NEWS | TICKETS | FIXTURES

Privacy Policy

Dulwich Hamlet Football Club

Last updated: Monday 3rd August 2026

This privacy notice for Dulwich Hamlet Football Club Limited ("we", "us", or "our") describes how and why we collect, store, use, and/or share ("process") your information when you use our services ("Services"), including:

Our website at dulwichhamletfc.co.uk
Our mobile app, "Dulwich Hamlet FC", available on iOS and Android (the "App")
Any other website of ours that links to this privacy notice
Engagement with us in other related ways, including sales, marketing, ticketing, or events

Questions or concerns? If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at commercial@dulwichhamletfc.co.uk.

Summary of key points

What we collect: Names and email addresses you provide directly; automatically-collected device, log and usage information; and, if you use the App, sign-in identifiers from Google or Apple, a push notification token, and analytics/diagnostic data via Firebase.
Sensitive information: We do not intentionally collect sensitive personal information.
Third parties: We do not receive information about you from third parties, other than the identity information Google or Apple pass to us when you use their sign-in option in the App.
How we use it: To run and secure the App and website, authenticate accounts, send you notifications you can control, understand how the Services are used, and comply with the law.
Who we share it with: Service providers who process data on our behalf under contract — principally Google (Firebase), and Apple/Google where you choose their sign-in option — plus any successor in a business transfer.
Your rights: Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal information. See Section 9.
How to exercise your rights: Submit a data subject access request or contact us directly (see Section 13).

1. What information do we collect?

Personal information you disclose to us

We collect personal information you voluntarily provide when you register for an account, express interest in our products or Services, buy tickets or merchandise, or otherwise contact us. This may include:

Names
Email addresses

Sensitive information. We do not process sensitive information (e.g. health data, religious beliefs).

Information collected through the App

If you use our App on iOS or Android, we and our service providers automatically process additional information needed to make the App work:

Sign-in with Google or Apple. When you create an account or log in using "Sign in with Google" or "Sign in with Apple", the relevant provider shares your name and email address with us so we can create and authenticate your account. We do not receive your Google or Apple password. Apple's private-relay email option, if you choose it, is passed to us the same way as any other email address.

Firebase (Google). The App is built on Firebase, a mobile app platform provided by Google. Google acts as our data processor for the following Firebase services:

Firebase service	What it's used for	Data involved
Firebase Authentication	Creating and managing your account, including Google/Apple sign-in	Name, email address, a unique user identifier
Firebase Cloud Messaging (FCM)	Delivering push notifications	A device-specific FCM registration token; no message content is stored by Google beyond delivery
Firebase Analytics	Understanding how the App is used, so we can improve it	Device/app information, app events (e.g. screens viewed, features used), approximate location derived from IP address, advertising identifier where permitted by your device settings

Google's use of this data is governed by Google's Privacy Policy and, for Firebase specifically, Google's Firebase data processing terms.

Push notifications. If you allow notifications on your device, we send push notifications via Firebase Cloud Messaging. We use FCM topics to group notifications by subject (for example, a topic for match updates and a topic for general club news), so we can send relevant notifications without collecting more information than needed. Notifications may be triggered by events such as:

Goals, kick-off, half-time and full-time updates for matches you follow
Club news and announcements
Ticketing and matchday information

You can turn notifications off at any time in your device's Settings, or in the App's notification preferences if available. Turning notifications off does not delete your account or affect other App functionality.

Information automatically collected

We automatically collect certain information when you visit or use the Services. This does not, on its own, reveal your identity, but may include your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, general location, and information about how and when you use our Services. This is used primarily for security, operation, and internal analytics and reporting.

We also collect information through cookies and similar technologies on the website — see our Cookie Notice — and, in the App, through Firebase Analytics as described above.

Log and usage data. Our servers and Firebase automatically collect diagnostic, usage, and performance information, which may include IP address, device information, browser or app type and settings, activity within the Services (pages/screens viewed, features used, timestamps), and device event information such as crash reports.

2. How do we process your information?

We process your personal information to:

Facilitate account creation and authentication, including via Google or Apple sign-in, and to keep your account in working order.
Send you push notifications you have opted into, via Firebase Cloud Messaging.
Understand and improve the App and website through analytics.
Protect an individual's vital interests, where necessary to prevent harm.
Maintain security, prevent fraud, and comply with our legal obligations.

3. What legal bases do we rely on to process your information?

If you are located in the EU or UK, GDPR/UK GDPR requires us to identify our legal bases:

Consent — for example, granting notification permissions, or choosing to sign in with Google/Apple. You can withdraw consent at any time.
Legitimate interests — for example, keeping the App secure and understanding aggregate usage through analytics.
Legal obligations — where processing is necessary to comply with the law.
Vital interests — where necessary to protect someone's safety.

