Privacy Policy

This privacy policy explains how Fulham Football Club Limited ("FFC") uses personal data that you provide or which FFC collects and holds about you when you use its official websites and/or other services. FFC is the data controller of this information for the purposes of this policy. FFC’s Senior Information Officer is Peter Limbert, who is contactable using the details set out below.

FFC’s websites and services include:

• The Official Fulham FC Website at fulhamfc.com;
• The Fulham Football Club Official Online Store at shop.fulhamfc.com;
• The Fulham Football Club Online Ticket Office at tickets.fulhamfc.com;
• FFCtv at tv.fulhamfc.com;
• The official Fulham social media pages on Facebook, Twitter, Instagram, Snapchat and YouTube; (together the "FFC Official Websites") 
• The Official Fulham FC App;
• The Fulham Stadium Store at Stevenage Road, London SW6 6HH;
• The Official Fulham FC Telephone Sales Line, on 0203 871 0810; and
• FFC’s text incident reporting service provided by Commify UK Limited

Information we hold about you may include any one or more of the following types of data:

Account information: When you register to use, purchase or engage with any of FFC’s goods and/or services, the minimum information we will usually ask you to provide is your name, email address, country of residence, telephone number, and year of birth.  We may also ask you for additional information depending on the nature of our interaction with you. 

Transactional information: When you purchase tickets (including where tickets are purchased through FFC’s official third party ticketing provider from time-to-time), merchandise and other products from FFC Official Websites or any other official offline sales channels, we will keep a record of your transaction, including what you purchased and when, and any information you provide to us to fulfil the transaction.  This may include your name, billing information, telephone number, and delivery address.  We will not keep payment card information, except for the last four digits of your payment card number which we keep in case there are any payment disputes or we need to issue a refund.  We will ensure that, when handling any information about you relating to a transaction, we comply with the applicable regulations of the Payment Card Industry.

Information you provide to us in response to a survey: We may occasionally contact you to ask for your feedback on FFC products, goods and/or services so that we can make them better and more relevant.

Information you provide to us in response to a job advertisement: We regularly advertise open positions on the Recruitment page of our website which you may apply for by sending your CV to the email address provided.

Information you post online: We may hold and use information and/or user generated content which you post on FFC Official Websites and/or the Official Fulham FC App, including information about your IP address, location and click history.   

Information from other companies: We may use publicly available postal address lists and the edited electoral roll to ensure that the information we hold about you is accurate or we may use this information, together with general market research information (for example, demographic information), to add to and enhance our fan database. 

Online usage information: If you use FFC Official Websites we may collect your browser type, the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page.  In addition, if you use the Official Fulham FC App we may collect information confirming your device type and any GPS location data.  Online usage information may be linked to a unique identifier but we do not link online usage information to named individuals. In order to collect online usage information we use cookies and other similar technologies.  

Information you provide to us in order to take part in an activity or an event: In order to take part in an activity operated by FFC you may need to provide data such as your name, date of birth, address, ethnicity, sex and relevant medical information. We will also collect data on attendance and performance.

In addition, we may collect your data if you attend an event organised by FFC, including matches, training sessions or events held at the FFC stadium at Craven Cottage, London SW6 6HH, or matches training sessions or events held at the FFC training ground, at Motspur Park, New Malden KT3 6PT. 

In most cases, you are not obliged to provide any personal data to us, but in some cases we may not be able to provide goods or services to you unless you provide certain minimum information.  By way of example only, where you intend to make a purchase from FFC, we may need to obtain and process certain information about you in order to enter into and perform the contract of sale with you.

Information you provide us when you report an incident at Craven Cottage: If you use the text service to report an incident at Craven Cottage, FFC will collect the telephone number used to report the incident and any other personal information you provide, this may include (by way of a non-limiting example) your name and address.  This data will be processed by our third-party provider, Commify UK Limited (company number 04217280) with a registered office at 20 Wollaton Street, Nottingham, NG1 5FW (trading as Esendex).  Your data will never be used for marketing purposes but FFC may contact you to discuss the details of your report and/or pass your information on to relevant third parties to assist in the prevention of crime.

Special Categories of Personal Data: FFC may from time to time collect special categories of personal data on you.  This includes personal data revealing: racial or ethnic origin, religious or philosophical beliefs, data concerning your health and/or you states of physical or mental health or personal data concerning your sexual orientation.

FFC may collect these special categories of personal data for the purposes of better understanding our fan base, identifying ways to improve communication to all areas of our fan base and to maintain the Club’s commitment to equality and diversity as it relates to all those who engage with the Club.  The table below sets out examples of the categories of personal data and the groups of people which may be relevant to this area.  

You can opt out of FFC processing your special categories of personal data at anytime by either opting out of any communication sent to you or notifying the Senior Information Officer (details below).

