Please note that our website and other digital platforms contain links to third party websites / digital platforms which are provided for your convenience. We are only responsible for the privacy practices and security of our own digital platforms. We recommend that you check the privacy and security policies and procedures of each and every other website / digital platform that you visit.
Data Protection Officer
Manchester United Foundation
26 Sir Matt Busby Way
Information we collect and what we use it for
In broad terms, we use your data for the following purposes:
· to administer our delivery projects and education programmes.
· to monitor and evaluate the impact of our work in communities around the globe.
· to provide the best possible care for you or your child when taking part in Manchester United Foundation activities or events.
· to administer and provide products and services you request or have expressed an interest in
· to enable us to administer any competitions or other offers/promotions which you enter into
· to communicate with you in the event that any products or services you have requested are unavailable.
· for fraud screening and prevention purposes
· for record keeping purposes
· to carry out market research so that we can improve the products and services we offer
· to track your activity on our digital platforms
· to create an individual profile for you so that we can understand and respect your preferences
· to personalise and improve your experience on our digital platforms
· to personalise and/ tailor any communications that we send you
· for profiling purposes to enable us to personalise and/or tailor any marketing communications that you consent to receive from us
· To engage you with our fundraising plans and activity including bespoke tailored engagement for major donor fundraising purposes
When we provide you with products or services we collect and store any personal information that you provide to us. We, for example, keep a record of your name, address, delivery address, email address, and telephone number. We also record details of any disability or health needs you might have at the time of booking a Foundation event or activity taking place at Old Trafford or any of our other premises to help to ensure your comfort and safety.
For fundraising projects where large donations are sought to meet our objectives we may carry out an initial research data exercise. We will collect personal information from referrals and public sources including Companies House and Charity Commission. We believe this will help us to approach potential supporters with relevant fundraising projects.
When you register to receive marketing communications from us (and/or our sponsors and partners), enter one of our competitions, fill in one of our forms (whether online or offline) or otherwise expressly provide us with your personal information, we collect and store any personal information that you provide to us and use it to personalise and improve your experience on our digital platforms, provide products and services you request from us, and carry out profiling, statistical analysis and market research.
When you interact with our digital platforms, we also automatically collect the following information about your visit. This is primarily to help us better understand how individuals use our digital platforms to enable us create better content and more relevant communications:
· how you have reached our digital platform and the internet protocol (IP) address you have used
· your browser type, versions and plug-ins, and your operating system
· your journey through our digital platform, including which links you click on and any searches you made, how long you stayed on a page, and other page interaction information
· which videos you have watched and for how long
· what content you like or share
· which adverts you have seen and responded to
· which pop up or push messages you might have seen and responded to
· information collected in any forms you complete
We also infer your country of location from the IP address you have used to access our digital platforms and we analyse which marketing activity led to your taking specific action on our digital platforms (e.g. filling in an application form).
News, offers and opportunities from us and our sponsors and partners (which we provide only with your consent)
We also participate in Facebook's ‘Custom Audience’ service from time to time. This service enables Manchester United Foundation to display to you personalized advertisements when you visit Facebook’s social media platforms. It works by converting your email address to a unique number that Facebook uses to match to unique numbers that Facebook generates from email addresses of its users. Where we use Facebook Custom Audiences, we will only include you if you have consented to receive marketing from us. If you have given us your consent, you can change your mind at any time by unsubscribing.
We occasionally conduct prospect research to identify new potential donors and existing supporters who may be interested in supporting Manchester United Foundation with a major gift. Occasionally, this means that we might collect or supplement personal data about you before we meet you to understand whether it would be appropriate to take such an approach. We only use information from credible sources in the public domain.
We do not seek consent to conduct this research, but rely on legitimate interests as our lawful basis. We will always tell you if this research has been conducted and ensure you have the opportunity to ask for this information to be deleted.
Disclosure of your information
In order to provide our products, services and activities to you or to otherwise fulfil contractual arrangements that we have with you, we need to appoint other organisations to carry out some of the data processing activities on our behalf. These include, for example, payment processing organisations, delivery organisations, fraud prevention and screening companies.
