Privacy Policy

SetPieceTakers.com – Privacy Policy

Last Updated: Aug 20, 2025

1. Introduction

Welcome to SetPieceTakers (“we,” “our,” or “us”). We are committed to protecting your privacy and providing you with a safe and secure online experience. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at setpiecetakers.com.

Our Commitment: We believe in transparency, fairness, and putting you in control of your data.

2. Data Controller Information

For all privacy-related inquiries, please contact our Data Protection team at info@setpiecetakers.com.

3. What Information We Collect

3.1 Information You Provide Directly

  • Comments: Name, email (optional), comment content

3.2 Information We Collect Automatically

  • Website Analytics: IP address (anonymized), browser type, device information, pages visited, time spent, referring websites
  • Cookies and Tracking: Session cookies, preference cookies, analytics cookies
  • Technical Data: Browser version, operating system, screen resolution, language settings

3.3 Information from Third Parties

  • Social Media: If you interact with our social media posts or share our content
  • Football Data: Publicly available sports statistics and team information (no personal data of individuals)

Under GDPR Article 6, we process your personal data based on the following legal grounds:

4.1 Legitimate Interests (Article 6(1)(f))

  • Website Analytics: To improve user experience and website performance
  • Content Optimization: To understand which football leagues and teams are most popular
  • Security: To protect against fraud, abuse, and technical issues

4.2 Consent (Article 6(1)(a))

  • Non-Essential Cookies: Analytics and preference cookies
  • Third-Party Integrations: Social media widgets and sharing tools

4.3 Contract Performance (Article 6(1)(b))

  • Service Delivery: Providing requested information and website functionality

5. How We Use Your Information

5.1 Primary Uses

  • Service Provision: Delivering football set piece data and statistics
  • Website Functionality: Ensuring proper operation of all features
  • User Experience: Personalizing content based on preferences
  • Comment Management: Enabling user comments and discussions
  • Analytics: Understanding user behavior to improve our services
  • Social Sharing: Enabling content sharing on social media platforms

5.3 We DO NOT

  • Sell your personal data to third parties
  • Use your data for automated decision-making or profiling
  • Process sensitive personal data (health, political opinions, etc.)
  • Share data with data brokers or marketing companies

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

Essential Cookies (Always Active)

  • Session Cookies: Maintain website functionality during your visit
  • Security Cookies: Protect against fraudulent activity
  • Preference Cookies: Remember your language and display settings
  • Google Analytics: Anonymized visitor statistics and behavior tracking
  • Performance Monitoring: Website speed and error tracking
  • User Journey Analysis: Understanding how visitors navigate our site
  • Social Media: Facebook, Twitter, LinkedIn sharing functionality
  • Newsletter Tracking: Email open rates and click-through analytics

You can control cookies through:

  • Our Cookie Banner: Granular consent options on first visit
  • Browser Settings: Disable cookies entirely (may affect functionality)
  • Privacy Settings: Update preferences anytime via our privacy center

7. Data Sharing and Third Parties

7.1 Service Providers (Data Processors)

  • Web Hosting: Secure servers for website operation
  • Analytics Services: Google Analytics (anonymized data only)
  • Email Services: Newsletter delivery platforms
  • CDN Services: Content delivery for faster page loading

We may disclose information when required by law:

  • Court orders or legal proceedings
  • Law enforcement requests (with proper legal basis)
  • Protection of rights, property, or safety

7.3 Business Transfers

In case of merger, acquisition, or sale, personal data may be transferred to new ownership with appropriate safeguards.

8. Data Retention

8.1 Retention Periods

  • Website Analytics: 26 months (Google Analytics default)
  • Comments: Permanently (unless deletion requested)
  • Technical Logs: 90 days maximum

8.2 Retention Criteria

  • Purpose fulfillment
  • Legal obligation periods
  • Statute of limitations requirements
  • Legitimate business interests

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

9.1 Right of Access (Article 15)

Request a copy of all personal data we hold about you, including:

  • Data categories processed
  • Processing purposes
  • Data recipients
  • Retention periods

9.2 Right to Rectification (Article 16)

Correct inaccurate or incomplete personal data

9.3 Right to Erasure (Article 17) – “Right to be Forgotten”

Request deletion of your personal data when:

  • No longer necessary for original purpose
  • You withdraw consent
  • Data processed unlawfully