The legal basis under which FFC will process your personal data is one or more of the following:

• To allow us to enter into and/or perform our contract with you*;
• To enable us to comply with legal obligations**;
• To pursue legitimate interests of our own or those of third parties (provided that your interests and fundamental rights do not override those interests) ***; and/or
• With your consent****.

Further details of how we will process your personal information are listed below. We have indicated by asterisks the legal basis on which we are processing or will process your personal information.

Contract performance* / **: FFC may use account information and transactional information data, as necessary, to carry out or perform any contract which you may have entered into with us, including contracts for the purchase of tickets, merchandise and other products, but also our contracts with you when we operate competitions, prize draws and promotions and when we administer your online accounts and provide services to you.  We also use this information to communicate with you and handle your enquiries regarding these contracts.  If you order FFC goods, products or services for another person (for example, match tickets for family or friends) we may ask you for their personal information and we will use this to provide the services you have ordered. Please ensure that you have their permission for us to process this data before providing it to FFC. 

Legal obligations**: FFC retains records of all of its financial transactions with you in order to comply with its legal obligations to maintain adequate accounting records.  FFC may use (and disclose) the information it holds about you in order to comply with any investigative demand, court order, or a request for cooperation from a law enforcement or other government agency.

Recruitment***: If you apply for a job with FFC or if you volunteer with the Club or contact us in relation to potential roles which may arise in the future, we may use your information for the purposes of recruitment and selection, corresponding with you and for equal opportunities monitoring. 

• its financial transactions with you for six years in order to comply with its obligations to maintain adequate accounting records;
• its contracts with you for six years so that it has appropriate evidence in place if there is a claim for breach of contract made within the statutory limitation periods;
• job applications and CVs for up to six months, unless you have consented to your details being held on file in case other suitable opportunities arise;
• your account information until you close or delete your account/profile (at which point we would also delete any information from other companies or market research which we have appended to your account/profile);
• any market research we have undertaken (and which is not appended to your user account) for 3 years.Note that we will retain aggregated market research information (by which you cannot be identified) on an ongoing basis for internal purposes; and
• save as set out above, information you post online and/or online usage information for 3 years if it is on FFC Official Websites.

If any information falls into more than one category then the longer storage period will apply.

You have several rights under applicable data protection laws (unless an exemption applies), which we have summarised below. These rights can be exercised by contacting FFC using the details given below in this policy. 

You have the right to:

• ask us not to process your personal data for direct marketing purposes;
• request access to personal information held about you and a copy of it;
• obtain, without undue delay, the rectification of inaccurate or incomplete personal data; 
• obtain, without undue delay, erasure of your personal data in certain circumstances, for example if FFC’s processing of your personal data is no longer necessary for the purpose for which we collected it; 
• restrict the processing of your personal data in certain circumstances rather than having it erased; 
• -object to the processing of, personal data in certain circumstances; 
• receive personal data, which you have provided to FFC, in a structured, commonly-used and machine-readable format and transmit that personal data to another data controller, or have FFC do so on your behalf where technically feasible;  • be informed about any use of your personal data to make automated decisions about you, and to obtain meaningful information about the logic involved, as well as the significance and the envisaged consequences of this processing; and • lodge a complaint about the way in which your personal data is being used to a supervisory authority.

Marketing where it is in our legitimate interest***: We may also market to you with news and offers from FFC, its affiliates and its official sponsors and partners (an up-to-date list of which is at www.fulhamfc.com/club/club-partners) which we think may be of interest to you, and conduct related surveys, or analytics, where it is in our legitimate interest, and where your consent is not necessary.  This can apply to individuals (e.g. analytics) but also to contacting data subjects who work for businesses that take corporate memberships or sponsorships with us.  

• Telephone and postal marketing*** Further, we may call you (unless you have registered with the Telephone Preference Service or you have otherwise asked us not to contact you) or send you materials through the post (unless you have registered with the Mail Preference Service or you have otherwise asked us not to contact you) in relation to offers from the Club or its partners.
• Marketing with your consent (where consent is necessary)****: If you have consented to it (where consent is necessary) FFC may contact you electronically with news and offers from FFC, its affiliates and its official sponsors and partners (an up-to-date list of which is here) which we think may be of interest to you.  You have the right to withdraw your consent at any time, by clicking here.
• Other purposes***: FFC will analyse information it holds about you to identify trends and preferences about its customers and to get a more detailed and informed picture of how its customers are using FFC’s products and services.  We do this to make better strategic decisions about FFC and its products and services so that we can improve the way we market and provide products and services to you and FFC supporters generally.  FFC may also use online usage information about you to administer and improve the function and content of the FFC Official Websites and the Official Fulham FC App, including to ensure that content is presented in the most effective manner for you and your device and browser, to allow you to participate in interactive features when you choose to do so and to keep our online services safe and secure. FFC may also use the information it holds about you if required to protect the rights, property, or safety of FFC, our fans, customers or others.

