Privacy Policy
Deeside Dragons Ice Hockey Club
Last updated: February 2026
Deeside Dragons Ice Hockey Club (“we”, “our”, “us”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit or use:
- dragonsihc.co.uk
- dragonsihc.com
This includes ticket purchasing through our official online ticketing platform.
1. Who We Are
Deeside Dragons Ice Hockey Club is a volunteer-run, non-profit ice hockey club based in Deeside, North Wales.
For the purposes of UK data protection law (including the UK GDPR), we are the Data Controller.
Contact Email: Ticketing Contact Form
2. What Personal Data We Collect
When you register an account or purchase tickets through our website, we may collect the following personal information:
- Full name
- Email address
- Contact telephone number
- Billing address
- Ticket purchase history
- Account login details (username and encrypted password)
All users must hold a registered account to purchase tickets. We do not offer guest checkout.
3. Date of Birth and Ticket Entitlement Checks
In some cases, we may request a Date of Birth temporarily to verify ticket eligibility (e.g. Child, Adult, or Concession categories).
Important:
We do not store full Date of Birth information after the entitlement check has been completed. Our system only records whether a user qualifies for a ticket type, not their actual birth date.
4. How We Use Your Information
We only use personal data where necessary for legitimate club operations, including:
- Processing ticket purchases and issuing e-tickets
- Managing user accounts
- Communicating important match-related information
- Sending ticket reminders before games
- Sending occasional supporter communications after games (such as attendance thanks, match summaries, or service updates)
- Providing customer support
- Improving our ticketing and matchday operations
We do not sell, rent, or trade your data to third parties.
5. Marketing Communications
We may send direct marketing communications only where:
- You have actively opted in, and
- You have the ability to unsubscribe at any time
All club emails include an unsubscribe option, except for essential transactional emails such as:
- Ticket confirmations
- E-ticket delivery
- Payment receipts
6. Payments and Financial Data
Online payments are securely processed by Stripe via WooCommerce.
On match nights, in-person payments may be processed via SumUp.
We do not store or process card details directly. Payment information is handled entirely by our secure payment providers.
7. Ticket Analytics and Postcode Aggregation
Our ticketing platform (Ticket Forge) may generate anonymised analytics to help the club understand attendance patterns.
This includes postcode area aggregation using only the first part of a postcode (e.g. “CH5”).
We never use or store full postcodes for analytics purposes, and this data cannot identify individual households or addresses.
8. Cookies and Website Functionality
Our website uses essential cookies to ensure the site functions correctly, including:
- Login sessions
- Basket and checkout functionality
- Security protection
We do not currently use third-party tracking tools such as Google Analytics or Facebook Pixel.
9. Data Storage and Security
We take data security seriously. Measures include:
- SSL encryption across the site
- Limited administrative access
- Secure server hosting managed directly by the club
- Industry-standard payment security via Stripe and SumUp
Personal data is stored securely and only accessible to authorised club administrators where necessary.
10. Data Sharing
We do not share personal information with external organisations, except where required for operational purposes such as:
- Stripe (payment processing)
- Email delivery systems for ticket fulfilment
- Legal or regulatory obligations
Your personal data remains within club-controlled systems and is never shared for commercial purposes.
11. Data Retention
We retain data only as long as necessary:
- Ticket purchase records are retained for up to 6 years for accounting and compliance purposes
- Inactive accounts are removed after 2 years from the last login
- Support queries may be retained temporarily for customer service purposes
12. Children and Under-16 Users
Our online ticketing and account system is intended to be used primarily by adults and responsible purchasers.
Where tickets are being purchased for children or young people, we ask that registration and payment is completed by a parent, guardian, or other responsible adult.
We do not actively market our services directly to children, and we do not knowingly collect personal data from individuals under the age of 16 without appropriate adult involvement.
If we become aware that an account has been created or personal information has been submitted by a child without parental or guardian consent, we will take reasonable steps to remove or restrict that data where appropriate.
Parents and guardians are encouraged to supervise all ticket purchases made on behalf of minors.
13. Your Rights Under UK GDPR
You have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your account and personal data
- Object to certain processing
- Withdraw marketing consent at any time
- Request data portability where applicable
To exercise any rights, contact: Ticketing Contact Form
14. Complaints
If you have concerns about how we handle your data, you may contact us first.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
15. Changes to This Policy
We may update this Privacy Policy occasionally to reflect changes in our systems or legal obligations. The latest version will always be published on our website.