Privacy Policy
Last updated: 26 June 2026
This Privacy Policy explains how Vinetree collects, uses, shares, and protects your personal data, and the rights you have under the UK GDPR and the Data Protection Act 2018.
1. Who we are
Vinetree (“we”, “us”, “our”) provides a Digital Complaints Management System for professional football clubs. For the purposes of data protection law, Vinetree is the data controller in respect of the personal data described in this policy. If you have any questions, you can reach our Data Protection Officer using the contact details in section 9.
2. The data we collect
Depending on how you interact with us, we may collect the following categories of personal data:
- Identity and contact details, such as your name, job title, club, email address, and phone number.
- Account and usage data, such as login records, settings, and how you use the platform.
- Communications you send to us, including demonstration requests and support enquiries.
- Technical data, such as IP address, browser type, and device information.
- Cookie data, as described in our Cookie Policy.
3. How and why we use your data
We process your personal data on the following lawful bases under the UK GDPR:
- Contract — to provide and administer the services you or your club have requested.
- Legitimate interests — to operate, secure, and improve our services, and to respond to enquiries.
- Consent — for non-essential cookies and any optional marketing communications, which you can withdraw at any time.
- Legal obligation — to comply with applicable laws and regulatory requirements.
4. Sharing your data
We do not sell your personal data. We may share it with trusted service providers who process data on our behalf (for example, hosting and analytics providers) under appropriate contractual safeguards, and with authorities where we are legally required to do so.
5. International transfers
Where personal data is transferred outside the UK, we ensure an appropriate level of protection is in place, such as UK adequacy regulations or the International Data Transfer Agreement.
6. How long we keep your data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements, after which it is securely deleted or anonymised.
7. Your rights
Under the UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data in certain circumstances.
- Restrict or object to certain processing of your data.
- Data portability, where applicable.
- Withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
9. Contact us
To exercise any of your rights or to ask a question about this policy, please Contact Us.