Scarborough Rugby Union Football Club Ltd incorporating Barons Fitness Centre knows that you care how information about you is used and shared and we appreciate your trust in us to do that carefully and sensibly. This policy describes the types of personal information that we may collect about you, the purposes for which we use the information, the circumstances in which we may share the information and the steps that we take to safeguard the information to protect your privacy.

As used throughout this policy, the term “SRUFC” refers to Scarborough Rugby Union Football club Ltd, Barons Fitness Centre and Scarborough Squash academy.

“we”, “us” and “our” refer collectively to Scarborough Rugby Union Football club Ltd.

Any questions regarding this Policy and our privacy practices should be sent by email to, or via the other methods on our contact page.

Date: 4th June 2018
Next Review Date: 23rd May 2019

By visiting SRUFC, you are accepting and consenting to the practices described in this Privacy Policy.

1) Controllers of Personal Information

Any personal information provided to or gathered by SRUFC is controlled by SRUFC (the data controller), whose registered office is at: J. M. Guthrie Clubhouse, Silver Royd, Scalby Road, Scarborough, YO13 0NL

2) What Personal Information about club users does SRUFC gather?

The information we gather helps us to continually improve your experience at SRUFC. This personal information may include: your name and contact information; date of birth; preferred communication methods; business name (in the case of a corporate membership) and business address and bank details. We also create information that becomes part of the personal information we hold about you, such as your membership number and your usage of the club and its facilities.We may also collect and create details on joint members and other family members, where applicable, including family members under the age of 18.

We also collect the following information:

  • Sensitive information

The term “sensitive information” in this context refers to information related to but not limited to your racial or ethnic origin, religion or other beliefs and your health.

Whilst we do not generally collect sensitive information unless it is volunteered by you, we do specifically collect health data to the extent that it is required to assess your readiness for physical exercise and to provide information in the event of an accident.

We are required to collect race and ethnicity data as well as disability information.

By providing the sensitive information to us, you are consenting to our using it in the manner set out in this Policy.

  • Personal Information from Children

We do not knowingly collect personal information from individuals under 16 years of age without the permission of their parent or guardian. As a parent or legal guardian, please do not to allow your children to submit personal information without your permission.

  • Photographs for Membership Cards

In the interests of security and the prevention of crime, we take a digital photograph of each member to whom a membership card is issued. By providing the digital photograph to us, you are consenting to our using it in the manner set out in this Policy.

  • Contacting us via Website or otherwise

When you use the or websites (“Our Sites”) or contact us by post, telephone, fax, email or SMS, we may collect, store and use certain personal information that you disclose to us. This includes details such as your name, address, telephone, fax, email and mobile phone number, whether this is required for our own purposes or otherwise and the resources that you access. If you contact us, we may keep a record of that correspondence.

  • CCTV

We use CCTV in our club for health and security reasons. If you have any queries in relation to the use of CCTV operating in and around our club please contact us.

3) What do we do with personal information collected from you?

We use information held about you in the following ways:

Information you give to us. We will use this information:

  • to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us including for example to administer your membership of the club, to facilitate bookings of classes and appointments.
  • to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about, to process payments and maintain accounts and records, to prevent crime and aid in the prosecution of offenders,and to maintain membership records;
  • to send you newsletters and promotions and to conduct surveys, prize draws, competitions, general feedback and other promotions via email, telephone or post.
  • Other than as set out in this Privacy Policy we will not share your personal information with third parties for marketing or any other purposes without your consent,unless we are required to do so by law.
  • to notify you about changes to our service; and
  • to ensure that content from our site is presented in the most effective manner for you and for your computer.

Information we collect about you. We will use this information:

  • to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
  • to improve our site to ensure that content is presented in the most effective manner for you and for your computer;
  • to allow you to participate in interactive features of our service, when you choose to do so;
  • as part of our efforts to keep our site safe and secure;
  • to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you; and
  • to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.

4) What about Cookies?

Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser to enable our systems to recognise your browser and to automatically collect information from your computer such as your IP address and other details about your computer which are automatically collected by our web server, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.

The “Help” menu on the menu bar of most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie and how to disable cookies altogether. Additionally, you can disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on’s settings or visiting the website of the browser’s manufacturer. However, because cookies allow you to take advantage of some of our websites essential features, we recommend that you leave them turned on.

If you do leave cookies turned on, be sure to sign off when you finish using a shared computer.

Please note that our advertisers may also use cookies, over which we have no control:

  • To estimate our audience size and usage pattern.
  • To store information about your preferences, and so allow us to customise Our Site according to your individual interests.
  • To speed up your searches.
  • To recognise you when you return to Our Site.

