevant club or organisation), and other information collected or generated in connection with the identification, scouting, analysis and assessment of players from other clubs and organisations for potential recruitment. |
Accreditation and Media Data | Press credentials, media outlet or organisation affiliation, accreditation pass details, access permissions, photographs, and other information provided or collected in connection with media accreditation and press or broadcast access to our matches and events. |
Supplier and Partner Data | Business contact details (name, job title or role, employer or organisation name, work email address and work telephone number), venue and facility access credentials. |
Emergency Contact Data | Next of kin details, emergency contact details and, where applicable, parents' or guardians' contact details, collected in connection with your role, participation in our programmes or activities, or your child's involvement with the Club. |
3. What information do we receive from third parties?
We also collect some information about you from other people or organisations. The specific categories of personal data we may collect from third parties, and when we collect them, varies depending on the nature of your relationship with us, but includes the following:
Where you purchase tickets through third-party ticketing platforms or attend our matches at third-party venues, we may receive your Identity and Contact Data and Ticketing Data from those platforms and venue operators.
In connection with our community football programmes, academy and grassroots initiatives, we may receive your Identity and Contact Data and Community Programme Data from schools, community organisations, local authorities and other partner organisations.
During recruitment, we collect your Identity and Contact Data and Application-Related Data from your referees (including previous employers), employment agencies, and background screening providers.
We may collect your Special Category and Criminal Offence Data from third parties, including: (i) from previous clubs, their medical staff and relevant healthcare providers in connection with pre-signing medical assessments for prospective players; (ii) from parents, guardians, schools, community organisations and relevant healthcare providers in connection with the health, welfare and safeguarding of participants in our community football programmes; and (iii) from relevant healthcare providers or support organisations in connection with accessible ticketing and seating requirements. Where your consent is required for such collection, we will obtain it in advance.
For security and safety purposes, we may obtain Security Data from security service providers, law enforcement bodies, and stadium safety officers where necessary.
In connection with player identification and recruitment, we may collect Scouting and Player Analysis Data from other clubs, player agents and intermediaries, scouts, data analytics providers and publicly available sources (including match broadcasts, publicly available statistics and social media).
Where you interact with us in a professional capacity on behalf of your employer or organisation, we may receive your Supplier and Partner Data from your employer, organisation or other professional contacts. In connection with media accreditation, we may receive your Accreditation and Media Data from media organisations, broadcasters and press agencies.
4. How do we use this information, and what is the legal basis for this use?
The Club is required to have a legal basis to process your data. We explain these legal bases below. We also explain the purposes for which we process your data, the processing operations that we carry out, and the categories of data that we use for each purpose.
- Contractual performance – we have obligations under our agreement with you. To fulfil these obligations or enforce our rights, we have to use your data.
- Consent – in certain limited cases, we ask for your consent to use your data. Whenever we ask for your consent, we will explain the situations where we use your data and for what purposes.
- Legitimate interest and recognised legitimate interest – we can process your data when this is necessary for us to achieve a business purpose, or where this is necessary for someone else to achieve their purpose. We explain below what interests we, or others, are trying to achieve when we process your data. Where we process personal data on the basis of a legitimate interest, then – as required by data protection law – we have carried out a balancing test to document our interests, to consider what the impact of the processing will be on individuals, and to determine whether individuals’ interests outweigh our interests in the processing taking place, unless this is a recognised legitimate interest set out in the UK GDPR. You can obtain more information about this balancing test by using the contact details at the end of the notice.
- Legal obligation – as an organisation we have obligations to comply with legal, regulatory, and other requirements under applicable UK laws. In certain cases, we will have to use your data to meet these obligations. In some circumstances, we will process special category data when it is needed in relation to legal claims, when it is needed to protect your interests (or someone else's interests) and you are not capable of giving your consent, or when you have already made the information public.
