Skip to main content
Legal

Privacy Policy

Effective 1 July 2025

Rivervalley Rangers AFC (“we”, “us”, “our”) is a voluntary community football club based in Swords, Co. Dublin, Ireland. This policy explains what personal data we collect through rivervalleyrangers.ie, why we collect it, and your rights under the General Data Protection Regulation (GDPR).

1. Who is the Data Controller?

Rivervalley Rangers AFC is the data controller for information collected through this website. For data-related queries, contact us at rivervalleyrangers+privacy@outlook.com.

2. What Data We Collect and Why

Player Registration

When a player or guardian submits a registration enquiry we collect: first name, last name, year of birth, preferred position, guardian name (where required), email address, and phone number. This is used solely to process the registration and contact the relevant age-group coordinator.

Lawful basis: Legitimate interests (responding to a membership enquiry).

General Enquiries

Enquiry forms on the volunteering, coaching, sponsorship, Football for All, and Walking Football pages collect your name, email or phone number, and any message you provide. This information is used to respond to your enquiry and is not used for marketing.

Lawful basis: Legitimate interests (responding to an inbound enquiry).

Boot Room Exchange

Listings submitted to the Boot Room exchange include a title, item description, and donor contact details (name, email or phone). Approved listings are displayed publicly on the site; your contact details are visible only to club administrators.

Lawful basis: Legitimate interests (facilitating the community exchange).

Website Usage

We do not use Google Analytics or similar tracking cookies. Basic server logs (IP address, pages visited, timestamps) may be retained by our hosting provider, Vercel, for security and operational purposes in accordance with their Privacy Policy.

3. Bot Protection — Cloudflare Turnstile

To protect our public forms from automated spam submissions, we use Cloudflare Turnstile. Turnstile analyses signals from your browser to determine whether a submission is likely automated, without showing you a traditional CAPTCHA puzzle.

When you submit a form on this site, data including your IP address and browser characteristics may be processed by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) acting as a data processor on our behalf. Cloudflare processes this data in accordance with the Cloudflare Customer Privacy Addendum and their Privacy Policy.

4. Photography and Images of Children

Photographs taken at club matches, blitzes, and events may appear on this website and on our official social media channels. Where images include identifiable children, they are published only in line with our safeguarding procedures and the photography consent given at player registration.

  • We do not publish a child’s full name alongside their photograph.
  • Hidden photo metadata — including any GPS location data recorded by the camera or phone — is stripped from every image before publication.
  • Photographs of players are published with a club watermark, and we instruct search engines not to include our images in image-search results.
  • The website also blocks casual saving of images (right-click, drag, and long-press). No technical measure can prevent screenshots entirely, which is why the protections above and our takedown commitment matter most.
  • Parents and guardians may withdraw photography consent at any time.
  • To request the removal of any image, contact our Children’s Welfare Officer via the safeguarding page or email rivervalleyrangers+privacy@outlook.com — images are removed promptly and without question.

Lawful basis: Consent (given at registration and revocable at any time).

5. How Long We Keep Your Data

  • Player registrations — retained for the duration of a player’s membership and up to 2 years after the last contact, then deleted.
  • General enquiries — retained for 12 months, then deleted unless a relationship develops.
  • Boot Room listings — retained until the listing is removed or the item is taken, then deleted.

6. Who We Share Data With

We do not sell your data. We may share data with:

  • Vercel — our hosting provider, who processes data on our behalf.
  • Cloudflare — for bot protection via Turnstile (see Section 3).
  • Football Association of Ireland (FAI) / DDSL — where required for player registration and league administration.

All third-party processors are bound by data processing agreements and may only process your data as instructed.

7. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Erase your data (“right to be forgotten”).
  • Restrict or object to processing.
  • Data portability — receive your data in a structured format.

To exercise any of these rights, email rivervalleyrangers+privacy@outlook.com. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Commission of Ireland.

8. Cookies

We deliberately run this site without tracking or advertising cookies, which is why you don’t see a cookie consent banner. The cookies we do use are all strictly necessary:

  • Admin session (authjs.session-token) — set only when a club administrator signs in. Public visitors never receive it. Expires after 8 hours of inactivity.
  • Security token (authjs.csrf-token) — protects the admin sign-in form against forgery. Session-only.
  • Payment cookies (Stripe) — if you use a payment feature, Stripe sets cookies strictly necessary for processing the payment and preventing fraud, per the Stripe Cookie Policy.

Our visitor analytics (Vercel Web Analytics) are cookieless and anonymous — no personal identifiers are stored on your device. If we ever introduce non-essential cookies, we will add a consent mechanism first and update this policy.

9. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision. Continued use of the site constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions, contact us at rivervalleyrangers+privacy@outlook.com.

Rivervalley Rangers AFC · Swords, Co. Dublin, Ireland · rivervalleyrangers+privacy@outlook.com