The following table outlines the personal data that the website collects and for what purpose. The table also outlines the 3rd parties the data is processed by or shared with, and how long the data is stored for:

Name What Legal Ground Purpose 3rd Parties Data Retention
Email Prospective client & supplier contact information Legitimate interests To allow initial and ongoing contact with prospects, clients, suppliers, etc. United Hosting & Colour Creation Until request for deletion.
Contact Forms Your name, email & company name. Legitimate interests To allow website users to contact us regarding their needs & potential projects. Held on our server, hosted with United Hosting Until request for deletion.
Invoicing Client & supplier purchase history & contact info. Legal obligation For invoicing Indefinitely, for on-going invoicing and accounting records
Analytics Website visitor behaviour (anonymised – full IP address is NOT stored) Legitimate interests To analyse popular content, website performance, etc – so we can further improve. Google Analytics
They have signed DPA & anonymise IP addresses
14 months
Newsletters Email Addresses Legitimate interests To inform and alert our users to news and updates regarding the club & events. MailChimp
They have signed DPA & anonymise IP addresses
Until request for removal from the mailing list via ‘unsubscribe’ links
Server Logs IP address Legal obligation To help prevent DoS (Denial of Service) attacks; for website security and diagnostics. United Hosting Server logs are stored unencrypted for 7 days, and then moved to an encrypted backup which is stored indefinitely and only accessible by United Hosting.

5) Does SRUFC share the Information it receives?

Information about our club users is an important part of our business and we do not sell it to others. SRUFC does not share member information with anyone else.

Promotional Offers: Sometimes we send offers to club users on behalf of other businesses. When we do this, we do not give that business your name and address. If you do not want to receive such offers, please tick the relevant opt-out box in your terms and conditions of membership or let us know in writing if you don’t want to receive these offers.

Business Transfers: As we continue to develop our business, we might sell or buy subsidiaries or business units. In such transactions, member information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Policy (unless, of course, the member consents otherwise). Also, in the unlikely event that SRUFC or substantially all of its assets are acquired, personal information will of course be one of the transferred assets.

With your consent, other than as set out above, you will receive notice when information about you might go to third parties and you will have an opportunity to choose not to share the information.

Whenever we transfer personal information to countries outside of the European Economic Area in the course of sharing information as set out above, we will ensure that the information is transferred in accordance with this Privacy Policy and as permitted by the applicable laws on data protection.

6) How Secure is Information about me?

We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personally identifiable information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

7) What about Links to other websites?

Our site may include links to other websites. We do not provide any personally identifiable customer information to these advertisers or third-party websites.

These third-party websites may use technology to send (or “serve”) the advertisements that appear on our website directly to your browser. They automatically receive your IP address when this happens. They may also use cookies, JavaScript, web beacons (also known as action tags or single-pixel gifs), and other technologies to measure the effectiveness of their ads and to personalise advertising content. We do not have access to or control over cookies or other features that they may use, and the information practices of these advertisers and third-party websites are not covered by this Privacy Policy. Please contact them directly for more information about their privacy practices. In addition, the Network Advertising Initiative offers useful information about Internet advertising companies (also called “ad networks” or “network advertisers”), including information about how to opt-out of their information collection.

8) What Choices do I have?

You can always choose not to receive information. If you do not want to receive email or other promotional communications from us, do not tick the relevant opt-in box on any forms you complete for us.

If you currently receive communications and would like to change your mind, you can either let us know in writing or can click on the ‘unsubscribe’ option which is included in any emails we send you.

However, please note, if you do not want to receive legal notices from us, such as this Privacy Policy, those notices will still govern your use of SRUFC and it is your responsibility to review them for changes.

As mentioned above, the Help menu on the menu bar of most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie and how to disable cookies altogether. Additionally, you can disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on’s settings or visiting the website of its manufacturer.

9) Are Children allowed to use the Site?

If you are under 18, you may use the Site but you may only use the “Member Portal” area of the Site with the involvement of a parent or guardian.

10) What Rights do I have in relation to my Personal Information?

You have the right to ask us not to process your personal information for marketing purposes by sending an email to the Admin Team. The General Data Protection Regulations 2018 gives you the right to access personal information held about you. Your right of access can be exercised in accordance with the Act.

Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you. If you would like to access your personal information contact us by email to or by post to Data Requests, The J.M. Guthrie Clubhouse, Silver Royd, Scalby Road, Scarborough, YO13 0NL

11) Security & Data Breaches

SRUFC takes security seriously. In order to protect your information from loss, misuse or unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. These steps include the following:

– Data minimisation
– Password best practice
– Security best practice concerning devices (PCs, laptops, mobile devices), online accounts, website hosting, physical access and storage
– Staff training and accountability on data protection

Our Data Security Policy includes a clear process for handling a personal data breach, should one occur. Where appropriate, SRUFC will promptly notify you of any unauthorized access to your personal information.

12) Notices and Revisions

If you have any concern about privacy at SRUFC, please email us a thorough description and we will try to resolve the issue for you.

Our business changes constantly and our Privacy Policy and the terms and conditions will change also. We may email periodic reminders of our notices and conditions, unless you have instructed us not to, but you should check our website frequently to see recent changes. Unless stated otherwise, our current Privacy Policy applies to all information that we have about you and any account(s) you hold with SRUFC. However, we stand behind the promises we make and will never materially change our policies and practices to make them less protective of member information collected in the past without the consent of affected members.

13) Contact Us / Complaints

If you wish to raise a complaint on how we have handled your personal information, you can contact us directly and we will investigate the matter.

If you are not satisfied with our response or believe we are processing your personal information not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).

Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed to the SRUFC.