Privacy Policy

This Privacy Policy sets out details of the Personal Information that Luton Town FC collects from you and how we use it, and how to contact us if you have any questions about your Personal Information

Privacy Policy

Luton Town Football Club 2020 Ltd (company number 06133975 ) is a professional football club based in Luton. We also work with our Community Trust, operating as Luton Town Community trust Registered Charity number 06133975. We have a Data Protection Lead, who can be contacted by e-mail on info@lutontown.co.uk or by post addressed to Data Protection Lead, Kennilworth Stadium, 1 Maple Road, Luton LU4 8AW

When you create an official Luton Town FC account, we may collect and use the following personal information about you:

  • your first name and last name

  • your e-mail address

  • your address

  • your date of birth

  • your gender

When you use the website or the Luton Town FC App we may also collect the following personal information about you:

  • information about how you use our website, app, IT, communication and other systems your responses to surveys, competitions, quizzes and promotions

  • the IP address, data showing when you visited and information showing which website pages you visited

  • your location (where you enable location services through the app or the settings on your device) will be collected via GPS and/or Bluetooth technology and used to send tailored messages to you and enhance your stadium experience. You can change your location settings at any time in your device settings

  • please see our Cookie Policy for more information on how we may collect information via your use of our website (including via your use of our websites through the Luton Town FC App)

When you make purchases on the Luton Town Football Club online retail shop or the Luton Town Football Club ticketing website in addition to the information we collect via your Luton Town FC account, we may collect the following personal information about you:

  • your title

  • your delivery address

  • your company details (if applicable)

  • your home, work and mobile telephone number

  • your billing information, transaction and payment card information

  • your purchase history and saved items

We may also collect the following additional information if you come to Kenilworth Road or our Training Ground facility or any other of our facilities as a fan, guest or we host your event:

  • CCTV recordings from when you visit our premises

  • Information about your visit (including date and time of visit)

  • Dietary requirements, disabilities and injuries

If you interact with Community Trust for example, by participating in a community project, , we may collect the following personal information about you:

  • the participant’s name, school and year group (where applicable)

  • the participant’s ethnicity and disability information

  • the participant’s next of kin details (including next of kin name and contact details)

  • the participant’s criminal record information where this has been provided to us either by you or a third-party organisation (such as the police)

  • the participant’s employer’s details

Our website also incorporates a Single Sign On solution by one of our third party service providers, Fusion Auth. This will allow you to utilise one login across all of your Luton Town FC’s accounts (via lutontown.co.uk website, and our ticketing and retail sites)

You will be able to login with your existing email address and password on your – if you have forgotten your password, you will be able to reset it from the login screen and receive instructions via email.

Your information may be held or received by the following parties:

1. Service providers who work for us, including marketing agencies, CRM database providers, reporting systems, website hosts and payment portal providers.

2. On occasions, to Social media platform providers such as Facebook, Twitter, TikTok and Instagram, where you have an account, in order for us to compare information about you in our database in order to enrich the data we hold about you. 3. With our commercial sponsors. Where you have given your consent, we may share your contact details and/or contact you in order to tell you about a range of initiatives and offers from our commercial partners.

  • A current list of our commercial partners is found Here

4. Other members of the Club and its people, such as the Board.

5. Our governing bodies, law enforcement or other regulatory bodies such as the English Football League, the Premier League, the Premier League Charitable Fund and the Football Association. 6. Our credit referencing agencies. 7. Our professional and legal advisors and auditors.

  • This may include external solicitors, our insurers and auditors that we instruct on our behalf from time to time.

We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers to ensure they can only use your personal information to provide services to us and to you.

Usually, information will be anonymised but this may not always be possible. The recipient of the information will be bound by confidentiality obligations. We will never sell your information to anyone.

Most of the personal information that we process is collected directly from you—in person, by telephone, text or email, by completing a participation form and/or via our websites and official app. However, we may also collect information from publicly accessible sources, or from a third party including credit reference agencies, customer due diligence providers, our official sponsors and partners and our governing bodies (including the English Football League, the Football Association, and the Premier League). We may also collect personal information through the use of cookies and other technologies on our websites (including via app) (full details are available in our cookies policy and via our IT systems through our door entry systems (such as our turnstiles) and reception logs; and our automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, and communications systems.

We may use your information for promotional and marketing purposes (for example, to inform and build marketing campaigns, to better identify products and services that may interest you and to send you promotional offers and other marketing communications). We have a legitimate interest in processing your personal information for these purposes (see above ‘Why do we collect personal information about you?’). However, where consent is needed, we will ask for this clearly.

Depending on how you have interacted with us and what you have told us to send or not to send, we may use your personal information to send you updates by email, text message, telephone, post or via push notifications in the Luton Town FC App about our products and/or services, including exclusive offers, promotions or new products and/or services. You have the right to opt out of receiving promotional communications at any time by:

  • contacting us at info@lutontown.co.uk

  • using the ‘unsubscribe’ link in emails or asking us to stop texting you in a prescribed manner

  • updating your marketing preferences by clicking “update preferences” on any email we send you or by accessing your preference centre within the App.

We may ask you to confirm or update your marketing preferences if you instruct us to provide further products and/or services in the future, or if there are changes in the law, regulation, or the structure of our business.

We will always treat your personal information with the utmost respect and never sell it to other organisations outside Luton Town Football Club 2020 Limited for marketing purposes.

HOW LONG? We keep different information for different lengths of time but as a rule we will not keep any information in a form that allows the identification of the person it is about for any longer than we have a reason to have it.

WHERE? Information may be held at our offices and those of our third-party agencies, service providers, representatives and agents as described above (see above: ‘Who we share your personal information with’). Some of these third parties may be based outside the UK and European Economic Area.

OUTSIDE THE EEA? To deliver services to you, it is sometimes necessary for us to share your personal information outside the UK and European Economic Area (EEA), e.g.:

  • with our service providers located outside the UK/EEA;

  • if you are based outside the UK/EEA;

  • where there is an international dimension to the services we are providing to you.

These transfers are subject to special rules under European and UK data protection law. If you would like further information please contact us using the details in the ‘Contact us’ below.

You have the following rights, which you can exercise free of charge:

1. Access - The right to be provided with a copy of your personal information (the right of access)

2. Rectification - The right to require us to correct any mistakes in your personal information)

3. To be forgotten - The right to require us to delete your personal information - in certain situations)

4. Restriction of processing - The right to require us to restrict processing of your personal information - in certain circumstances, e.g. if you contest the accuracy of the data)

5. Data portability - The right to receive the personal information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party - in certain situations)

6. To object - The right to object:)

- at any time to your personal information being processed for direct marketing (including profiling);)

- in certain other situations to our continued processing of your personal information, e.g. processing carried out for the purpose of our legitimate interests.)

7. Not to be subject to automated individual decision-making - The right not to be subject to a decision based solely on automated processing (i.e. a decision made without human involvement), including profiling, that produces legal effects concerning you or similarly significantly affects you.

For further information on each of those rights, including the circumstances in which they apply, please contact us or see the .

If you would like to exercise any of those rights, please:

  • email, call or write to us - see below: ‘Contact us’;

  • provide enough information to identify yourself (and any additional ID information we may reasonably request from you); and

  • let us know what right you want to exercise and the information to which your request relates.

Keeping your personal information secure

We have appropriate security measures to prevent personal information from being accidentally lost, used or accessed unlawfully. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Please contact us if you have any query or concern about our use of your information (see below ‘How to contact us’). We hope that we can resolve any question or issue you may raise about our use of your information.

You also have the right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at or telephone: 0303 123 1113.