Purposes
We have set out below why we process your data and explain what data we use in each case. We may also provide you with more specific notices for some of the processing described below and, on the rare occasions we need to ask for your consent, we will only do this at the time we collect your personal data.
| Purpose | Categories of Data | Legal Basis |
|---|---|---|
To register and create your account on our website, to provide you with the services and products you have purchased or requested. This includes sending you service messages by email and SMS. | Identity and Contact Data, Delivery Data | It is necessary for us to process your personal data to perform our contract with you, or to take steps at your request prior to entering into a contract with you. |
To sell, administer and manage tickets for our matches and events (including at third-party venues), to allocate seating, to manage season tickets and waiting lists, to enforce applicable ticketing terms and conditions and manage your attendance at the Copperjax Community Stadium or at fixtures at other venues. | Identity and Contact Data, Ticketing Data, Delivery Data, Special Category and Criminal Offence Data (where applicable for accessible seating requirements). | It is necessary for us to process your personal data to perform our contract with you, or to take steps at your request prior to entering into a contract with you. We have a legitimate interest in managing your attendance at a match or event or use of another service booked by a third party. When we process special category data we will do so with your consent or as required by law to ensure the health and safety of our venues. |
To manage our relationship with you and to provide customer support, including responding to your questions or complaints. | Identity and Contact Data, Feedback Data, Communication Data. | We have a legitimate interest in managing our relationships with our customers and fans, responding to enquiries and complaints. |
To administer competitions, prize draws and surveys and to contact winners where applicable. | Identity and Contact Data, Feedback Data, Marketing Data, Communication Data. | It is necessary for us to process your personal data to perform our contract with you, or to take steps at your request prior to entering into a contract with you. We have a legitimate interest in promoting our brand and engaging with our fans through competitions, prize draws and surveys. |
To engage in consultations with you as a local resident and to provide you with updates on road closures, planning permissions and resident ticket discounts. | Identity and Contact Data, Communication Data. | We have a legitimate interest in keeping you up to date with local developments and engaging you in relevant consultations as a local resident. |
To send you marketing and promotional communications by email and SMS in relation to our relevant products and services and to provide you with tailored content and ads on this and other sites, apps or social media platforms based on your interactions on the website and other sites or apps or social media platforms (including measuring the effectiveness of our advertising campaigns). | Identity and Contact Data, Marketing Data, Device Data. |
Otherwise, we have a legitimate interest in promoting our products and services, and in keeping you informed about updates and offerings that may be relevant to you. |
To manage and operate our website, to keep it updated and relevant, to develop our business and to inform our marketing strategy, including by using data analytics and related technologies to understand how our users interact with our website, products and services, to improve and optimise our website, products, services and operations, to inform and refine our marketing strategy, and to support business decision-making across the Club. | Identity and Contact Data, Feedback Data, Device Data, Marketing Data. | Your consent where we use cookies. Otherwise, we have a legitimate interest in managing, improving and optimising our website, products, services and operations. |
To administer and manage community football programmes, coaching sessions, camps and related activities, to liaise and coordinate with school staff, community organisation representatives and local authority partners in connection with academy player development, grassroots football initiatives and community engagement programmes, including registering participants, managing attendance, communicating with participants and their parents or guardians, and fulfilling our safeguarding obligations in respect of children and adults at risk. | Identity and Contact Data, Community Programme Data, Emergency Contact Data, Communication Data, Special Category and Criminal Offence Data (where applicable). | We have a legitimate interest in administering our community football programmes, to deliver our academy and grassroots football programmes, and fulfilling our safeguarding obligations. We also process safeguarding data on the basis of the recognised lawful basis under UK law. Where we process special category data (e.g. health information for participant welfare), we will do so with your consent, as necessary to protect vital interests, or as necessary for the purposes of safeguarding children and adults at risk, or for the establishment, exercise or defence of legal claims. |
