PLAY


HELP & SETTINGS

Privacy Notice

Last updated May 2026


1.0 About this Notice

This privacy notice explains what personal data we collect from or about you. It sets out why we collect, use, and protect your personal data, and what rights you have over that data.


2.0 Who We Are

The data controller responsible in accordance with the purposes of the UK General Data Protection Regulation (UK GDPR) and other data protection regulations is:

Recreational Sporting Ltd ("we", "us", "our") trading as PlayFootball.

Building 2, Guildford Business Park
Guildford Business Park Road
Guildford
GU2 8JZ

Website: www.playfootball.net
Email: privacy.officer@playfootball.net


3.0 Data Protection Officer

The contact details for our Data Protection Officer are as follows:

DataCo International UK Limited
Suite 1, 7th Floor 50 Broadway
London
United Kingdom
SW1H 0BL

Email: privacy@dataguard.co.uk
Phone: +44 203 514 6557


4.0 Our Role

We are the controller of the personal data we process. This means that we are responsible for deciding how we collect, use and store information about you.

Depending on the specific service you use and how it is delivered, we may act as a sole controller, joint controller, or independent controller alongside third parties. Where joint controllership applies, this is explained clearly in the relevant section below.

We are registered with the Information Commissioner's Office (ICO) under number: ZB270252.


5.0 How We Collect and Use Your Information

How we collect and use your personal data will depend on how you interact with us or the services you use. To better understand how we use your data, please review the role below that best describes you.

Cookies are small text files that are placed on your device, such as your computer, phone or tablet, when you view pages on our website. These cookies allow us to track some of your browsing preferences and optimise how our website works.

While we are not looking to identify you using cookies as the focus on your device, it may be possible for us to identify you or infer information about you. Unless the cookies are “strictly necessary” to make our website function, we will ask for your consent before they are placed on your device.

For more information on the cookies we use, please read our Cookie Notice.


I have signed up to your newsletter or submitted an enquiry

Purpose your data is used Type of data used Legal basis How long we keep your data
To deliver the newsletter to the recipient Email address, First name Consent (Art. 6(1)(a) UK GDPR) As long as the newsletter subscription is active

I have submitted a query via the website contact form

A contact form is available on our website, which can be used for electronic contact. If you make use of this option, the data entered in the contact form will be transmitted to us and stored.

Purpose your data is used Type of data used Legal basis How long we keep your data
To establish contact Email address, First name, Last name, Phone Number, Date and time Legitimate interest (Art. 6(1)(f) UK GDPR) to establish contact with those who submit their queries Until the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the facts in question have been conclusively clarified.

I have made a booking or purchased via the website

Processing of customer data for the purpose of processing and fulfilling online purchases made via the website, including order confirmation, delivery, invoicing, and potential follow-up communication related to the transaction.

Purpose your data is used Type of data used Legal basis How long we keep your data
Processing and fulfilling online purchases made via the website, including managing online bookings, delivering services, customer support, and related administrative activities First and last name, Billing and delivery address, Email address (used for a contact and account/booking identification), Phone number (Used for booking related communication)[KT1.1], Booking details, Payment details. Contract performance (Art. 6 (1) (b) UK GDPR) – for processing strictly necessary to complete the booking/ purchase (e.g., booking creation, confirmation, service delivery). Compliance with a legal obligation (Art. 6 (1) (c) UK GDPR) – for retaining transaction records for accounting and tax purposes. Legitimate interests (Art. 6 (1)(f) UK GDPR) – for necessary operational activities related to bookings, including customer service communications, account management, and service administration, where these are not strictly required to perform the contract and are not overridden by individual’s rights. Stored for 6 years after the end of the fiscal year in which the transaction took place, in line with statutory retention requirements for business records and taxation.

I participate in a PlayFootball league

Processing of player data for the purpose of organising, administering, and operating football leagues, including team management, match recording, and compliance with governing body requirements.

Purpose your data is used Type of data used Legal basis How long we keep your data
To organise and manage league participation, including team allocation, communication, match administration, recording results, managing disciplinary processes, and complying with applicable governing body requirements. Player name, Contact details (email, phone number), Team allocation data, Match statistics, Attendance records, Disciplinary records. Contract performance (Art. 6 (1) (b) UK GDPR)[KT2.1][MH2.2] – where an individual enters into a contract directly with us, (e.g., Booking or payment for league participation); Compliance with a legal obligation (Art. 6 (1) (c) UK GDPR) – where we are required to retain certain records for financial, regulatory, or governing body compliance purposes. Legitimate interests (Art. 6 (1) (f) UK GDPR) – to organise and operate football leagues, including managing fixtures, recording results, administrating teams, and ensuring effective delivery of league services. Personal data is retained for 6 years counting from the beginning of participation in a league: (i) to manage and resolve disputes and legal claims; (ii) [KT3.1][MH3.2]to comply with statutory accounting requirements.

