CELTIC FC LIMITED PRIVACY POLICY

Introduction

Celtic Football Club respects your privacy and is committed to protecting your personal data. This Privacy Policy sets out how we collect, use and share your personal data.

We want to be as transparent as possible to ensure that you are fully informed of your rights and how we use your data. This will allow us to provide you with the best experience when you interact with us.

About us

Celtic Football Club includes Celtic plc and Celtic F.C Limited, a subsidiary of Celtic plc. Both Celtic plc and Celtic F.C. Limited are registered as controllers with the Information Commissioner’s Office (ICO) and are responsible for your personal data (collectively referred to as “Celtic FC”, “we”, “us” or “our” in this Privacy Notice). The registered details can be found below:

Company Name: CELTIC PLC | CELTIC FC LIMITED

Company Registration Number: SC003487 | SC223604

Contact Address: Celtic Park, Glasgow, G40 3RE Celtic Park, Glasgow, G40 3RE

ICO Registration No.: Z5230204 | Z3219786

We have appointed a Data Protection Officer (DPO) who is responsible for this Privacy Policy. If you have any questions about this policy or about your personal data, please email us at dataprotection@celticfc.co.uk or write to us at the address below:

Data Protection OfficerCeltic F.C. LimitedCeltic ParkGlasgowG40 3RE

What data do we collect?

We use a variety of personal data depending on the services we deliver to you. When you interact with us through our website/apps or offline, we may collect and process the following information about you:

Personal Information: Includes name, address, title, date of birth, gender, email address, telephone number(s), username or similar online identifier, password, your interests, preferences, feedback and survey responses.

Health Data: Includes disability and health information provided to ensure we provide suitable accessibility and dietary arrangements where applicable.

Billing and Transaction Data: Includes bank account, payment card details, billing address, details about payments to and from you, tickets and other services you have purchased from us and other details of product purchases or orders made by you.

Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, your login history, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

Usage Data: Includes information about how you use our website, products and services.

Marketing and Communications Data: Includes your preferences in receiving marketing from us and our Partners and your communication preferences.

CCTV Data: Including video images of you from CCTV systems which we have in place at Celtic Park (the stadium), Barrowfield and Lennoxtown Training Grounds and our retail stores.

How do we collect your data

We use personal data which we have obtained for the purposes described in this policy. This may include signing up for an online account, completing a form (online or offline), registering to receive marketing communications from us and/ or our Partners or otherwise expressly providing us with your personal data. Your personal data is gathered in the following ways:

Website: When you visit our website or you provide us with any personal data through our website, including when you sign up to receive marketing communications, when you fill in any forms on our website, subscribe to Celtic TV or when you create an online account with us through our website.

Purchases: When you purchase any goods or services from us, such as tickets, merchandise, memberships, or when booking a tour or event with us. Where a third party processes your personal data on our behalf to fulfil your purchase, we may receive personal data about you and your purchase from such third party.

Competitions: If you enter one of our competitions, your personal data is collected in the entry form.

Complaint / Enquiry: When you make a complaint or enquiry, your personal data may be collected by a member of staff or will otherwise be collected via the format you choose to make your complaint or enquire (post, email or telephone).

CCTV: We maintain a CCTV system throughout Celtic Park, Barrowfield and Lennoxtown Training Ground sites, and surrounding areas. CCTV is also used at the retail stores. This is primarily for reasons of public safety and for the prevention and detection of crime. Footage is handled in accordance with applicable laws, and in particular is only held for a limited period of time before it is automatically deleted.

How do we use your data?

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• to provide you with products or services you have ordered or purchased from us or a third party through our websites (such as tickets, merchandise etc.);
• to allow payments to be made where required in advance of the provision of any products or services which you have ordered or purchased. We will share this information with third party payment processors where required for this purpose;
• to administer any competitions, prize draws etc. which you enter into or to ask you to give feedback or take part in surveys or market research;
• for record keeping purposes;
• for fraud screening and prevention purposes;
• to market to you, where you have agreed to receive marketing communications from us or our Partners and personalising our communications with you;
• to personalise and improve your experience on our digital platforms;
• to comply with our legal obligations.

Automated Decision Making

We do not make any decisions about you by solely automated means.

Legal Basis to Process Data

We will only use your personal data where we have a lawful basis to do so, which will include one or more of the following:

• that we have your consent (if consent is needed), for example to send you marketing emails;
• that we need to use the personal data to perform a contract with you, for example where you have ordered a product or service from us;
• that we need to use the personal data to comply with our legal obligations; and/ or
• where it is fair to use the personal data either in our interests or someone else’s interests, where there is no disadvantage to you – this can include where it is in our interests to contact you about products or services, ask you to complete a survey or collaborate with others to improve our services.