To manage our relationships with our suppliers, partners and hospitality providers, including communicating with their staff, administering contracts, processing payments, managing access to our venues and facilities, and coordinating the delivery of goods and services to the Club. This also includes managing media accreditation, facilitating press and broadcast access to our matches and events, coordinating media activities, and managing our relationships with journalists, photographers, broadcasters and other media personnel. | Identity and Contact Data, Supplier and Partner Data, Delivery Data, Accreditation and Media Data. | We have a legitimate interest in managing our supplier, partner and hospitality relationships, in managing media access to our matches and events, in promoting the Club through media coverage, and in ensuring the effective operation of our business. |
To process your application for a role with the Club. | Identity and Contact Data, Application-Related Data, Special Category and Criminal Offence Data. | We have a legitimate interest in assessing your application and your suitability and carrying out any permitted pre-employment background checks. We rely on your consent where you provide us details of your health. If we ask you to complete a DBS check, we must sometimes seek your consent, but the lawfulness of our processing of any criminal offence data is processed on the basis of the recognised lawful basis under UK law in safeguarding children and adults at risk, and/or preventing and detecting crime. Where it is necessary to process personal data to prevent, detect, or investigate a crime, we also rely on our recognised legitimate interest. If we ask for your data to carry out equality and diversity monitoring, we process data for this purpose as permitted by the Data Protection Act 2018. |
To identify, scout, analyse and assess players from other clubs and organisations for potential recruitment to the Club, or for the purposes of preparing our squads for upcoming fixtures and as part of wider performance training, including collecting and analysing performance data, match footage and other relevant information. | Identity and Contact Data, Scouting and Player Analysis Data. | We have a legitimate interest in identifying and recruiting players to strengthen the Club, and in assessing opposition players as part of match preparation and wider training. |
To ensure the safety and security of our venues and facilities, including through CCTV monitoring, access control systems, visitor management and incident investigation, and to coordinate security arrangements at third-party venues where our matches and events are held. | All relevant data. | We have a legitimate interest in ensuring the safety and security of our venues, staff, players, visitors and other individuals. Where it is necessary to process personal data to prevent, detect, or investigate a crime, we rely on the recognised legitimate interest under UK law. Where we process special category personal data and criminal offence data, we will do so for the legitimate interest in prevention, detection and investigation of crime, for the establishment, exercise or defence of legal claims, for the purposes of safeguarding children or adults at risk, or for the purposes of ensuring compliance with sports rules regarding standards of behaviour to which we are subject. |
To monitor customer accounts to prevent, investigate and report fraud, terrorism, misrepresentation, security incidents or crime in accordance with applicable law, and to protect our business against other criminal activity. | All relevant data. | We have a legal obligation under UK laws to comply with applicable law and regulations. Otherwise, we have a legitimate interest in protecting our business interests and legal rights, and the interests and legal rights of our users. Where it is necessary to process personal data to prevent, detect, or investigate a crime, we rely on the recognised legitimate interest under UK law. |
To comply with our legal and regulatory obligations and, where necessary, to establish, exercise or defend legal claims, to safeguard children or adults at risk and to carry out wider compliance activities (including disclosure of such information in connection with legal process or litigation). | All relevant data. | We have a legal obligation under UK laws to comply with applicable law and regulations. Otherwise, we have a legitimate interest in seeking legal advice in circumstances where we require it and to protect our business interests in litigation or disputes, to ensure wider compliance with rules to which we are subject and with our policies, and to ensure the protection of children and adults at risk. Where we process special category personal data and criminal offence data, we will do so for the prevention, investigation and detection of crime, for the establishment, exercise or defence of connected legal claims, for the purposes of ensuring compliance with sports rules regarding standards of behaviour to which we are subject, or for the purposes of safeguarding children or adults at risk. Where it is necessary to process personal data to prevent, detect, or investigate a crime, we rely on the recognised legitimate interests under UK law. |
