Who We Are

Celtic Supporters Limited (“CSL”, “we”, “our”, “us”) is committed to protecting the privacy of our members and visitors. This Privacy Policy explains how we collect, use and protect your personal data when you use our website (celticsupporters.net) or join as a member.
CSL is a company limited by guarantee, registered in Scotland.

1. Data Controller

Celtic Supporters Limited is the data controller for all personal data submitted through our website or membership portal.
Contact:
Info@celticsupporters.net

2. What Data We Collect

Identification Data

• Name
• Date of birth (if provided)
• Telephone number
• Email address
• Postal address (if provided)
• Shareholder or season ticket status
• Membership tier

Account Data

• Login credentials
• Membership start, renewal and cancellation history
• Communication preferences

Payment Data

• Stripe payment identifiers
• Subscription details
• Card expiry month and year (via Stripe)

CSL does not store full card numbers.

Technical Data

• IP address
• Device and browser information
• Cookies
• Analytics

3. Cookies

CSL uses cookies to improve website functionality, security and user experience.

Types of Cookie used

• Essential cookies: Required for site functionality, login, payments and security.
• Analytics cookies: Used to understand site usage (Google Analytics or equivalent).
• Preference cookies: Remember user settings.

Consent

Visitors can accept or decline analytics cookies.
Essential cookies cannot be disabled.

Data Collected

• IP address
• Browser type
• Device data
• Time spent on pages
• Actions taken on the site

This data is processed under legitimate interests.

How to Control Cookies

Users can disable cookies via browser settings

4. Lawful Basis for Processing

We process your data on the following lawful bases:

• Contract – to provide membership services, manage subscriptions, communicate operational updates and administer your account.
• Consent – for marketing communications.
• Legitimate Interests –
  • Ensuring site security and fraud prevention
  • Improving member experience
  • Tracing lost shareholders
  • Maintaining accurate membership records
  • Legal Obligation – keeping necessary financial and compliance records

5. How We Use Your Data

We use your data to:

• Provide membership services
• Manage subscription payments
• Communicate updates, governance activity and operational messages
• Respond to enquiries
• Maintain accurate shareholder engagement records
• Improve CSL’s services
• Comply with legal duties
• Deliver share tracing support and related services

We never sell personal data.

6. Sharing Your Data

We share data only with:

• Stripe (payment processing)
• Email service providers
• Website hosting providers
• CRM or membership management platforms
• Professional advisers (legal/accounting)
• Regulators or authorities where required by law
• All third-party processors are bound by data processing agreements.

Some providers may process data outside the UK/EEA, in which case CSL uses standard contractual clauses and equivalent safeguards.

7. Data Retention

We retain your data only for as long as necessary:

• Membership account data: duration of membership + 6 years
• Payment records: 6 years (legal requirement)
• Communications data: 2 years from last contact
• Cookies: see Cookie Policy below

You may request deletion at any time unless legal obligations require retention.

8. Your Rights

Under the UK GDPR you have the right to:

• Access your personal data
• Request correction
• Request deletion
• Restrict processing
• Object to processing (including marketing)
• Data portability
• Withdraw consent
• Lodge a complaint with the ICO

9. Security

We use industry-standard encryption and access controls. Access is restricted to authorised personnel and volunteers under strict confidentiality obligations.

10. Children’s Data

We do not knowingly collect data from children under 16. Any such data will be deleted.

11. Contact

For privacy requests: info@celticsupporters.net