9.4 Right to Restrict Processing (Article 18)

Limit how we use your data in certain circumstances

9.5 Right to Data Portability (Article 20)

Receive your data in machine-readable format for transfer to another service

9.6 Right to Object (Article 21)

Object to processing based on legitimate interests or direct marketing

Withdraw consent at any time for consent-based processing

9.8 How to Exercise Your Rights

  • Email: privacy@setpiecetakers.com
  • Subject Line: “Data Subject Request – [Your Request Type]”
  • Response Time: Within 30 days (may extend to 60 days for complex requests)

10. Data Security

10.1 Technical Safeguards

  • Encryption: HTTPS/SSL for all data transmission
  • Access Controls: Limited access on need-to-know basis
  • Regular Backups: Secure, encrypted backup systems
  • Security Monitoring: Continuous monitoring for threats

10.2 Organizational Measures

  • Staff Training: Regular privacy and security training
  • Data Minimization: Collect only necessary information
  • Privacy by Design: Build privacy into all new features
  • Incident Response: Procedures for data breach notification

10.3 Data Breach Notification

  • Supervisory Authority: Notify within 72 hours if high risk
  • Data Subjects: Direct notification if high risk to rights and freedoms
  • Documentation: Maintain records of all security incidents

11. International Data Transfers

11.1 Transfer Safeguards

When transferring data outside the EU/EEA:

  • Adequacy Decisions: Only to countries with adequate protection
  • Standard Contractual Clauses: For other transfers
  • Binding Corporate Rules: For intra-group transfers

11.2 Third-Party Services

  • Google Analytics: EU-US Data Privacy Framework participant
  • Email Services: EU-based providers or adequate safeguards
  • Hosting: EU/EEA servers with appropriate protections

12. Children’s Privacy

12.1 Age Restrictions

  • Minimum Age: 16 years (or lower if permitted by national law)
  • Parental Consent: Required for children under minimum age
  • Verification: Age verification processes for user accounts

12.2 Special Protections

  • Enhanced privacy protections for minors
  • Simplified privacy notices for young users
  • Easy opt-out mechanisms for children

13. Automated Decision-Making and Profiling

Current Status: We do not currently use automated decision-making or profiling.

Future Changes: If implemented, we will:

  • Provide specific notice and consent mechanisms
  • Explain the logic and significance of automated processing
  • Offer right to human intervention and review

14. Changes to This Privacy Policy

14.1 Update Process

  • Notification: Email notification for material changes
  • Website Notice: Prominent notice on homepage
  • Version Control: Clear dating and version tracking

14.2 Regular Reviews

  • Annual Review: Comprehensive policy review every 12 months
  • Legal Updates: Updates for regulatory changes
  • Service Changes: Updates when new features are added

15. Contact Information and Complaints

15.1 Privacy Contacts

15.2 Supervisory Authority Rights

If you’re not satisfied with our response, you can lodge a complaint with:

Your Local Data Protection Authority (varies by EU country) Example – ICO (UK): https://ico.org.uk/make-a-complaint/ Example – CNIL (France): https://www.cnil.fr/en/plaintes

15.3 Dispute Resolution

  • Internal Review: Privacy team review within 30 days
  • External Mediation: Available through data protection authorities
  • Legal Remedies: Court proceedings as last resort

16. Specific Football Data Practices

16.1 Public Sports Data

  • Sources: Publicly available football statistics and team information
  • No Personal Data: We do not process personal data of football players or officials
  • Fair Use: All sports data used under fair use and legitimate interest principles

16.2 User-Generated Content

  • Comments: Moderated for appropriate content
  • Contributions: User submissions credited appropriately
  • Removal Rights: Contributors can request removal of their content

17. Technical Implementation

17.1 Privacy by Design

  • Data Minimization: Collect only necessary information
  • Purpose Limitation: Use data only for stated purposes
  • Storage Limitation: Retain data only as long as necessary
  • Accuracy: Maintain accurate and up-to-date information

17.2 Transparency Measures

  • Clear Language: Plain English explanations
  • Regular Updates: Timely notification of changes
  • Easy Access: Prominent links and contact information
  • User Control: Granular privacy settings

This privacy policy demonstrates our commitment to GDPR compliance and user privacy. For questions or concerns, contact us at info@setpiecetakers.com.

Document Version: 2.0 Last Updated: Sep 20, 2025 Next Review: January 20, 2026