Privacy Policy

Introduction

Welcome to Team Python Basketball. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you visit our website, purchase merchandise, make donations, or interact with our services.

This policy applies to pythonbasketball.co.uk and is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

Information You Provide Directly:

• Contact Information: Name, email address when you contact us
• Payment Information: Billing address, payment details for merchandise and donations
• Order Information: Items purchased, quantities, sizes, delivery preferences
• Communication: Messages sent through our contact forms

Information We Collect Automatically:

• Technical Data: IP address, browser type, device information
• Usage Data: Pages visited, time spent on site, referral sources
• Cookies: See our Cookie Policy section below

2. How We Use Your Information

We use your personal information for the following purposes:

Legitimate Business Operations:

• Processing merchandise orders and donations
• Providing customer support and responding to inquiries
• Sending order confirmations and updates
• Improving our website and services

With Your Consent:

• Sending marketing communications about team updates and merchandise
• Using cookies for analytics and website functionality

Legal Compliance:

• Complying with legal obligations and regulations
• Protecting against fraud and abuse

3. Information Sharing and Third Parties

We may share your information with the following third parties:

Payment Processing:

• Stripe: We use Stripe to process payments securely. When you make a purchase or donation, your payment information is shared with Stripe to complete the transaction. Stripe has their own privacy policy and is GDPR compliant.

Service Providers:

• Website hosting and technical support providers
• Analytics providers (with anonymized data where possible)
• Email service providers for communications

Legal Requirements:

• We may disclose information if required by law or to protect our legal rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Secure server infrastructure with encryption
• Regular security updates and monitoring
• Access controls limiting who can view your data
• Secure payment processing through Stripe

While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account information confidential.

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data in a machine-readable format
• Right to Object: Object to processing for marketing purposes
• Right to Withdraw Consent: Withdraw consent for specific processing activities

6. Cookies and Tracking

We use cookies to improve your browsing experience and analyze website usage:

Essential Cookies:

• Required for website functionality (shopping cart, security)
• Cannot be disabled without affecting site performance

Analytics Cookies:

• Help us understand how visitors use our website
• Used to improve user experience
• Can be disabled through cookie preferences

Marketing Cookies:

• Track visitor behavior for marketing purposes
• Only used with your explicit consent

You can manage your cookie preferences using our cookie banner or your browser settings.

7. Payment Processing with Stripe

When you make a purchase or donation, we use Stripe to process payments securely:

• Data Shared: Payment details, billing information, order details
• Purpose: Processing payments and preventing fraud
• Security: Stripe is PCI DSS compliant and uses industry-standard encryption
• Privacy Policy: Stripe's privacy policy can be found at stripe.com/privacy

We do not store your payment card details on our servers - this information is securely handled by Stripe.

8. Data Retention

We retain your personal data for the following periods:

• Order Data: 7 years for accounting and tax purposes
• Contact Inquiries: 2 years or until resolved
• Marketing Consent: Until you withdraw consent
• Website Analytics: 26 months (Google Analytics default)

Data is securely deleted after the retention period expires.

9. International Data Transfers

Some of our service providers may be located outside the UK/EU:

• Stripe: Data may be processed in the United States under adequate safeguards
• Website Hosting: Data stored within the EU/UK where possible

We ensure appropriate safeguards are in place for any international data transfers.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Modified" date
• Sending email notifications for significant changes (if you've provided consent)

11. Contact Information