5. Who will we share this data with, where and when?
We may share your data with the following categories of recipients, depending on the nature of your relationship with us:
| Who we share your data with | Why we share your data |
|---|---|
FA and WSL | To comply with the FA's requirements regarding the collation of certain aggregated fan data. |
Background screening and DBS providers | To carry out pre-employment screening and verification checks, including DBS checks where required by the nature of your role. |
Credit reference agencies | To verify your identity and financial information where necessary. |
Prospective purchaser or seller | In the event that the Club is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser's advisers and will be passed to the new owners of the business. |
IT service providers and data processors | For the limited purposes of hosting, supporting and maintaining their software and IT services to the Club, including website hosting, ticketing platforms, payment processing, email marketing platforms, performance analytics platforms, customer relationship management systems, cookie management tools and related technology services. |
Security service providers and venue operators | To ensure the safety and security of our venues, to manage access control, CCTV monitoring and incident management, and to coordinate security arrangements at third-party venues where our matches and events are held. |
Media organisations, broadcasters and photography partners | To facilitate media coverage of our matches and events and to manage press and broadcast access. |
Commercial partners and sponsors | To manage and fulfil our commercial partnership and sponsorship arrangements. |
Player agents, intermediaries and scouts, third party clubs and WSL. | In connection with player recruitment and scouting. |
Community organisations, schools, colleges and local authorities | To coordinate and deliver our community football programmes, grassroots initiatives and educational liaison activities, and to manage relationships with partner organisations in connection with academy player development. |
Government authorities and/or law enforcement officials | If required for the purposes set out in this policy, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws. |
Safeguarding officers, the FA, the WSL, local authorities, police and other relevant agencies | To protect your welfare or safety, or that of others, to comply with our safeguarding obligations and duty of care. In emergency situations involving immediate risk, we may share information without prior consent to protect vital interests. |
6. Where do we transfer your personal data?
Personal data that we collect from you may be transferred to and stored at a destination outside the UK including stakeholders, regulatory bodies and vendors outlined above based outside the UK. These may include governing bodies and service providers located in countries to which we conduct business travel. Where these locations do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect the transfer of your personal data to these countries, such as through use of UK Standard Contractual Clauses, unless the transfer is exempt, for example because the transfer is necessary in connection with a contract we have with you.
A copy of the relevant mechanism can be obtained for your review on request by using the contact details below.
7. What rights do you have?
You have the following rights under UK data protection law:
| Right | Summary |
|---|---|
The right of access | Enables you to receive a copy of your personal data. |
The right to rectification | Enables you to correct any inaccurate or incomplete personal data we hold about you. |
The right to erasure | Enables you to ask us to delete your personal data in certain circumstances. |
The right to restrict processing | Enables you to ask us to halt the processing of your personal data in certain circumstances. |
The right to object | Enables you to object to us processing your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement). Where we have asked for your consent, you may withdraw consent at any time. If you ask to withdraw your consent to us processing your data, this will not affect any processing which has already taken place at that time. |
The right to data portability | Enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible. |
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you have unresolved concerns, you have the right to complain, either to us using the contact details set out below, or to the ICO (the UK’s data protection regulator).
Where we collect personal data to administer our contract with you or to comply with our legal obligations, this is mandatory and we will not be able to manage the employment relationship without this information. In all other cases, provision of the requested personal data is optional, but this may affect your ability to participate in certain programs or systems, where the information is needed for those purposes. For example, you may not be able to participate in a team activity if you choose not to provide the relevant information.
8. How long will we retain your data?
Where we process personal data in connection with performing a contract or for a competition, we keep the data for 6 years from your last interaction with us. Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing to. Where we process CCTV footage, we hold this for 30 days, unless we have been asked to extract footage, in which case this is held for as long as necessary for the reason it has been extracted. Where we process personal data for site security purposes, we retain it for 6 months. Where we process personal data in connection with recruitment, we retain it for up to 12 months from the conclusion of the recruitment process, unless we have a lawful basis to retain it for longer.
9. Updates to this notice
We reserve the right to update this notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
10. Contact us
The controller for your personal data is LCL Sports Group Limited. If you have questions about this notice or wish to contact us for any reason in relation to our personal data processing, please contact us at dataprotection@londoncitylionesses.com.