Last updated May 2026
This privacy notice explains what personal data we collect from or about you. It sets out why we collect, use, and protect your personal data, and what rights you have over that data.
The data controller responsible in accordance with the purposes of the UK General Data Protection Regulation (UK GDPR) and other data protection regulations is:
Recreational Sporting Ltd ("we", "us", "our") trading as PlayFootball.
Building 2, Guildford Business Park
Guildford Business Park Road
Guildford
GU2 8JZ
Website:
www.playfootball.net
Email:
privacy.officer@playfootball.net
The contact details for our Data Protection Officer are as follows:
DataCo International UK Limited
Suite 1, 7th Floor 50 Broadway
London
United Kingdom
SW1H 0BL
Email:
privacy@dataguard.co.uk
Phone: +44 203 514 6557
We are the controller of the personal data we process. This means that we are responsible for deciding how we collect, use and store information about you.
Depending on the specific service you use and how it is delivered, we may act as a sole controller, joint controller, or independent controller alongside third parties. Where joint controllership applies, this is explained clearly in the relevant section below.
We are registered with the Information Commissioner's Office (ICO) under number: ZB270252.
How we collect and use your personal data will depend on how you interact with us or the services you use. To better understand how we use your data, please review the role below that best describes you.
Cookies are small text files that are placed on your device, such as your computer, phone or tablet, when you view pages on our website. These cookies allow us to track some of your browsing preferences and optimise how our website works.
While we are not looking to identify you using cookies as the focus on your device, it may be possible for us to identify you or infer information about you. Unless the cookies are “strictly necessary” to make our website function, we will ask for your consent before they are placed on your device.
For more information on the cookies we use, please read our Cookie Notice.
| Purpose your data is used | Type of data used | Legal basis | How long we keep your data |
|---|---|---|---|
| To deliver the newsletter to the recipient | Email address, First name | Consent (Art. 6(1)(a) UK GDPR) | As long as the newsletter subscription is active |
A contact form is available on our website, which can be used for electronic contact. If you make use of this option, the data entered in the contact form will be transmitted to us and stored.
| Purpose your data is used | Type of data used | Legal basis | How long we keep your data |
|---|---|---|---|
| To establish contact | Email address, First name, Last name, Phone Number, Date and time | Legitimate interest (Art. 6(1)(f) UK GDPR) to establish contact with those who submit their queries | Until the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the facts in question have been conclusively clarified. |
Processing of customer data for the purpose of processing and fulfilling online purchases made via the website, including order confirmation, delivery, invoicing, and potential follow-up communication related to the transaction.
| Purpose your data is used | Type of data used | Legal basis | How long we keep your data |
|---|---|---|---|
| Processing and fulfilling online purchases made via the website, including managing online bookings, delivering services, customer support, and related administrative activities | First and last name, Billing and delivery address, Email address (used for a contact and account/booking identification), Phone number (Used for booking related communication)[KT1.1], Booking details, Payment details. | Contract performance (Art. 6 (1) (b) UK GDPR) – for processing strictly necessary to complete the booking/ purchase (e.g., booking creation, confirmation, service delivery). Compliance with a legal obligation (Art. 6 (1) (c) UK GDPR) – for retaining transaction records for accounting and tax purposes. Legitimate interests (Art. 6 (1)(f) UK GDPR) – for necessary operational activities related to bookings, including customer service communications, account management, and service administration, where these are not strictly required to perform the contract and are not overridden by individual’s rights. | Stored for 6 years after the end of the fiscal year in which the transaction took place, in line with statutory retention requirements for business records and taxation. |
Processing of player data for the purpose of organising, administering, and operating football leagues, including team management, match recording, and compliance with governing body requirements.
