Who this notice is for
This notice explains how Founders League Ltd collects and uses personal information when you visit our website, contact us, visit or join a Founders League club, make a payment, receive our communications, supply services to us or otherwise interact with us.
It applies where Founders League Ltd decides why and how personal information is used and is therefore the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Founders League Ltd is registered in England and Wales under company number 17383814.
Registered office:The Old Barn
5 Moat Close
Chipstead
Sevenoaks
England
TN13 2HZ
You can contact us about this notice or your personal information through our contact page or by writing to our registered office.
Information we collect
Depending on how you interact with us, we may collect:
- your name, business name, email address, telephone number and website;
- your preferred club or location, membership status and details about meeting attendance;
- the content of enquiries, correspondence, feedback and other communications;
- billing, invoice, payment and transaction information, although payment card and bank credentials are handled by our payment providers;
- marketing choices and records of communications sent to you;
- technical and usage information, including IP address, browser, device, operating system, referral source, pages viewed and interaction data; and
- information required to manage suppliers, venues, clubs, charities and other business relationships.
How we obtain information
Most information comes directly from you when you complete a form, contact us, attend a meeting, apply for membership, make a payment or deal with us in another way. We may also receive information from a colleague or business that introduces you, our club hosts and organisers, payment and accounting providers, publicly available business sources, and website analytics or cookie technologies where you have consented.
Please avoid sending sensitive personal information unless we specifically ask for it and it is necessary for a stated purpose.
How and why we use your information
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Responding to enquiries | Contact details and the content of your enquiry | Our legitimate interests in responding and taking steps you request before a contract |
| Visits and membership | Contact, business, club, attendance and membership information | Taking steps before entering a contract, performing a contract, and our legitimate interests in running the network |
| Payments and accounting | Contact, invoice, transaction and payment status information | Performing a contract and complying with legal, tax and accounting obligations |
| Operating and securing our services | Account, technical, communications and usage information | Our legitimate interests in administering, protecting and improving our organisation and services |
| Analytics | Cookie identifiers, device and website usage information | Your consent |
| Marketing | Name, contact details, business interests and communication preferences | Your consent or, where permitted for relevant business communications, our legitimate interests |
| Legal and organisational matters | Relevant contact, membership, payment and correspondence records | Legal obligations and our legitimate interests in managing claims, transactions and changes to the business |
Where we rely on legitimate interests, we consider the impact on your rights before processing your information. You may object to this processing in certain circumstances.
Who we share information with
We use trusted suppliers to run our organisation. They may process only the information needed for their service and must protect it appropriately. Our principal suppliers and service categories include:
| Provider | Service and relevant details |
|---|---|
| Adfin | Payment requests, invoicing, payment collection and related communications. Adfin acts as our processor for customer data we provide to it and as an independent controller for its own account, regulatory, fraud-prevention and service-improvement activities. Its services and data are hosted in AWS facilities in Frankfurt, Germany. Payment services are delivered through authorised partners, which may receive information needed to process a payment. See Adfin’s privacy policy. |
| Stripe | Card payment processing where Stripe is used for a transaction. Stripe may process identity, transaction, device and payment information and operates internationally using appropriate transfer safeguards. See Stripe’s privacy policy. |
| GoCardless | Direct Debit and bank payment processing, including payer, mandate and transaction information. See GoCardless’s privacy notice. |
| Xero | Accounting and financial record keeping. Xero may process contact, invoice and transaction information. See Xero’s privacy notice. |
| Microsoft | Business administration, document storage and email through Microsoft 365. Microsoft operates globally and uses contractual and other safeguards for international transfers. See Microsoft’s privacy statement. |
| Twilio SendGrid | Delivery of transactional emails and notifications submitted through this website. See Twilio’s privacy notice. |
| Google Analytics | Website measurement and usage analytics when you consent to analytics cookies. See Google’s privacy policy. |
| CookieYes | Recording and managing website cookie preferences. See CookieYes’s privacy policy. |
| IONOS | Domain, certificate or related website infrastructure services where applicable. See IONOS’s privacy policy. |
We may also share relevant information with professional advisers, insurers, banks, venues, club organisers, charities and sports clubs where necessary for our relationship with you; with a buyer or successor if the organisation is restructured or sold; or with regulators, courts, law enforcement and other authorities where the law requires or permits it.
We do not sell personal information.
International transfers
Some suppliers operate outside the United Kingdom or allow support personnel in other countries to access information. Where personal information is transferred to a country without UK adequacy regulations, we require an appropriate safeguard such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism. You can contact us for more information about safeguards relevant to your data.
How long we keep information
We retain personal information only for as long as necessary for the purpose for which it was collected, including any legal, accounting, reporting or dispute-resolution requirements. In deciding a retention period, we consider the amount, nature and sensitivity of the information, the risk of harm, the relevant relationship and applicable legal requirements.
- Financial and transaction records are generally retained for up to seven years after the relevant accounting period or relationship ends.
- Enquiry, membership and business relationship records are retained while the relationship is active and afterwards where reasonably needed for administration, legal claims or record keeping.
- Marketing records are retained until you unsubscribe or object. We may keep minimal suppression information so that we can honour that request.
- Cookie and analytics information is retained according to the periods shown in our Cookie Policy and the relevant service settings.
Information may remain in protected backups for a limited period after deletion from active systems.
Security
We use proportionate technical and organisational measures to protect personal information against loss, misuse, alteration and unauthorised access or disclosure. These include access controls, encryption in transit, secure hosting, supplier checks and processes for handling suspected data incidents. No internet transmission or storage system can be guaranteed completely secure.
Your rights
Depending on the circumstances, UK data protection law gives you the right to:
- be informed about how your information is used;
- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information where there is no lawful reason to retain it;
- restrict how we use your information;
- object to processing based on legitimate interests and object at any time to direct marketing;
- receive certain information in a portable format; and
- withdraw consent at any time where processing relies on consent.
These rights are subject to legal conditions and exemptions. To make a request, use our contact page or write to our registered office. We may ask for information to confirm your identity and will normally respond within one month.
You may also complain to the Information Commissioner’s Office (ICO). We would appreciate the opportunity to address your concern first, but you can contact the ICO at ico.org.uk, by telephone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Marketing
You can opt out of marketing at any time by using the unsubscribe method in a message or contacting us. Opting out of marketing does not prevent us from sending service messages that are necessary for a visit, membership, payment or other existing relationship.
Cookies and analytics
We use CookieYes to provide cookie controls and Google Analytics to understand website usage where you consent. You can change your choices through the cookie control shown on the website. Our Cookie Policy lists the cookies in use and their purposes.
Other websites
Our website may link to third-party websites. Those organisations control their own websites and personal information practices, so you should read their privacy notices when following a link.
Changes to this notice
We may update this notice when our services, suppliers or legal obligations change. The latest version will always be published on this page with its revision date.