Introduction
Plymouth Argyle Football Club Limited respects your privacy and is committed to protecting your personal data. This Privacy Notice explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, the rights available to you, and how to contact us.
This notice applies to personal data collected through our official websites, including pafc.co.uk, argylesuperstore.co.uk, argyletickets.com and login.pafc.co.uk, as well as other official Club websites, Club mobile applications, Evergreen Membership and the Evergreen Rewards Programme, post, email, telephone, mobile messaging, face-to-face interactions, online forms, competitions, surveys, social media and other digital services. Together, these are referred to as the “Collection Methods”.
What does this notice cover?
This notice describes how Plymouth Argyle Football Club Limited, referred to as the “Club”, “we”, “us” or “our”, uses personal data when you interact with the Club online or offline. This includes when you
- purchase tickets or attend matches and events;
- use our websites, applications or digital services;
- purchase products through our retail stores or online shop;
- join or renew an Evergreen Membership or participate in the Argyle Rewards Programme;
- use hospitality, food and beverage, competitions or other Club services;
- contact us, submit an enquiry or make a complaint;
- supply goods or services to the Club, or work with us as a commercial partner or sponsor; or
- receive direct marketing or take part in market research.
This notice also explains your data protection rights, including your right to object to certain types of
processing. Further details are provided in the “What rights do I have?” section.
Summary of how we use your data
The Club uses personal data to administer your online and offline relationship with us, provide Club products, services and content, operate ticketing, retail, hospitality, membership and rewards services, manage the safety and security of our venues and events, communicate with you, improve our services, prevent fraud and misuse, and comply with our legal and regulatory obligations.
Some information is provided directly by you. Other information is generated through your interaction with the Club or received from third parties, such as ticketing, retail, payment, membership, rewards, security, social media and analytics providers.
Our websites and applications may include features that interact with social media platforms. If you choose to use those features, the relevant platform may share personal data with us in accordance with your settings and its own privacy terms.
We use cookies and similar technologies to operate our digital services, understand how they are used and, where permitted, personalise content or advertising. Non-essential cookies are used only where the appropriate consent or choice has been obtained.
Where we rely on consent, including for certain direct marketing or non-essential cookies, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
What information do we collect?
We collect and process personal data when you interact with the Club, use our websites and applications, purchase goods or services, attend our venues, enter competitions, communicate with us or participate in Club programmes. Depending on the interaction, this may include:
- your name, address, email address, telephone number, date of birth and other identity or contact information;
- account registration, login and customer reference details;
- ticketing, retail, hospitality, order and delivery information;
- payment and transaction information;
- marketing preferences and communication history;
- information submitted through forms, surveys, competitions, enquiries, complaints or other communications;
- website, application, device, browser, IP address, cookie and usage information;
- information shared through social media features or integrations;
- CCTV images, access records, safety records and incident information collected at Club premises or events;
- supplier, partner and commercial contact information; and
- information received from football authorities, law enforcement, service providers, analytics or demographics partners, where lawful and relevant.
Evergreen Membership and Rewards information
If you join Evergreen Membership or participate in the Argyle Rewards Programme, we may process information including:
- your Evergreen membership category, tier, status and renewal date;
- your Member account and Fortress account identifiers;
- your eligibility for membership benefits and Reward Credit;
- qualifying purchase, refund and cancellation information;
- Reward Credit awarded, redeemed, reversed, expired or remaining on your account;
- membership payment and renewal status, including failed-payment information;
- your use of membership benefits, offers, discounts and promotions; and
- relevant account activity used to administer the programme, maintain accurate records, resolve queries and identify suspected fraud or misuse.
The Evergreen Membership and Rewards Programme is administered through Fortress, the Club’s appointed membership and payment platform provider. Payment information is handled through the Club’s appointed payment arrangements and appropriate security controls.
What information do we generate or receive from third parties?
We may generate personal data through your use of our services. Online, this may include cookie, website, application, account, transaction and usage information. Offline, it may include CCTV images, access records, health and safety records and details of incidents at Club premises or events.
We may receive information from third parties, including ticketing, retail, payment, membership and rewards providers such as Fortress, social media platforms, football authorities, governing bodies, law enforcement, security providers, analytics partners and demographics providers. We use this information only where we have a lawful reason to do so.
If you use a social sign-in, “like”, “follow”, “share” or similar feature, the relevant service may provide information to us in accordance with your choices and the platform’s own privacy terms.
We may receive information about individuals whom the police, football authorities or other relevant stakeholders recommend or require us to restrict or ban from Club premises.
Where we provide an online service to a child and parental or guardian authorisation is required, we may request contact information from the parent or guardian for that purpose.
How do we use this information, and what is the legal basis for this use?