| Purpose your data is used | Type of data used | Legal basis | How long we keep your data |
|---|---|---|---|
| To organise and manage league participation, including team allocation, communication, match administration, recording results, managing disciplinary processes, and complying with applicable governing body requirements. | Player name, Contact details (email, phone number), Team allocation data, Match statistics, Attendance records, Disciplinary records. | Contract performance (Art. 6 (1) (b) UK GDPR)[KT2.1][MH2.2] – where an individual enters into a contract directly with us, (e.g., Booking or payment for league participation); Compliance with a legal obligation (Art. 6 (1) (c) UK GDPR) – where we are required to retain certain records for financial, regulatory, or governing body compliance purposes. Legitimate interests (Art. 6 (1) (f) UK GDPR) – to organise and operate football leagues, including managing fixtures, recording results, administrating teams, and ensuring effective delivery of league services. | Personal data is retained for 6 years counting from the beginning of participation in a league: (i) to manage and resolve disputes and legal claims; (ii) [KT3.1][MH3.2]to comply with statutory accounting requirements. |
When you make or receive a phone call, your call may be recorded and supported by AI systems. How calls are handled:
Your Choices and Rights
You have the right to object to the use of AI systems in handling your call and to the recording or processing of your data in this way. If you wish to object:
| Purpose your data is used | Type of data used | Legal basis | How long we keep your data |
|---|---|---|---|
| 1) To provide customer support and manage communications; 2) To monitor service quality (to analyse trends, improve our services, and support staff training); 3)To handle disputes | Call recordings, phone number, call metadata (date and time of the call, duration, and routing information), communication content, interaction history. | Legitimate interests (Art. 6(1)(f) UK GDPR) – providing customer support and managing communications; improving service quality; dispute handling. | For the purposes “to provide customer support and manage communications” and “to monitor service quality” personal data will be stored for 6 months counting from the date of the call. For the purpose “to handle disputes” personal data will be stored for 6 years counting from the date of the call (as per the statute of limitation period). |
When you submit a web enquiry or contact form, your enquiry may be supported by AI systems.
| Purpose your data is used | Type of data used | Legal basis | How long we keep your data |
|---|---|---|---|
| 1) To respond to enquiries and provide customer support; 2) To monitor service quality (to analyse trends, improve our services, and support staff training); 3) Improve website users’ navigation across our website environment; | Name, contact details, enquiry content, communication history, metadata (request date and time) | Legitimate interests (Art. 6(1)(f) UK GDPR) – responding to enquiries and improving customer support, monitoring service quality, improving website users’ navigation. | Enquiry data is retained for up to 12 months from the closure of the enquiry. |
We may collect images or recordings where individuals appear in photography, video or drone footage for promotional, operational and event-related purposes.
| Purpose your data is used | Type of data used | Legal basis | How long we keep your data |
|---|---|---|---|
| To promote services, share event highlights, support marketing campaigns, and document activities. | Images, video recordings and drone footage. | Consent (Art. 6(1)(a) UK GDPR) | Raw footage / unedited content: Retained for 12 months to allow for content review, editing, and selection. Final approved content: Retained for the duration of the relevant campaign and for up to 5 years thereafter to support ongoing promotion, evidencing marketing activity, and maintaining a historical record of events and services. |
Processing of personal data for the purpose of sending offers, promotions and updates.
| Purpose your data is used | Type of data used | Legal basis | How long we keep your data |
|---|---|---|---|
| To send marketing communications, promotions, and service updates selected to be useful and relevant. | Name, email address, phone number, marketing preferences, service usage history. | Consent (Art. 6 (1) (a) UK GDPR) – where you have opted in to receive marketing communications. | We review marketing consent regularly and remove data where consent is withdrawn, expires, or becomes invalid, including prolonged inactivity. |
On our company profile we provide information and offer Meta, Instagram, TikTok, YouTube and X (formerly Twitter) users the possibility of communication.
If you carry out an action on our company profile (e.g. comments, contributions, likes etc.), you may make personal data (name, photo of your user profile, any other data you made available in your profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by Meta, we cannot make any binding statements regarding the purpose and scope of the processing of your data. Our corporate profile in social networks is used for communication and information exchange with (potential) customers. .
