Privacy Policy

Last updated: 3rd April 2026

What data we collect

When you submit the season ticket registration form, we collect the following personal data:

  • Full name
  • Email address
  • Phone number
  • Season ticket number
  • Whether you hold shares
  • Date and time of your submission

Why we collect it

Season Ticket Alliance Trust collects this data for the purpose of managing season ticket holder registrations and communicating with members of the Season Ticket Alliance Trust.

Lawful basis for processing

We process your personal data on the basis of your explicit consent, which you provide by ticking the consent checkbox on the registration form.

How we store your data

Your data is stored securely in a database hosted on Microsoft Azure in Northern Europe. Access is restricted to authorised personnel only.

How long we keep your data

We retain your data for as long as you remain a registered member, or until you request its removal. You can request deletion of your data at any time by contacting us using the details below.

Who has access to your data

Your data is accessible only to Season Ticket Alliance Trust staff who require it for the purposes described above. We do not share your personal data with third parties except where required by law.

Your rights

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

  • Access — request a copy of your personal data
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data
  • Withdraw consent — withdraw your consent at any time
  • Complaint — lodge a complaint with the Information Commissioner's Office (ICO)

Cookies and third-party services

This website uses a small number of cookies, all of which are strictly necessary for it to function. No consent is required for these under UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

  • Anti-forgery cookie — set automatically to protect the registration form against cross-site request forgery (CSRF) attacks. It is deleted when you close your browser.
  • Session cookie — used to carry status messages (e.g. error notifications) between page loads. It is deleted when you close your browser.

We do not use any analytics, advertising, or tracking cookies.

Third-party services

This website makes use of the following third-party services. No personal data is sold or shared with these providers beyond what is described below:

  • Google Fonts — fonts are loaded from Google's servers. Your IP address is transmitted to Google as part of this request. Google's privacy policy is available at policies.google.com/privacy.
  • Cloudflare Turnstile — used to distinguish human visitors from automated bots on the registration form. Turnstile is designed to be privacy-friendly and does not set tracking cookies. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
  • Microsoft Azure / Application Insights — the website is hosted on Microsoft Azure. Server-side telemetry (such as error logs and performance data) is collected via Application Insights. This does not involve any client-side tracking or browser cookies. Microsoft's privacy policy is available at privacy.microsoft.com.

Contact us

To exercise any of these rights or to ask questions about how we handle your data, please contact:

Season Ticket Alliance Trust
thealliance@stat26.com