This privacy policy explains how A Cultured Left Foot (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website. We are committed to ensuring your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy was last updated on 15 September 2023.
Who We Are
A Cultured Left Foot is an independent Arsenal football blog operated at aclfarsenal.co.uk. We are not affiliated with Arsenal Football Club, the Premier League, or any commercial football organisation. We are a small, fan-run website dedicated to writing about Arsenal and the wider game.
If you have any questions about this privacy policy or your personal data, you can contact us at: [email protected]
What Data We Collect
We may collect and process the following types of personal data:
- Analytics data: When you visit our website, we collect anonymised usage data through Google Analytics, including your IP address (anonymised), browser type, operating system, referring website, pages visited, and duration of your visit.
- Cookie data: We use cookies to improve your experience on our site. Please see our Cookie Policy for full details.
- Comment data: If you leave a comment on our site, we collect the data shown in the comment form, including your name, email address, and website (if provided), along with the comment itself. Your IP address and browser user agent string are also collected to help with spam detection.
- Contact data: If you contact us by email, we will retain the content of your message, your email address, and any other information you choose to provide.
How We Use Your Data
We use the data we collect for the following purposes:
- To understand how visitors use our website, so we can improve its content and functionality.
- To display and manage comments on our articles.
- To respond to any enquiries you send us.
- To detect and prevent spam or abuse.
- To comply with any legal obligations.
We will never sell your personal data to third parties. We do not use your data for direct marketing purposes unless you have given us explicit consent to do so.
Lawful Basis for Processing
Under the UK GDPR, we rely on the following lawful bases for processing your personal data:
- Legitimate interests: We process analytics and comment data on the basis of our legitimate interest in operating and improving our website.
- Consent: Where we use non-essential cookies, we rely on your consent, which you can withdraw at any time.
- Legal obligation: We may process data where required to comply with a legal obligation.
Cookies
Our website uses cookies to distinguish you from other users and to improve your browsing experience. For detailed information about the cookies we use, their purpose, and how to manage them, please read our Cookie Policy.
Third-Party Services
We use the following third-party services that may collect data about you:
- Google Analytics: We use Google Analytics to analyse website traffic. Google Analytics uses cookies to collect anonymised data about how visitors use our site. This data is processed by Google in accordance with their privacy policy. We have enabled IP anonymisation to ensure your full IP address is never stored.
- Amazon Associates: Some articles may contain affiliate links to Amazon. If you click on an affiliate link and make a purchase, we may earn a small commission at no additional cost to you. Amazon may use cookies to track referrals. Please refer to Amazon’s privacy notice for further information.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to erasure: You have the right to request that we delete your personal data, subject to certain conditions.
- Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to data portability: You have the right to request a copy of your data in a structured, commonly used, and machine-readable format.
- Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk.
Data Retention
We retain analytics data for 26 months, after which it is automatically deleted by Google Analytics. Comment data is retained for as long as the relevant article remains published on our site. If you request deletion of your comment data, we will action this within one month. Emails and correspondence are retained for up to 24 months unless a longer period is required for legal reasons.
Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption to secure data transmitted between your browser and our server.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this privacy policy or wish to exercise your data rights, please contact us at:
Email: [email protected]