Every user is free to publish personal data. As far as we process your personal data in order to evaluate your online behaviour, to offer you sweepstakes or to conduct lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a) of the UK GDPR. The legal basis for processing personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) UK GDPR. Thereby, our legitimate interest is to answer your request optimally or to be able to provide the requested information. If the aim of contacting you is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) UK GDPR.
The data generated on the company profile are not stored in our own systems.
You can object at any time to the processing of your personal data that we collect within the framework of your use of our corporate web profiles and assert your rights as a data subject mentioned the "Your rights" section of this privacy policy. Please send us an informal email to privacy@dataguard.co.uk.
For further information on the processing of your personal data by Meta, Instagram, YouTube and X (formerly Twitter) and the corresponding objection options, please click here:
We use corporate profiles on professionally oriented networks.
We maintain a corporate presence on the following professionally oriented networks:
On our site we provide information and offer users the possibility of communication. The corporate profile is used for job applications, information, public relations, and active sourcing. Further information can be found in the privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy
Every user is free to publish personal data. If you carry out an action on our company profile (e.g. comments, contributions, likes etc.), you may make personal data (e.g. clear identifier; full name or photo of your user profile) public.
| Purpose your data is used | Type of data used | Legal basis | How long we keep your data |
|---|---|---|---|
| To inform users about our services. | Name, profile image and any information made available within your profile. | Legitimate interest (Art. 6 (1) (f) UK GDPR) to answer your request optimally or to be able to provide the requested information. | The data resulted from you carrying out an action on our company profile (e.g. comments, contributions, likes etc.) will be stored as part of our LinkedIn corporate profile until the profile is deleted. We do not store this data in our own systems beyond LinkedIn environment. |
We are only able to use your personal data when the law allows us to. This is called the legal basis. Regarding the above purposes, the legal basis listed for each are explained below:
You can find out more about legal basis by accessing the UK Information Commissioner’s Office’s guidance here
Unless specified otherwise in this Privacy Notice, the provision of personal data is not a statutory or contractual requirement. It means that you are not obliged to provide personal data. The consequence of failure to provide personal data would be inability to achieve our designated purpose.
Third Party Service Providers within our website.
As with most organisations, we use service providers to help us maintain our website, deliver our services and keep your data secure. When we use these service providers, it is necessary for us to share your personal data with them. We have agreements in place with all our providers that oblige them to protect your data.
Third Party Cookie Providers
When you browse our website, certain data may be collected through cookies or other tracking technologies. Where required, this occurs based on your prior consent. Some of these cookies are provided by third-party service providers that support us in various areas, such as:
As a result, certain data may be shared with these third-party providers. We have data processing agreements in place with all third-party providers to ensure that your personal data is handled securely and in accordance with data protection regulations.
For more information on the cookies we use, please read our cookie notice.
Third Party Links
Our website includes links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices. When you leave our website, we encourage you to read the privacy notice of each website you visit.
Where we transfer your personal data outside the UK, we will ensure that it continues to receive a level of protection consistent with UK data protection law. This may be achieved in one of the following ways:
You have the right to obtain a copy of the safeguards we use for transfers outside the UK. Please contact us (see the “Who we are” section above for contact details) if you wish to receive further information.
Under data protection legislation, in certain circumstances you have the following rights over the processing of your personal data as described in this notice:
In most cases, we must respond to a request to exercise these rights within one month. If you would like to submit a request, please contact us (see the ‘Who we are’ section above for contact details).
If you believe that we have processed your personal data in a way that does not comply with data protection law, you may make a complaint directly to us.
Complaints can be submitted to privacy.officer@playfootball.net. We will acknowledge your complaint within 30 days of receipt. We will take appropriate steps to investigate and respond to it, may contact you for further information where needed, will keep you informed as appropriate, and will notify you of the outcome without undue delay.
If you are dissatisfied with how we have handled your complaint, you may also raise the matter with the UK Information Commissioner’s Office (ICO):
By Post:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
By Phone: +44 303 123 1113
Via ICO website: https://ico.org.uk/global/contact-us/