Privacy notice

Who is responsible for your data

The Sports & Events Club is the data controller for the personal data described here. If you have a question about any of it, or want to exercise one of the rights below, email help@sportsandevents.net or call 020 3355 4400.

One Travel Group Ltd (registered in England and Wales, company no. 14602888), registered office First Floor, Swan Buildings, 20 Swan Street, Manchester, M4 5JW.

We are registered with the Information Commissioner’s Office under ZB517397.

What we collect

When you browse and search

Your searches — sport, competition, team, dates, destination, ticket type — and basic technical data such as your IP address, device type and browser. This is how the site works at all, and how we know which fixtures to keep in stock.

When you create an account

Your name, email address and password. Passwords are stored hashed; we never see them.

When you book

The lead booker’s name, email address, telephone number and billing address, and for each traveller or ticket holder: name, and where the supplier or the venue requires it, date of birth, nationality and passport number.

We ask for passport details and dates of birth where the airline, hotel or event organiser will not issue without them. You can also choose to save them to your account, so that we do not have to ask you again the next time you book — that is your choice, you can remove them at any time from your account page, and nothing obliges you to store them with us.

People you book for

If you often book for the same people, you can save them to your account and pick them next time instead of typing them again. A name is all we need, and a name is all we keep unless you tell us otherwise.

You can also choose to store a traveller’s date of birth, passport number, nationality and passport expiry on your account, so you do not have to find their passport again every time you book. That is optional and separate — saving someone’s name does not store their passport, we ask you to confirm their permission a second time before we keep any of it, and we record both answers separately. Clearing those fields on your account page deletes them and leaves the name.

These are other people’s details, so you can remove anyone from the list at any time, which deletes everything we hold for them on your account. If someone asks us to remove their own details, we will.

Text messages

The mobile number you give at checkout is used to run your booking — your confirmation, your tickets and anything going wrong with it. Those messages are part of the service and are sent whether or not you opt in to anything else.

At checkout you can also opt in, by ticking a box that is never ticked for you, to three matchday texts for that booking: tickets ready, travel the night before, and your block and turnstile on the morning. Nothing else is sent, and they stop the day after the event. When you tick it we keep a record of the exact wording you were shown and when you agreed to it, so we can show what you consented to.

You can withdraw that consent at any time, without giving a reason and without affecting your booking — email help@sportsandevents.net or call 020 3355 4400.

When you pay

Your card details go directly to our payment processor, Stripe. They do not pass through our servers and we never store them. We keep the outcome of the payment, the last four digits and the card type so we can service and refund your booking.

Why we are allowed to hold it

• To perform your contract — taking the booking, passing details to the airline, hotel or ticket supplier, issuing tickets and documents, and looking after you if something changes.
• To meet legal obligations — accounting and tax records, and the passenger and guest information airlines, hotels and border authorities are required to collect.
• Our legitimate interests — keeping the site secure, preventing fraud, and improving what we sell. We balance these against your interests, and you can object at any time.
• Saving the people you book for — our legitimate interest and yours in not asking you for the same details twice. We rely on this rather than on your booking contract, because the people on that list are not party to it. You tell us you have their permission before we keep anything, and either of you can have it removed. Their passport details are stored only if you separately ask us to, are never required in order to save a name, and can be deleted on their own.
• Your consent — marketing email, the optional matchday text messages, and any non-essential cookie. All are opt-in and all can be withdrawn without affecting your booking. The texts that run your booking itself are not marketing: they are part of performing your contract, above.

Passport numbers, dates of birth and nationality receive extra care. They are sent only to the airline, hotel or venue that requires them, they are never shown to a travel agent acting on a booking, and they are never written into our logs. A copy you have chosen to save to your account is kept only there, and only for you to reuse.

Who we share it with

Only the parties who have to have it to deliver what you booked. We do not sell personal data, and we do not share it for anyone else’s marketing.

• Ticket suppliers for the event you booked, to issue tickets in the right names.
• Airlines and hotels, and the booking systems that connect us to them.
• Stripe, to take and refund payment.
• Our hosting and email providers, who process data on our instructions only.
• Authorities and regulators where the law requires it.

Some of these are outside the UK. Where personal data leaves the UK we rely on adequacy regulations or on the International Data Transfer Agreement, so the protection travels with it.

How long we keep it

• Booking and financial records — seven years, for tax and accounting.
• Passport numbers, dates of birth and nationality given for one booking — deleted within 12 months of travel, unless a live claim or complaint needs them.
• Passport details you save to your account — kept for as long as your account is open, so we do not ask you for the same document twice. Remove them yourself at any time from your account page, or ask us and we will. Closing your account removes them.
• People you have saved to book for — kept while your account is open. Remove anyone yourself at any time from your account page, or clear just their passport details and keep the name; closing your account removes the whole list.
• Account details — while your account is open, plus 12 months.
• Marketing and text-message consent — the record of what you were shown and when you agreed to it, kept until you withdraw the consent. If a checkout was never completed there is no booking record to keep it in, so that consent record is deleted after 30 days.
• Search and analytics data — 14 months.

Your rights

You can ask us to:

• give you a copy of the data we hold about you;
• correct anything that is wrong;
• delete it, where we no longer need it for your booking or the law;
• restrict or object to how we use it;
• send it to another provider in a portable format;
• stop marketing to you — immediately, no reason needed.

Email help@sportsandevents.net and we will reply within one month. There is no charge.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

Cookies

Set out separately on our cookie policy, including every cookie and browser storage key this site actually uses.

Children

The site is not intended for children, and accounts are for over-18s. Children can of course be named as travellers or ticket holders on a booking made by an adult; we hold their details only for that booking.