We will share your data with advertising networks and/or social media platforms for the purposes of selecting and serving relevant adverts to you via those networks/platforms, and to search engine and analytics providers.
In all instances where we disclose your information to third parties, we will ensure that your information is appropriately protected.
In common with many other website operators, we use standard technology called 'cookies' on our website. Cookies are small pieces of information that are stored by your browser on your computer's hard drive and they are used to record how you navigate this website on each visit.
Security of information
We take the security of your personal information seriously. We have security procedures in place to protect our paper based systems and computerised databases from loss and misuse, and only allow access to them when it is absolutely necessary to do so, and then under strict guidelines as to what use is made of the personal information contained within them, this includes the sharing of pupil information with our partner schools and education providers
Where a password is required to access certain areas of our digital platforms, you are responsible for keeping your password secure and confidential. Please do not share or disclose your password to any other person.
Please note that for your safety and security, CCTV is in operation in our premises which are open to the public.
If you are under 16
If you are under 16 and use our digital platforms, we will collect your date of birth and retain that with your name and other details you provide. This is so we can ensure we treat you in an age appropriate way in line with this policy.
For so long as you are under 16 we will not send you any marketing communications, allow you to access any of our digital platform message boards, or share your details with our MU commercial partners. However, if you have signed up to receive a product or service we will contact you about this.
If you are aged 13-15, you must first tell your parent or legal guardian that you wish to register on our digital platforms and get their consent. You must make sure that your parent or legal guardian knows and agrees each time before you:
· email us, or ask us to email anything to you;
· send any information to us;
· enter any competition or game that requires information about you or offers a prize
· offer or agree to buy anything online.
If you are the parent or legal guardian of a user of our digital platforms who is aged 13 to 15 we do not seek your direct consent to their registration, but we expect them to inform you and get your agreement in advance before they register and before each time they do any of the activities listed above.
Aged under 13
If you are under 13, you can only use our digital platforms if your parent or legal guardian has first told us that you are allowed to do so.
If you are under 13 and wish to use our digital platforms , you must truthfully tell us your name, email address, country and date of birth. Our system will then ask you for the name and email address of your parent or legal guardian. We will send them an email so they are aware of your request and will ask them for their consent and to confirm they have authority to give that consent. We need their consent or refusal within 7 days, or else we will assume consent is not granted. Their consent can be withdrawn at any stage.
Even if your parent or legal guardian gives their consent to your registration, if you are under 13 we still expect you to tell them and get their agreement in advance each time before you:
· email us, or ask us to email anything to you;
· send any information to us;
· enter any competition or game that requires information about you or offers a prize;
· purchase an official membership; or
· offer or agree to buy anything online.
If you are the parent or legal guardian of a user of our digital platforms who is under 13, they can access and use unrestricted areas but we will need your direct consent if they wish to gain access to restricted areas. If a user enters a date of birth which indicates they are under 13 when they try to register, our system will request them to provide us with your name and email address so that we can contact you to get your consent. The registration process cannot proceed without this. If we do not hear from you within 7 days, we will assume consent is refused. If you consent, we will complete the registration process. Whether you refuse or provide consent, we will update the child by email.
More about your information - your rights
You can correct or update your personal information at any time by emailing us at firstname.lastname@example.org. Please include your name, address, date of birth and email address when you contact us as this helps us to ensure that we accept amendments only from the correct person. We encourage you to promptly update your personal information if it changes.
We will securely retain your information for as long as is reasonably necessary and in accordance with applicable law. If you wish to submit a request that your data be deleted, please write to us at the above address. You have the right to receive a copy of the personal information that we hold about you. Please write to us at the address above if you wish to exercise this right.
Where to make a complaint
Information Commissioner's Office
You can also contact the Information Commissioner’s Office using their online form: https://ico.org.uk/global/contact-us/email/
This policy will be reviewed on an annual basis to ensure continuing appropriateness.