If you are located in Canada, we rely on express or implied consent, and in limited cases the exceptions permitted under Canadian law (e.g. fraud prevention, business transactions, legal proceedings), as previously listed in this notice.

4. When and with whom do we share your personal information?

We share personal information only as described here:

Google (Firebase). Google processes personal information on our behalf to provide Firebase Authentication, Firebase Cloud Messaging, and Firebase Analytics, under Google's data processing terms.
Apple. Where you choose "Sign in with Apple", Apple facilitates the sign-in and may act as an independent controller of certain account and privacy-relay data under its own privacy policy.
Business transfers. We may share or transfer information in connection with a merger, acquisition, financing, or sale of company assets.

We do not sell your personal information, and we have not disclosed personal information to third parties for a business or commercial purpose in the preceding twelve months.

5. What is our stance on third-party websites and services?

The Services may link to, or rely on, third-party websites, SDKs, or services (including Google/Firebase and Apple sign-in) that are not controlled by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies directly:

6. Do we use cookies and other tracking technologies?

On the website, we may use cookies and similar technologies (web beacons, pixels) — see our Cookie Notice. The App does not use browser cookies, but uses comparable device identifiers (such as the FCM registration token and, where permitted, an advertising identifier) via Firebase, as described in Section 1.

7. How long do we keep your information?

We keep personal information only as long as necessary for the purposes set out in this notice, or as required by law. Account data (including Firebase Authentication records) is retained for as long as you have an account with us. FCM registration tokens are refreshed automatically by the device and are replaced or discarded when an app is uninstalled or a token expires. When there is no ongoing need to retain information, we delete or anonymise it, or securely isolate it if immediate deletion isn't possible (e.g. backup archives).

8. How do we keep your information safe?

We use appropriate technical and organisational measures to protect personal information, including relying on Google's security measures for Firebase-hosted data and Apple's security measures for Apple sign-in. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. What are your privacy rights?

If you are in the EEA, UK, Switzerland, or Canada, you may have the right to access, correct, erase, or restrict processing of your personal information, request data portability, or object to certain processing, including revoking Google or Apple sign-in access or opting out of push notifications and analytics. To exercise these rights, contact us (see Section 15) or submit a data subject access request.

You can also revoke third-party sign-in access directly:

Google account access: myaccount.google.com/permissions
Apple ID sign-in access: Settings → [your name] → Sign-In & Security → Apps Using Your Apple ID

If you believe we are unlawfully processing your information, you may complain to your Member State data protection authority, the UK ICO, or, in Switzerland, the Federal Data Protection and Information Commissioner.

10. Controls for Do-Not-Track features

No uniform standard for DNT signals currently exists, so we do not respond to DNT browser signals. If a standard is adopted, we will update this notice.

11. Do United States residents have specific privacy rights?

Residents of California, Colorado, Connecticut, Utah, and Virginia have rights under applicable state privacy laws (CCPA, CPA, CTDPA, UCPA, VCDPA), including rights to know, access, correct, and delete personal information, and to opt out of targeted advertising or profiling. We do not sell personal information. To exercise these rights, email commercial@dulwichhamletfc.co.uk or submit a data subject access request.

12. International data transfers

Google and Apple may process and store information on servers located outside the UK/EEA. Where this occurs, Google and Apple rely on recognised transfer mechanisms such as the UK International Data Transfer Addendum and EU Standard Contractual Clauses. Details are available in Google's Firebase data processing terms and Apple's Privacy Policy.

13. Children's privacy

Our App and Services are intended for a general audience. We do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction) without appropriate consent. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

14. Do we make updates to this notice?

Yes. We will update this notice as necessary, indicated by the "Last updated" date above. Material changes will be notified via a prominent notice or direct communication where appropriate.

15. How can you contact us about this notice?

Dulwich Hamlet Football Club Limited Champion Hill Stadium, Edgar Kail Way East Dulwich, London SE22 8DB United Kingdom

Email: commercial@dulwichhamletfc.co.uk

16. How can you review, update, or delete the data we collect from you?

You may request access to, correction of, or deletion of your personal information by submitting a data subject access request, or by emailing commercial@dulwichhamletfc.co.uk. For the App specifically, you can delete your account at any time from Account → Delete account in the App. This permanently removes your Firebase Authentication record — your name, email address and account identifier. Deletion is immediate and cannot be undone. You can continue using the App without an account; news, fixtures and notification preferences are stored on your device and are not affected.

This notice was originally generated with Termly's Privacy Policy Generator and has been updated to reflect the Dulwich Hamlet FC mobile app and its use of Firebase Authentication, Firebase Cloud Messaging, Firebase Analytics, and Google/Apple Sign-In.

Address

Champion Hill Stadium,
Edgar Kail Way,
East Dulwich,
London.
SE22 8BD.