Privacy Notice

Last updated: 28 April 2025 — This notice complies with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Data controller: All92.co.uk (a personal project operated by an individual based in England, UK).

Contact: You can reach us via the contact form for any data-related queries or requests.

2. What Data We Collect

Data	Why we collect it	Legal basis
Full name	To personalise your account and greet you by name.	Contract (account provision)
Email address	Used as your login username and to contact you about your account.	Contract (account provision)
Password (hashed)	To authenticate you securely. We never store plain-text passwords.	Contract (account provision)
Ground visit records	The grounds you have marked as visited and any associated dates, match details, or attendance figures you choose to add.	Contract (core service)
Account preferences	Settings such as date tracking mode and multi-visit preference.	Legitimate interest (personalisation)
Contact messages	Messages you send via the contact form, including your name, email and message content.	Legitimate interest (support)
Usage data (via Google Analytics)	Anonymous, aggregated statistics about how the site is used (page views, device type, etc.). No personal identifiers are sent to Google Analytics.	Legitimate interest (improving the service)

3. What We Do Not Collect

Payment or financial information (the service is free).
Location data beyond what you voluntarily provide.
Special category data (race, health, religion, etc.).
Data from children under 13.

4. Cookies

All92 uses the following cookies:

Cookie	Purpose	Duration
Session cookie	Keeps you logged in during your visit.	Session (deleted when you close your browser)
a92_date_mode	Remembers your date-tracking preference.	1 year
a92_multi_visit	Remembers whether multiple-visit mode is enabled.	1 year
_ga, _gid (Google Analytics)	Anonymous site usage statistics.	Up to 2 years

Strictly necessary cookies (session login) do not require consent. Analytics cookies are loaded via Google Tag Manager. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

5. How We Use Your Data

To create and manage your account.
To provide the ground-tracking service (saving and displaying your visited grounds).
To send you password reset emails when requested.
To respond to messages you send via the contact form.
To improve the site using aggregated, anonymous analytics data.

We will never use your data for marketing, profiling or advertising purposes.

6. Who We Share Your Data With

We do not sell, rent or trade your personal data. Limited sharing occurs only with:

SiteGround (hosting provider) — Your data is stored on SiteGround servers based in the EU/UK. SiteGround is bound by appropriate data processing agreements.
Google (Analytics & optional Sign-In) — Anonymous analytics data. If you use Google Sign-In, Google will process your Google account data subject to Google's own privacy policy.

7. Data Retention

Account data — Retained for as long as you have an active account.
Ground visit records — Retained as long as your account exists.
Contact messages — Retained in email for up to 2 years, then deleted.
Deleted accounts — All personal data removed within 30 days of a deletion request.

8. Your Rights Under UK GDPR

You have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — request deletion of your account and all associated data ("right to be forgotten").
Restriction — ask us to restrict how we process your data in certain circumstances.
Portability — request your ground visit data in a machine-readable format.
Object — object to processing based on legitimate interest.
Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us. We will respond within 30 days. There is no charge for making a request.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Data Security

We take reasonable steps to protect your data, including:

Passwords are stored as secure one-way hashes — we cannot see your password.
All data is transmitted over HTTPS (TLS encryption).
Database access is restricted to the application only — no public access.

No method of transmission or storage is 100% secure. In the unlikely event of a data breach that poses a risk to your rights, we will notify you and the ICO as required by law.

10. Children

All92 is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has registered without parental consent, please contact us and we will delete the account promptly.

11. Changes to This Notice

We may update this Privacy Notice from time to time. The "last updated" date at the top will always reflect the current version. We will notify logged-in users of material changes where possible.

12. Contact & Data Requests

For any privacy-related queries, data access requests, or to request account deletion, please use our contact form and select "Other" as the message type, or email info@all92.co.uk directly.