Who is responsible for your information?
Wanstead Rugby Football Club Limited (company number 07883999) is responsible for club, membership, ticket, donation and Gift Aid information. Centenary Field Limited (company number 16735127) is responsible for Centenary Field venue-hire information. Both have their registered office at Wanstead Rugby Football Club, Centenary Field, Roding Lane North, Woodford Green, IG8 8JY.
For club privacy matters email secretary@wansteadrfc.com. For venue-hire matters email hallhire@wansteadrfc.com.
What this notice covers
This notice covers www.wansteadrfc.com, donations.wansteadrfc.com, shop.wansteadrfc.com and centenaryfield.com. Services operated by other organisations, including RFU GMS, Square, Microsoft, Google, Meta/WhatsApp and the external club kit shop, also have their own privacy information.
Information we collect
- Club and membership enquiries: your name, contact details and the information you choose to include in an email, telephone call or message. Membership registration is handled through RFU GMS.
- Donations and Gift Aid: your name, email address, donation amount and payment references. If you claim Gift Aid, we also collect your title where supplied, home address, postcode, declaration, confirmation and submission date.
- Tickets and activities: purchaser name, email address, optional phone number, selected products and payment/order references. Where an activity needs participant information, we may collect a child’s name, age or school year, and medical or collection notes supplied by their parent or guardian.
- Hall-hire enquiries: contact and event information you send by email, phone or WhatsApp. The public availability calendar shows booking status, not customer identities.
- Technical information: server security logs may record IP address, browser details, requested pages and timestamps. Optional analytics and advertising information is collected on the Centenary Field site only after a visitor accepts optional cookies.
Wanstead RFC does not receive or store full card numbers. Card entry and payment processing are provided by Square.
Why we use it and our lawful bases
- To take payments, provide tickets or activities, manage bookings and respond to service enquiries where this is necessary for a contract or steps requested before a contract.
- To maintain accounting, tax and Gift Aid records and respond to regulators where required by law.
- To run the club, safeguard participants, prevent fraud, secure the websites and answer general enquiries where this is in the club’s legitimate interests and does not override your rights.
- To use optional analytics or advertising cookies where you have given consent. You can withdraw that consent at any time using “Cookie settings” on the Centenary Field website.
- To protect someone’s vital interests in an emergency, for example where medical notes supplied for a child’s activity are needed by authorised organisers.
Who we share information with
Access within the club is limited to people who need the information for their role. Depending on the service, information may also be processed by:
- Square for orders, card payments and receipts;
- Microsoft 365 for club email and transactional messages;
- the Rugby Football Union and RFU GMS for membership administration;
- Google for optional Centenary Field analytics, advertising, reviews and maps, and Vimeo for the optional venue video, where enabled;
- Meta/WhatsApp when you choose to contact the venue through WhatsApp;
- hosting, security, backup and IT support providers acting for the club; and
- HM Revenue & Customs, governing bodies, insurers, professional advisers, police or other authorities where the law or a safeguarding need requires it.
Some providers may process information outside the UK. Where UK data protection law requires safeguards, we rely on the provider’s applicable UK adequacy arrangements, recognised transfer mechanism or contractual safeguards.
How long we keep information
- Gift Aid declarations: normally six years after the most recent donation covered by the declaration. Enduring declarations may be kept while they remain active and for the required period afterwards.
- Orders, payments and accounting records: normally six years after the end of the relevant accounting period.
- Participant and medical notes: normally deleted within three months after the activity, unless an incident, safeguarding issue, insurance claim or legal requirement means they must be kept longer.
- General enquiries: normally up to two years after the last meaningful contact, unless the enquiry becomes part of a booking, membership or legal record.
- Failed payment and security records: kept only for the period reasonably needed to investigate errors, fraud or attacks.
Copies may remain in restricted backups until those backups are securely overwritten.
Your rights
Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to its use; receive certain information in a portable form; and withdraw consent. These rights are not absolute—for example, the club may need to retain Gift Aid or accounting records required by law.
Your right to object: you may object to processing based on legitimate interests. Tell us why you object and we will review the circumstances.
To exercise a right, withdraw a Gift Aid declaration, or ask a privacy question, email secretary@wansteadrfc.com. We may need to confirm your identity before disclosing personal information.
Cookies and similar technologies
The main club website does not currently use analytics cookies. The donations and ticket sites use essential technologies needed for secure Square card entry and checkout.
The Centenary Field site uses a necessary preference record to remember your cookie choice. Google analytics, advertising, reviews and maps, and the Vimeo venue video, are optional and are not loaded unless you accept them. You can change your choice at any time using the “Cookie settings” link in its footer. Your browser can also delete stored site data.
Complaints and changes
Please contact the club first so we can try to resolve your concern. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or telephone 0303 123 1113.
We will review this notice when services or legal requirements change. The current version and update date will be published on this page.