This Privacy Notice for All About Football LTD ('we', 'us', or 'our'), describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you:
- Download and use our mobile application (All About Football), or any other application of ours that links to this Privacy Notice
- Use All About Football - A booking platform for football events, helping people organise football matches between groups of people
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at joe@all-about-football.co.uk.
SUMMARY OF KEY POINTS
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? Only in limited cases. We record gender to organise sporting events. If you choose to use our optional match workout feature on a smartwatch, we process health and fitness data (such as heart rate, calories burned and distance) with your explicit consent. See 'Health and Fitness Data' below.
Do we collect any information from third parties? We do not collect any information from third parties.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties.
How do we keep your information safe? We have adequate organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us.
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
- names
- phone numbers
- email addresses
- usernames
- passwords
- date of birth
- gender
- nicknames or display names ('known as')
- biographical information ('bio')
- profile photographs
- contact preferences
- contact or authentication data
- billing addresses
- debit/credit card numbers
Sensitive Information. We collect gender information for the purpose of organising sporting events. If you use our optional match workout feature, we also process health and fitness data, which is a special category of personal data under UK GDPR, as described below. We do not process other categories of sensitive information as defined under GDPR.
Health and Fitness Data. Our smartwatch apps (Apple Watch and Wear OS) and our Garmin integration let you record a football workout during a match. This feature is optional and only runs when you start a workout on your watch. When you use it:
- What we access. With your permission, the watch app reads your heart rate, active calories burned and distance during the workout, using Apple HealthKit (on Apple Watch) or Health Services and Health Connect permissions (on Wear OS). Location is used on the watch only to measure distance; we do not store your route or location.
- What we collect. If cloud sharing is on, the watch sends us a summary of each match workout: the game it belongs to, duration, active calories, distance, and average and maximum heart rate, along with the start and end time. We do not collect continuous heart-rate readings or any other health data, and we never read health data that was not recorded during an All About Football workout.
- Apple Health. On iPhone and Apple Watch, the workout is also saved to Apple Health on your device so it appears in your own health records.
- How we use it. Only to show you your own match stats, such as your workout summary for each game and your workout history in the app. Your health data is visible only to you. It is not shown to other players or organisers, not used for advertising or marketing, not used to make automated decisions about you, and never sold or shared with third parties, other than our hosting provider, which stores it on our behalf on UK-hosted servers.
- Your choices. Cloud sharing is on when you start a workout from your watch, and you can turn it off at any time in the app's watch workout settings. You can delete all match workout data we hold from the app at any time, and it is deleted automatically if you delete your account. You can also remove the app's health permissions at any time in your phone or watch settings (Apple Health, or Health Connect / app permissions on Android); data already saved in Apple Health or Health Connect on your device stays under your control there.
WhatsApp Support Messages. If you message our support WhatsApp number, we will store: your WhatsApp number, your messages to us and our replies, and the date and time of each message. We use this information solely to provide customer support, link the conversation to your account, and reply to you. Messages are stored on our UK-hosted servers and are accessible only to authorised All About Football staff. We retain WhatsApp support conversations for up to 24 months from the date of the last message in the conversation, after which they are automatically deleted. You can request earlier deletion at any time by emailing joe@all-about-football.co.uk or by deleting your account in the app.
If we cannot match your WhatsApp number to an existing account, we will ask you to share the email address registered to your account so we can link the conversation. We will save the WhatsApp number you message us from to your account once linked, so you do not need to provide it again. We do not LLM-process or otherwise share the content of your WhatsApp support messages with third parties.
Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/gb/privacy
Social Media Login Data. We may provide you with the option to register with us using your existing social media account details, like your Facebook, X, or other social media account. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called 'HOW DO WE HANDLE YOUR SOCIAL LOGINS?' below.
Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:
- Geolocation Information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's camera, calendar, and other features. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server).
- Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.
- Health and Fitness Data. If you use the optional match workout feature on a smartwatch, we request permission to read your heart rate, calories burned and distance during the workout. See 'Health and Fitness Data' above. If you wish to change these permissions, you may do so in your device's settings.
This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information.
Like many businesses, we also collect information through cookies and similar technologies.
The information we collect includes:
- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files.
- Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services.
- Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
- To facilitate account creation and authentication and otherwise manage user accounts
- To deliver and facilitate delivery of services to the user
- To respond to user inquiries/offer support to users
- To send administrative information to you
- To fulfil and manage your orders
- To enable user-to-user communications
- To request feedback
- To send you marketing and promotional communications (you can opt out at any time)
- To deliver targeted advertising to you
- To protect our Services (fraud monitoring and prevention)
- To identify usage trends
- To determine the effectiveness of our marketing and promotional campaigns
- To save or protect an individual's vital interest
- To perform AI-assisted content moderation and automated screening of user-generated content for safety and compliance
- To provide AI-assisted support responses to user enquiries
- To maintain detailed activity logs for security, fraud prevention, and platform integrity (including IP addresses, device information, timestamps, and actions taken)
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfil our contractual obligations, to protect your rights, or to fulfil our legitimate business interests.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
- Consent. We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
- Explicit Consent (health data). We process health and fitness data from the optional match workout feature only with your explicit consent, given when you grant the app health permissions and start a match workout. You can withdraw it at any time by turning off workout cloud sharing, deleting your workout history in the app, or removing the app's health permissions in your device settings.
- Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
- Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
- Send users information about special offers and discounts on our products and services
- Develop and display personalised and relevant advertising content for our users
- Analyse how our Services are used so we can improve them to engage and retain users
- Support our marketing activities
- Diagnose problems and/or prevent fraudulent activities
- Understand how our users use our products and services so we can improve user experience
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.
Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents ('third parties') who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organisation apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.
The categories of third parties we may share personal information with are as follows:
- Data Analytics Services
- Cloud Computing Services
- Social Networks
- Payment Processors
- Weather Data Providers (e.g. OpenWeather — we may send location data to retrieve weather information for events)
- AI and Machine Learning Service Providers (for content moderation and automated support)
We also may need to share your personal information in the following situations:
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g. Google Maps API, Places API). Google Maps uses GPS, Wi-Fi, and cell towers to estimate your location.
- Other Users. When you share personal information (for example, by posting comments, contributions, or other content to the Services) or otherwise interact with public areas of the Services, such personal information may be viewed by all users and may be publicly made available outside the Services in perpetuity. If you interact with other users of our Services and register for our Services through a social network (such as Facebook), your contacts on the social network will see your name, profile photo, and descriptions of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile. Profile photographs you upload, your display name, bio, and other profile information you provide will be visible to other users of the Services. Real-time activity data (such as event participation status, chat messages, and typing indicators) may be transmitted to other users through our live update systems during your use of the Services.
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.
We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences).
Optional Meta advertising measurement
If you make the separate optional choice to allow advertising attribution, All About Football may share registration and booking activity with Meta Platforms Ireland Limited, together with identifiers such as a hashed email address, an account identifier, device or advertising identifiers, IP address and campaign identifiers. Meta may link this information with activity on Facebook or Instagram.
We use this information only to measure which Facebook and Instagram advertisements lead to registrations and bookings, promote games in areas that need players, and understand the value of those campaigns. We rely on your consent for this optional processing. Meta measurement is disabled unless you make a positive choice, refusing does not affect your ability to use the Services, and you can withdraw at any time in Data Management or Tracking Preferences. Withdrawal stops future optional Meta measurement but does not make earlier lawful processing retroactively unlawful.
Optional website analytics (Google Analytics)
On our public website, Google Analytics 4 loads only after you make the separate optional choice to allow Analytics in Cookie preferences. This website analytics choice is separate from the optional Meta advertising measurement described above. You can change or withdraw the website analytics choice at any time through Cookie settings; withdrawal stops future optional website analytics, while essential site functions continue.
6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.
Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or X logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends list, and profile picture, as well as other information you choose to make public on such a social media platform.
We will use the information we receive only for the purposes that are described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.
7. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
Match workout (health and fitness) data is kept only while you have an account and have not deleted it. You can delete it at any time in the app, and it is deleted immediately and automatically when you delete your account.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organisational and technical security measures.
We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
9. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at joe@all-about-football.co.uk.
10. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Switzerland, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.
In some regions (like the EEA, UK, and Switzerland), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section 'HOW CAN YOU CONTACT US ABOUT THIS NOTICE?' below.
We will consider and act upon any request in accordance with applicable data protection laws.
If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.
If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section 'HOW CAN YOU CONTACT US ABOUT THIS NOTICE?' below or updating your preferences.
However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section 'HOW CAN YOU CONTACT US ABOUT THIS NOTICE?' below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.
Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:
- Log in to your account settings and update your user account.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.
If you have questions or comments about your privacy rights, you may email us at joe@all-about-football.co.uk.
11. AUTOMATED DECISION-MAKING
In Short: We use automated systems to help moderate content and maintain platform safety. You have the right to request human review.
We use artificial intelligence and automated systems in the following ways:
- Content Moderation: User-generated content (including posts, messages, and event chat) may be automatically screened for potential violations of our Terms of Service and community standards. Content flagged by automated systems may be removed or restricted pending review.
- AI-Assisted Support: When you contact our support team, initial responses may be generated by AI-assisted tools. You may request to speak with a human support representative at any time.
- Fraud and Abuse Detection: We use automated systems to detect suspicious activity, including multiple account creation, referral abuse, and payment fraud.
Automated decisions that may significantly affect you (such as account suspension, content removal, or restriction of access) are subject to human review upon request. Under the UK GDPR and EU GDPR, you have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you. To request human review of an automated decision, please contact us at joe@all-about-football.co.uk or submit a support ticket in the app.
12. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ('DNT') feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
13. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated 'Revised' date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may email us at joe@all-about-football.co.uk or contact us by post at:
All About Football LTD
196 High Street
Quarry Bank
DY5 2JP
England
If you are a resident in the United Kingdom, we are the 'data controller' of your personal information. We have appointed Joseph Evans to be our representative in the UK. You can contact them directly regarding our processing of your information, by email at Joe@all-about-football.co.uk, by visiting http://www.all-about-football.co.uk, by phone at +44 7790 042616, or by post to:
196 High Street
Quarry Bank
DY5 2JP
England
15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please submit a data subject access request.