Your Privacy Rights

You have the right to see what personal data we hold about you, to ask us to correct inaccuracies or to delete your personal data. You also have the right to ask us to restrict the processing of or object to our processing of your personal data.

Right to object: You can object to our processing of your personal data. Please contact us as noted below, providing details of your objection.

Access to your personal data: You can request access to a copy of your personal data that we hold, along with information on what personal data we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making. You can make a request for access free of charge by contacting us as noted below.

Right to withdraw consent: If you have given us your consent to use your personal data to send you marketing emails, you can withdraw your consent at any time by updating your settings in our preference centre or by clicking the "unsubscribe" link in any marketing email which you receive.

Rectification: You can ask us to change or complete any inaccurate or incomplete personal data held about you.

Erasure: You can ask us to delete your personal data where it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it.

Portability: You can ask us to provide you or a third party with some of the personal data that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred.

Restriction: You can ask us to restrict the personal data we use about you where you have asked for it to be erased or where you have objected to our use of it.

Make a complaint: You can make a complaint about how we have used your personal data to us by emailing us at dataprotection@celticfc.co.uk, or to a supervisory authority - for the UK this is the Information Commissioner's Office, at https://ico.org.uk

Marketing

We may use your personal data to send you marketing communications, where you have:

• provided us with your express consent to do so; or
• you have purchased goods or services from us and the marketing communications which we send to you relate to similar goods or services to that which you have purchased.

Where you have provided us with your express consent to do so, we may send you marketing communications from our Partners, and a list of our current Partners is available here. Please note, these may change from time to time.

UNSUBSCRIBEYou can ask us to stop sending you marketing communications at any time by clicking the "unsubscribe" link which shall be provided with all marketing communications, by changing your preferences within the Preference Centre at any time or by contacting us at dataprotection@celticfc.co.uk.

Social Media

We are committed to providing you with information on products and offers which are relevant to you. If you provide us with your consent to receive marketing communications, we may use your personal data to promote our adverts to you on social media platforms (for example, Facebook or Twitter). Please note, you may receive adverts from us which are not connected to having provided us with your personal data. An example of this may be when a social media platform uses the information provided by users in accordance with its privacy and cookies policies to tailor and target advertisements. We are unable to accept any responsibility for advertisements of this nature.

Sharing your data with others

We will share personal data with relevant third parties where:

• we need to fulfil our contractual obligations with you, such as payment processing, delivery of products and mailing houses;
• we look to serve you relevant adverts and for analytical purposes via social media platforms and search engines; and/ or
• we have a legal obligation to do so.

We will only share your personal data with third parties to the extent needed for those purposes. We will also share your personal data with our sub-contractors where it is necessary to do so. 

IT Suppliers: Information may be stored and processed on systems provided and supported by our third party IT suppliers (such as our provider(s) of cloud hosting services).

Payment Processors: For the purposes of processing any payment which you make to us.

Delivery Organisations: For the purpose of delivering goods or services ordered from us.

Transfering your data outside the EEA

We may need to store or transfer your personal data outside the European Economic Area (EEA) to service providers, agents, subcontractors and regulatory authorities in countries where data protection laws may not provide the same level of protection as those in the European Economic Area (EEA), such as the USA. 

We may need to transfer your personal data to territories that are outside the EEA. We will only transfer your personal data outside the EEA where either:

• the transfer is to a country which the EU Commission has decided ensures an adequate level of protection for your personal data. Some US providers may also be certified under the EU-US Privacy Shield which confirms they have appropriate measures in place to ensure the protection of your data; and/ or
• we have put in place our own measures to ensure adequate security as required by data protection law. These measures include ensuring that your personal data is kept safe by carrying out strict security checks on our overseas partners and suppliers, backed by strong contractual undertakings approved by the relevant regulators such as the EU style model clauses.

How long will we keep your data?

We will retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, and always in accordance with applicable law.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data and any relevant legal obligations.

Cookies

We use cookies to track your use of our websites, this includes celticfc.com and celticfc.tv. A cookie is a small file which is sent to your browser and stored on your computer’s hard disc. They help us understand where we can improve the information and services provided.

For further and more detailed information on how we use cookies, please refer to our Cookie Policy here.

Changes to this Privacy Policy

This Privacy Policy provides up to date information about how we use your personal data and will update any previous information we have given you.

We may update this policy and only notify you if we make any material changes to the manner in which we process and use your personal data. We recommend that you check this page periodically to review the latest version.

This policy was last updated on 28 February 2022