AI-Assisted Phone Calls and Call Recording

When you make or receive a phone call, your call may be recorded and supported by AI systems. How calls are handled:

  • Calls may initially be answered by an AI system.
  • AI may provide information, route your call, or assist a support agent .
  • If required, calls are transferred to a human support agent.
  • AI may generate transcripts and summaries to assist with service delivery.

Your Choices and Rights

You have the right to object to the use of AI systems in handling your call and to the recording or processing of your data in this way. If you wish to object:

  • Please inform the support agent at any point during the call.
  • We will ensure your request is respected and will offer an alternative, such as continuing the conversation without AI assistance or arranging follow‑up via another method where required.
We will always honour your rights under data protection law, including your right to object to the use of your personal data in AI‑supported services.

Purpose your data is used Type of data used Legal basis How long we keep your data
1) To provide customer support and manage communications; 2) To monitor service quality (to analyse trends, improve our services, and support staff training); 3)To handle disputes Call recordings, phone number, call metadata (date and time of the call, duration, and routing information), communication content, interaction history. Legitimate interests (Art. 6(1)(f) UK GDPR) – providing customer support and managing communications; improving service quality; dispute handling. For the purposes “to provide customer support and manage communications” and “to monitor service quality” personal data will be stored for 6 months counting from the date of the call. For the purpose “to handle disputes” personal data will be stored for 6 years counting from the date of the call (as per the statute of limitation period).

AI-Assisted Enquiries (Web Contact Forms)

When you submit a web enquiry or contact form, your enquiry may be supported by AI systems.

  • AI system reviews your enquiry and provides an initial response or guidance.
  • Enquiries are directed to the appropriate team based on their content.
  • A human support agent reviews enquiries and responses as part of our service processes and takes over where necessary.
  • AI system does not operate without human oversight in the delivery of our services.
Purpose your data is used Type of data used Legal basis How long we keep your data
1) To respond to enquiries and provide customer support; 2) To monitor service quality (to analyse trends, improve our services, and support staff training); 3) Improve website users’ navigation across our website environment; Name, contact details, enquiry content, communication history, metadata (request date and time) Legitimate interests (Art. 6(1)(f) UK GDPR) – responding to enquiries and improving customer support, monitoring service quality, improving website users’ navigation. Enquiry data is retained for up to 12 months from the closure of the enquiry.

Photography, Video and Drone Footage

We may collect images or recordings where individuals appear in photography, video or drone footage for promotional, operational and event-related purposes.

Purpose your data is used Type of data used Legal basis How long we keep your data
To promote services, share event highlights, support marketing campaigns, and document activities. Images, video recordings and drone footage. Consent (Art. 6(1)(a) UK GDPR) Raw footage / unedited content: Retained for 12 months to allow for content review, editing, and selection. Final approved content: Retained for the duration of the relevant campaign and for up to 5 years thereafter to support ongoing promotion, evidencing marketing activity, and maintaining a historical record of events and services.

I Receive Marketing Communications

Processing of personal data for the purpose of sending offers, promotions and updates.

Purpose your data is used Type of data used Legal basis How long we keep your data
To send marketing communications, promotions, and service updates selected to be useful and relevant. Name, email address, phone number, marketing preferences, service usage history. Consent (Art. 6 (1) (a) UK GDPR) – where you have opted in to receive marketing communications. We review marketing consent regularly and remove data where consent is withdrawn, expires, or becomes invalid, including prolonged inactivity.

I Carry Out an Action on Meta, Instagram, TikTok, YouTube, X (formerly Twitter) Company Profiles

On our company profile we provide information and offer Meta, Instagram, TikTok, YouTube and X (formerly Twitter) users the possibility of communication.

If you carry out an action on our company profile (e.g. comments, contributions, likes etc.), you may make personal data (name, photo of your user profile, any other data you made available in your profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by Meta, we cannot make any binding statements regarding the purpose and scope of the processing of your data. Our corporate profile in social networks is used for communication and information exchange with (potential) customers. .

Every user is free to publish personal data. As far as we process your personal data in order to evaluate your online behaviour, to offer you sweepstakes or to conduct lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a) of the UK GDPR. The legal basis for processing personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) UK GDPR. Thereby, our legitimate interest is to answer your request optimally or to be able to provide the requested information. If the aim of contacting you is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) UK GDPR.

The data generated on the company profile are not stored in our own systems.

You can object at any time to the processing of your personal data that we collect within the framework of your use of our corporate web profiles and assert your rights as a data subject mentioned the "Your rights" section of this privacy policy. Please send us an informal email to privacy@dataguard.co.uk.

For further information on the processing of your personal data by Meta, Instagram, YouTube and X (formerly Twitter) and the corresponding objection options, please click here:


I Use Corporate Profiles in Professionally Oriented Networks

We use corporate profiles on professionally oriented networks.

