Privacy Policy

Celtic Supporters Limited ("CSL", "we", "our", "us") is committed to protecting the privacy of our members and visitors. This Privacy Policy explains how we collect, use and protect your personal data when you use our website or join as a member. CSL is a company limited by guarantee, registered in Scotland.

1.Data Controller

Celtic Supporters Limited is the data controller for all personal data submitted through our website or membership portal.

Contact: info@celticsupporters.net

2.What Data We Collect

Identification Data: Name, date of birth (if provided), telephone number, email address, postal address (if provided), shareholder or season ticket status, membership tier.
Account Data: Login credentials, membership start/renewal/cancellation history, communication preferences.
Payment Data: Stripe payment identifiers, subscription details, card expiry month and year (via Stripe). CSL does not store full card numbers.
Technical Data: IP address, device and browser information, cookies, analytics.

3.Cookies

Types used: Essential (required for site functionality, login, payments, security), Analytics (site usage), Preference (user settings).

Consent: Visitors can accept or decline analytics cookies. Essential cookies cannot be disabled.

4.Lawful Basis for Processing

  • Contract - to provide membership services, manage subscriptions, communicate operational updates and administer accounts.
  • Consent - for marketing communications.
  • Legitimate Interests - site security, fraud prevention, improving member experience, tracing lost shareholders, maintaining accurate membership records.
  • Legal Obligation - keeping necessary financial and compliance records.

5.How We Use Your Data

To provide membership services, manage subscription payments, communicate updates and governance activity, respond to enquiries, maintain shareholder engagement records, improve CSL's services, comply with legal duties, and deliver share tracing support.

We never sell personal data.

6.Sharing Your Data

We share data only with: Stripe (payment processing), email service providers, website hosting providers, CRM or membership management platforms, professional advisers (legal/accounting), regulators or authorities where required by law. All third-party processors are bound by data processing agreements.

7.Data Retention

  • Membership account data: duration of membership + 6 years.
  • Payment records: 6 years (legal requirement).
  • Communications data: 2 years from last contact.

You may request deletion at any time unless legal obligations require retention.

8.Your Rights

Under UK GDPR you have the right to:

  • Access your personal data
  • Request correction
  • Request deletion
  • Restrict processing
  • Object to processing (including marketing)
  • Data portability
  • Withdraw consent
  • Lodge a complaint with the ICO

9.Security

We use industry-standard encryption and access controls. Access is restricted to authorised personnel and volunteers under strict confidentiality obligations.

10.Children's Data

We do not knowingly collect data from children under 16. Any such data will be deleted.

11.Contact

For privacy requests: info@celticsupporters.net