Privacy Policy

Who We Are

Our website address is: https://www.alloaathletic.co.uk
In this Privacy Policy, “we”, “us” or “our” refers to the owner and operator of this website.

Privacy Policy

Last Updated: May 2024

This Privacy Policy outlines how Alloa Athletic (“we”, “us” or “our”) collects, stores, and processes your personal information in accordance with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

Our website address is: https://www.alloaathletic.co.uk. We are committed to ensuring that your privacy is protected and that we comply with our legal obligations regarding your data.

2. Data Collection & Usage

We collect personal information necessary to manage your orders and provide services:

  • Identity Data: Name, billing and shipping addresses, email, and phone number.
  • Transaction Data: Details about products purchased and payment totals.
  • Technical Data: IP addresses and browser info (processed via GeoTargetly and Plausible Analytics).
  • Communication Data: Chat logs via tawk.to and feedback collected via Google Sheets.

3. Payment Security & Processing (Stripe, PayPal & Klarna)

Payments on our website are processed via Stripe, PayPal, or Klarna. We do not store or have access to your full credit card details. Stripe, PayPal, and Klarna act as independent Data Controllers for your payment information to comply with financial regulations.

Klarna Payments: In order to offer you Klarna’s payment methods, we will pass your personal data in the form of contact details (name, billing and shipping addresses, email, phone number) and order details (items purchased, totals) to Klarna during the checkout process. This allows Klarna to assess whether you qualify for their payment methods and to tailor those payment options for you. Your transferred personal data is processed strictly in line with Klarna’s own privacy notice.

4. The 6-Year Retention Rule (UK Law)

In accordance with HMRC and the UK Companies Act 2006, we are legally required to retain records of financial transactions for 6 years following the end of the financial year the transaction occurred in.

This means that even if you request that your data be deleted under the GDPR “Right to Erasure,” we must keep a secure record of your purchase history for this mandatory 6-year period. During this time, your data will be excluded from all marketing activities.

5. Your Rights

Under UK GDPR, you have the right to access, correct, or request the deletion of your data. However, as per Article 17(3)(b) of the GDPR, the right to erasure does not apply where the processing is necessary for compliance with a legal obligation (such as HMRC record-keeping).

6. Contact Us

For any questions regarding your data or to exercise your rights, please contact our Data Protection Officer:

Robert Wilson
Data Protection Officer
Email: fcadmin@alloaathletic.co.uk