Legal

Privacy Policy

Last updated: 26 June 2026

This Privacy Policy explains how Vinetree collects, uses, shares, and protects your personal data, and the rights you have under the UK GDPR and the Data Protection Act 2018.

1. Who we are

Vinetree (“we”, “us”, “our”) provides a Digital Complaints Management System for professional football clubs. For the purposes of data protection law, Vinetree is the data controller in respect of the personal data described in this policy. If you have any questions, you can reach our Data Protection Officer using the contact details in section 9.

2. The data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

  • Identity and contact details, such as your name, job title, club, email address, and phone number.
  • Account and usage data, such as login records, settings, and how you use the platform.
  • Communications you send to us, including demonstration requests and support enquiries.
  • Technical data, such as IP address, browser type, and device information.
  • Cookie data, as described in our Cookie Policy.

3. How and why we use your data

We process your personal data on the following lawful bases under the UK GDPR:

  • Contract — to provide and administer the services you or your club have requested.
  • Legitimate interests — to operate, secure, and improve our services, and to respond to enquiries.
  • Consent — for non-essential cookies and any optional marketing communications, which you can withdraw at any time.
  • Legal obligation — to comply with applicable laws and regulatory requirements.

4. Sharing your data

We do not sell your personal data. We may share it with trusted service providers who process data on our behalf (for example, hosting and analytics providers) under appropriate contractual safeguards, and with authorities where we are legally required to do so.

5. International transfers

Where personal data is transferred outside the UK, we ensure an appropriate level of protection is in place, such as UK adequacy regulations or the International Data Transfer Agreement.

6. How long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements, after which it is securely deleted or anonymised.

7. Your rights

Under the UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your data in certain circumstances.
  • Restrict or object to certain processing of your data.
  • Data portability, where applicable.
  • Withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

9. Contact us

To exercise any of your rights or to ask a question about this policy, please Contact Us.