Privacy Policy – Shrewsbury Super Blues
Last updated: 30/09/25
Shrewsbury Super Blues (“we”, “our”, “us”) respect your privacy and are committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (GDPR).
1. Who we are
The Super Blues are the officially recognised fundraising group for Shrewsbury Town Football Club.
Our website address is: www.shrewssuperblues.com
You can contact us at: info@shrewssuperblues.com
2. What data we collect
When you engage with us, we may collect:
- Personal details (name, email, phone, postal address)
- Donation details (amount, frequency, membership tier)
- Payment information (handled securely by Stripe/Donorbox – we do not store full card details)
- Communication preferences (e.g. email subscription choices)
- Technical information (IP address, browser type, site usage data, via cookies or analytics)
3. How we collect your data
- Directly from you when you complete a donation form, sign up to a membership tier, or contact us.
- Through third parties:
- Donorbox – to process your donation and manage memberships.
- Stripe / PayPal – to securely handle your payments.
- Mailchimp – to manage supporter emails and newsletters.
4. How we use your data
We use your information to:
- Process donations and manage memberships.
- Send you updates, newsletters, and prize draw notifications (if opted in).
- Administer raffles and prize eligibility linked to your membership tier.
- Respond to queries and provide supporter services.
- Comply with legal and financial record-keeping requirements.
5. Legal basis for processing
We process your data under:
- Consent (when you opt in to emails/newsletters).
- Contract (to provide membership benefits and process donations).
- Legal obligation (e.g. financial regulations, HMRC requirements).
- Legitimate interest (e.g. improving our supporter services).
6. Sharing your data
We only share your data with trusted providers necessary to operate our services:
- Donorbox (donation platform)
- Stripe / PayPal (payment processing)
- Mailchimp (email campaigns)
- Shrewsbury Town Football Club (for recognition, administration, or supporter benefits)
We do not sell or share your data with third parties for marketing.
7. Data retention
- Donation and membership records: kept for 7 years for financial compliance.
- Mailing list data: kept until you unsubscribe or request deletion.
- Other personal data: kept only as long as necessary for the purpose collected.
8. Your rights under GDPR
You have the right to:
- Access your personal data.
- Request correction of inaccurate data.
- Request deletion (“right to be forgotten”).
- Restrict or object to processing.
- Data portability (transfer your data to another service).
- Withdraw consent at any time (for marketing emails).
To exercise your rights, contact us at info@shrewssuperblues.com.
9. Cookies & analytics
Our website may use cookies to improve functionality and track site usage (e.g. via Google Analytics). You can control cookies in your browser settings.
10. Security
We take appropriate technical and organisational measures to protect your personal data. Payment details are encrypted and processed securely by Stripe/PayPal.
11. Contact & complaints
If you have concerns about how we handle your data, please contact us at info@shrewssuperblues.com.
You also have the right to complain to the UK Information Commissioner’s Office (ICO): www.ico.org.uk.