We maintain a corporate presence on the following professionally oriented networks:

  • LinkedIn

On our site we provide information and offer users the possibility of communication. The corporate profile is used for job applications, information, public relations, and active sourcing. Further information can be found in the privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy

Every user is free to publish personal data. If you carry out an action on our company profile (e.g. comments, contributions, likes etc.), you may make personal data (e.g. clear identifier; full name or photo of your user profile) public.

Purpose your data is used Type of data used Legal basis How long we keep your data
To inform users about our services. Name, profile image and any information made available within your profile. Legitimate interest (Art. 6 (1) (f) UK GDPR) to answer your request optimally or to be able to provide the requested information. The data resulted from you carrying out an action on our company profile (e.g. comments, contributions, likes etc.) will be stored as part of our LinkedIn corporate profile until the profile is deleted. We do not store this data in our own systems beyond LinkedIn environment.

We are only able to use your personal data when the law allows us to. This is called the legal basis. Regarding the above purposes, the legal basis listed for each are explained below:

  • Consent – You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. To do so please contact us or the Data Protection Officer via the details supplied below.
  • Contract – We need to use your data to fulfil a contract you have with us. Alternatively, it’s necessary to use your data because we have asked you to, or you have taken yourself, specific steps before entering that contract.
  • Legal Obligation – We need to use your data to comply with the law.
  • Vital interests – Where it is necessary to protect someone’s life (for example, sharing medical or emergency contact details with emergency services).
  • Legitimate Interests – Processing your data is necessary to support a legitimate interest we or another party has, only where this is not outweighed by your own interests.

You can find out more about legal basis by accessing the UK Information Commissioner’s Office’s guidance here


7.0 Is the Provision of Personal Data a Requirement?

Unless specified otherwise in this Privacy Notice, the provision of personal data is not a statutory or contractual requirement. It means that you are not obliged to provide personal data. The consequence of failure to provide personal data would be inability to achieve our designated purpose.


8.0 Who Is the Information Shared With?

Third Party Service Providers within our website.

As with most organisations, we use service providers to help us maintain our website, deliver our services and keep your data secure. When we use these service providers, it is necessary for us to share your personal data with them. We have agreements in place with all our providers that oblige them to protect your data.

  • Booking system providers
  • Analytics and tracking providers
  • Hosting, CDN and security providers
  • Venue and facility partners
  • AI customer service providers
  • AI voice platforms
  • Automation and integration platforms
  • CRM platforms
  • Marketing and communications platforms
  • Venue and facility partners
  • Sports governing body partners

Third Party Cookie Providers

When you browse our website, certain data may be collected through cookies or other tracking technologies. Where required, this occurs based on your prior consent. Some of these cookies are provided by third-party service providers that support us in various areas, such as:

  • Content delivery networks
  • Marketing and advertising platforms
  • Web analytics and performance tracking
  • Remarketing and advertising management
  • User behaviour analysis and visual optimization
  • Information security and fraud prevention

As a result, certain data may be shared with these third-party providers. We have data processing agreements in place with all third-party providers to ensure that your personal data is handled securely and in accordance with data protection regulations.

For more information on the cookies we use, please read our cookie notice.

Third Party Links

Our website includes links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices. When you leave our website, we encourage you to read the privacy notice of each website you visit.

Data Transfers Outside the UK

Where we transfer your personal data outside the UK, we will ensure that it continues to receive a level of protection consistent with UK data protection law. This may be achieved in one of the following ways:

  • Adequacy decision: where the destination country has been recognised by the UK Government as providing an adequate level of protection for personal data.
  • Appropriate safeguards: where we use mechanisms such as the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the European Commission’s Standard Contractual Clauses (SCCs), to ensure your data is protected.

You have the right to obtain a copy of the safeguards we use for transfers outside the UK. Please contact us (see the “Who we are” section above for contact details) if you wish to receive further information.


9.0 Your Rights

Under data protection legislation, in certain circumstances you have the following rights over the processing of your personal data as described in this notice:

  • Right to be informed about how your data is used.
  • Right of access to your personal data.
  • Right of correction or rectification of your data.
  • Right to request deletion of your data.
  • Right to object to the personal data processing.
  • Right to data portability.

In most cases, we must respond to a request to exercise these rights within one month. If you would like to submit a request, please contact us (see the ‘Who we are’ section above for contact details).


10.0 Complaints

If you believe that we have processed your personal data in a way that does not comply with data protection law, you may make a complaint directly to us.

Complaints can be submitted to privacy.officer@playfootball.net. We will acknowledge your complaint within 30 days of receipt. We will take appropriate steps to investigate and respond to it, may contact you for further information where needed, will keep you informed as appropriate, and will notify you of the outcome without undue delay.

If you are dissatisfied with how we have handled your complaint, you may also raise the matter with the UK Information Commissioner’s Office (ICO):

By Post:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

By Phone: +44 303 123 1113

Via ICO website: https://ico.org.uk/global/contact-us/