General Statement of Intent
AFC Corsham takes the privacy of its members seriously. This policy explains how we collect, use, store, and dispose of personal data in accordance with UK GDPR, the Data Protection Act 2018, and guidance issued by the FA and the Information Commissioner's Office (ICO). We are committed to maintaining the highest standards of data protection, transparency, and integrity.

Collection of Personal Information
We collect personal data to deliver football safely and effectively. Data is typically gathered during:

Player/volunteer registration

Event participation

Disciplinary matters

Health & welfare reviews

Website and forum usage

Data may include full name, address, date of birth, contact details, medical conditions, emergency contacts, and consent preferences. For managers and volunteers, we also collect safeguarding and training credentials. Data is only collected with appropriate consent and used for specified purposes.

Lawful Basis for Processing
We collect and process personal data under the lawful bases of:

Consent (e.g. media use, optional communications)

Contractual necessity (e.g. league registration)

Legal obligation (e.g. safeguarding checks)

Legitimate interest (e.g. club operations, fixture management)

Storage and Security of Personal Information
Information is stored securely:

Electronic data is held on password-protected systems (e.g. FA Whole Game System, Pitchero, Club forms).

Paper records are held securely by the Club Secretary, Chair, or relevant managers.

Access is restricted to those with a defined club role and subject to confidentiality.

All managers handling data are required to complete relevant safeguarding training.

Use of Personal Information
Data is used to:

Register players with leagues and the FA

Manage training, fixtures, and communication

Ensure safeguarding and medical needs are met

Support club promotion and development (with appropriate consents)

We do not share your data with third parties for marketing purposes. We may share information with football authorities (FA, leagues, County FA), emergency services, or where legally required.

Data Accuracy and Member Responsibilities
Members and parents/guardians must ensure that data held is accurate and up to date. Changes should be reported promptly to the Club Secretary via secretary.afccorsham@gmail.com.

Access to Personal Information
You have the right to access your personal data. To do so, email your request to secretary.afccorsham@gmail.com. We will respond within 30 days.

Retention and Disposal of Data

Player data is retained for the current season and up to two further seasons to support safeguarding and governance.

Volunteer data is held for the duration of their role and deleted no later than 12 months after they leave, unless there is a safeguarding reason to retain it.

Data is securely destroyed (electronically wiped or physically shredded) once no longer required.

Cookies and Website Data
Our website may use cookies to improve functionality and user experience. These do not collect personal data unless explicitly provided. You can disable cookies via your browser settings.

Third-Party Links
Our website or communications may include links to external sites. AFC Corsham is not responsible for their privacy practices. Users should review the privacy policy of any linked site.

Photography and Media
Images and video may only be used if consent has been given during registration. Where external use is proposed (e.g. in the press or public campaigns), separate consent will be obtained.

Data Protection Officer (DPO)
For any data protection concerns or complaints, please contact our designated DPO:
Emma Bevan, Club Welfare Officer
Email: corsham.welfareofficerafc@gmail.com

Policy Review and Updates
This Privacy Policy is reviewed annually or when required due to changes in law or FA policy. The latest version is always available on our website.

Last updated: July 2025