In addition, where you attend an event hosted at FFC but organised by a third party (for example leagues or regulatory bodies such as the EFL, the Premier League and/or the FA) the Club may share your data with the relevant governing body / bodies.   

FFC will not carry out any automated decision-making using information it holds about you.

Affiliates: Information held by FFC may be used by affiliates of FFC for the purposes set out in this policy, where you have consented to this.  Our affiliates include the Fulham Football Club Foundation, Union Jax LLC and those businesses which share common ownership with FFC.  This may include providing them with your personal information so that they can provide you with information about their products and services that may interest you, where you have consented to this.

Sponsors and partners: FFC does not share your personal data with our sponsors and partners, but we may: (i) share aggregate/anonymised information which is based on this information with existing and potential sponsors and partners; and (ii) if you have consented to the same, send you information about the products and services of our partners and sponsors in our marketing communications.

FFC suppliers and sub-contractors: FFC may share your information with suppliers and sub-contractors from time-to-time in order that they can process it on FFC’s behalf for the purposes set out in this privacy policy.  However, where we do so we will put in place suitable measures in order to protect your information.  These third parties may include (but may not be limited to): (i) call centre providers; (ii) IT service providers (such as hosting providers); (iii) mailing houses or document storage companies; (iv) delivery services; (v) analytics, marketing services (including surveys) and search engine providers; (vi) credit reference agencies; and/or (vii) payment processing companies.

Disclosures for legal reasons: FFC may also disclose the information it holds about you to those persons that have a reasonable need to know such information, if it believes in good faith that this is necessary: (i) to establish, exercise or enforce its legal rights, including contractual rights; (ii) to defend itself against a legal claim; (iii) report a crime or prevent a crime (for example, ticket touting); (iv) to prevent harm to any individual or any property (including intellectual property, for example if you misuse images or videos or any other content FFC makes available to you); (iv) to satisfy our statutory and/or regulatory obligations relating to safeguarding; or (v) to prevent fraud (for example, payment card fraud) or for credit risk reduction.

Business transfer: If FFC sells or buys any business or assets, your personal data may be disclosed to the prospective seller or buyer of such business or assets so that they can carry out due diligence in respect of the sale or purchase, but only if FFC has taken reasonable steps to ensure the security and confidentiality of that information.  If FFC (or substantially all of its assets) is acquired by a third party, personal data held about fans or users of its goods, products or services will be one of the transferred assets.

Regulatory compliance: As above, from time to time FFC will be a member of the EFL or the Premier League and is also a member of the FA.  As such, FFC is subject to the rules and regulations of the EFL, the Premier League and the FA, as appropriate.  FFC may disclose personal information about you to the EFL, the Premier League and/or the FA where this is required for the purposes of complying with those rules and regulations.  The EFL, the Premier League and the FA will respect the security of your personal data and treat it accordance with the applicable law.  Further information about the EFL’s use of personal data can be found in the EFL privacy notice at: https://www.efl.com/efl-privacy-notice; further information about the Premier League’s privacy policy can be found at: https://www.premierleague.com/privacy-policy; and further information about the FA privacy policy can be found at: http://www.thefa.com/public/privacy.  

Transfer outside the EEA: Your information may be transferred to or accessed outside of the EU by FFC’s affiliate, the Jacksonville Jaguars LLC, who are based in the USA.  Jacksonville Jaguars have entered into the standard contractual clauses approved by the European Commission to safeguard your personal data and comply with applicable data protection laws.

FFC is committed to ensuring that your information is secure.  In order to prevent un-authorised access or disclosure of personal data, we have put in place appropriate physical, electronic and managerial procedures to safeguard and secure the information we collect. We regularly perform testing of these procedures and have an appropriate information recovery and data breach procedures in the event that we encounter any difficulties.

FFC will retain your personal data for as long as necessary for the purposes it is collected as set out in this policy and for any longer period necessary for it to comply with statutory retention obligations and/or for the purposes of defending or making legal claims. Examples of some of our retention periods are set out below:

FFC stores: 

Parental consent / supervision

Our business and the competitions, products and services we provide from time-to-time are not specifically targeted at children, but we appreciate that many children are fans of football and/or sport generally.  We would therefore ask that parents and guardians supervise their children when they are online and that children under 18 do not submit personal information or content to FFC, make purchases of FFC goods, products or services, or take part in FFC promotions or competitions, without the consent of their parent or guardian.  FFC reserves the right to take reasonable measures in order to verify the existence and/or validity of parental consent.

If you would like to contact FFC about this policy or any of the legal rights outlined in it, you can contact us by email at DPO@fulhamfc.com  or write to FFC at Motspur Park Training Ground, New Malden, Surrey, KT3 6PT.  In either case, your correspondence should be marked for the attention of the Senior Information Officer. 

Any changes we make to this privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to this privacy policy. 

This privacy policy was last updated in January 2020.