Privacy Policy
Last Updated: January 14, 2026 | Version 1.0
1. About This Policy
This Privacy Policy explains how Z12 Zodiac Football Tournament ("Z12", "Wales Elementals", "we", "us", "our") collects, uses, and protects your personal data when you:
- Visit our website
- Purchase tickets or merchandise
- Register for our events
- Sign up for our newsletter or Discord
- Participate in our competitions
- Interact with us on social media
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
Z12 Zodiac Football Tournament
Wales, United Kingdom
Email: privacy@z12.club
3. What Data We Collect
3.1 Information You Provide
| Data Type | Examples | Purpose |
|---|---|---|
| Identity | Name, date of birth | Account creation, age verification |
| Contact | Email, phone, address | Communication, ticket delivery |
| Payment | Card details (via Stripe) | Ticket and merchandise purchases |
| Profile | Zodiac sign, team preference | Personalisation |
| Content | Photos, comments, votes | Community participation |
3.2 Information Collected Automatically
| Data Type | Examples | Purpose |
|---|---|---|
| Device | IP address, browser type, OS | Security, analytics |
| Usage | Pages visited, time spent | Website improvement |
| Location | General location (city level) | Regional content |
| Cookies | Session IDs, preferences | Functionality, analytics |
4. How We Use Your Data
4.1 Lawful Bases
| Purpose | Lawful Basis |
|---|---|
| Process ticket purchases | Contract performance |
| Send order confirmations | Contract performance |
| Send marketing (with consent) | Consent |
| Improve our services | Legitimate interest |
| Prevent fraud | Legal obligation |
| Respond to enquiries | Legitimate interest |
4.2 Marketing Communications
We will only send you marketing emails if you have:
- Opted in via checkbox at registration
- Made a purchase and not opted out
- Entered a competition with marketing opt-in
You can unsubscribe at any time by:
- Clicking "unsubscribe" in any email
- Emailing privacy@z12.club
- Updating preferences in your account
5. Data Sharing
5.1 Third Parties We Share With
| Category | Examples | Purpose |
|---|---|---|
| Payment Processors | Stripe | Process transactions |
| Email Providers | Resend | Send communications |
| Cloud Hosting | Vercel, Supabase | Data storage |
5.2 Sponsors
We will NOT share your personal data with sponsors without your explicit consent.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until you delete your account + 6 months |
| Transaction records | 7 years (legal requirement) |
| Marketing preferences | Until you unsubscribe |
| Website analytics | 26 months |
| Competition entries | 12 months after competition ends |
| Support enquiries | 3 years |
7. Your Rights
Under UK GDPR, you have the right to:
| Right | What This Means |
|---|---|
| Access | Request a copy of your data |
| Rectification | Correct inaccurate data |
| Erasure | Request deletion ("right to be forgotten") |
| Restriction | Limit how we process your data |
| Portability | Receive your data in machine-readable format |
| Objection | Object to certain processing (e.g., marketing) |
| Withdraw Consent | Withdraw consent at any time |
To exercise these rights, contact: privacy@z12.club
We will respond within 30 days.
8. Cookies
8.1 What Cookies We Use
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| Session ID | Essential | Keep you logged in | Session |
| Preferences | Functional | Remember your settings | 1 year |
| Analytics | Performance | Understand site usage | 26 months |
When you first visit our site, you can choose which cookies to accept via our cookie banner. You can change your preferences at any time.
9. Data Security
We implement appropriate technical and organisational measures:
- Encryption in transit (TLS) and at rest
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
- Incident response procedures
10. Children's Data
10.1 Age Limits
- Ticket purchases: 18+
- Account registration: 13+ (with parental consent under 16)
- Junior programmes: Parental/guardian consent required
10.2 Parental Rights
Parents/guardians can:
- Access their child's data
- Request deletion
- Withdraw consent
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email (if you're subscribed), website banner, or social media.
12. Complaints
If you're unhappy with how we handle your data:
- Contact us first: privacy@z12.club
- Escalate to the ICO:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk
13. Contact Us
Data Protection Enquiries
Email: privacy@z12.club
General Enquiries
Email: hello@z12.club
Website: z12.club