We process personal data only where a lawful basis applies. The lawful basis depends on the purpose and circumstances of the processing.
To fulfil a contract, or take steps linked to a contract
This applies where you purchase goods, tickets, memberships or services, enter a competition, or ask us to take steps before entering into a contract. This may include:
- registering and administering your account;
- verifying your identity or eligibility;
- processing payments and managing refunds;
- communicating with you about the product or service;
- providing customer service;
- arranging delivery or provision of products, tickets, prizes, memberships or services;
- administering Evergreen Membership, membership benefits and automatic renewal; and
- calculating, awarding, redeeming or reversing Argyle Reward Credit.
As required to conduct our business and pursue our legitimate interests
Where necessary and proportionate, we may process personal data to:
- provide and improve products, services, content, websites, applications, venues and events;
- respond to enquiries, comments and complaints;
- personalise services and provide relevant content or offers;
- analyse and understand the use of our services, including through information from analytics or demographics providers;
- support payment security and use providers to validate payment information and prevent fraud;
- protect our venues, systems, customers, staff and partners;
- use CCTV and other security measures to enforce ticketing conditions, support safety, investigate incidents and prevent or detect unlawful activity;
- administer, protect and improve Evergreen Membership and the Argyle Rewards Programme;
- maintain accurate membership and Reward Credit records;
- identify and investigate suspected fraud, error, manipulation or misuse of membership and rewards services;
- investigate complaints and resolve disputes;
- establish, exercise or defend legal claims;
- send postal marketing and, where permitted by law, electronic marketing about similar products or services, with an opportunity to opt out;
- undertake market research; and
- use social media tools to identify relevant audiences and measure or support marketing activity, where lawful.
Where you give us consent
Where consent is the appropriate lawful basis, we may:
- send direct marketing about Club products, services, memberships, events, partners or sponsors;
- use non-essential cookies and similar technologies in accordance with our Cookie Policy and the choices presented to you; and
- use personal data for another specific purpose explained when we request your consent.
For purposes required by law
We may process personal data where necessary to comply with legal obligations, including:
- maintaining health and safety, transaction, accounting and other legally required records;
- responding to lawful requests from courts, regulators, government bodies or law enforcement;
- applying legally required restrictions or stadium bans;
- managing tax, financial and regulatory obligations; and
- obtaining parental or guardian authorisation where required for services involving children.
Evergreen Membership and Rewards Programme
Eligible members and season ticket holders may participate in the Argyle Rewards Programme. The programme is administered through Fortress.
We use Evergreen information to activate and maintain memberships, confirm eligibility, provide membership benefits, manage renewals and payment status, calculate and apply Reward Credit, process adjustments following refunds or cancellations, answer programme queries, maintain records, and investigate suspected fraud or misuse.
The main lawful basis for providing Evergreen Membership and Rewards is the performance of our contract with the member. We may also rely on our legitimate interests to operate, administer, improve and protect the programme, maintain accurate records, prevent fraud and misuse, resolve disputes and protect the Club’s financial and commercial interests. Consent will apply where required for optional marketing or non-essential cookies.
Reward Credit and qualifying transaction information may be linked to your membership account so that credit can be calculated, added, redeemed, adjusted or reversed. Where an eligible transaction is refunded, cancelled or exchanged, the related Reward Credit may also be adjusted.
We may share relevant Evergreen information with Fortress and other service providers involved in membership administration, payment services, rewards, retail, online shopping, food and beverage transactions, customer support, hosting and security. These organisations may act as processors on our behalf or, for some activities, as separate data controllers. Where a provider acts as a separate controller, its own privacy information will also apply.
Relying on our legitimate interests
Where we rely on legitimate interests, we assess the purpose of the processing, whether the processing is necessary and the impact on individuals. We apply safeguards where required and do not rely on legitimate interests where the impact on an individual’s rights and freedoms overrides our interests.
You can request further information about a relevant legitimate interests assessment by contacting the Data Protection Officer using the details below.
Withdrawing consent or objecting to direct marketing
Where we rely on consent, you may withdraw it at any time. We may continue to use personal data for another purpose where a different lawful basis applies.
You have an absolute right to object to direct marketing, including profiling related to direct marketing. You may opt out by using the unsubscribe or preference link in an electronic communication, updating your Argyle Account preferences where available, or contacting us.
What cookies and tracking technologies does the Club use?
When you visit a Club website or use a Club digital service, we may collect information about your device, browser, IP address, referring website, pages visited and how you use the service. This may involve cookies, pixels, local storage, software development kits or similar technologies.
Some technologies are necessary for the service to operate. Others are used only where you have made the appropriate choice or given consent. Further information, including available controls, is provided through the relevant Cookie Policy and cookie preference tool.
Who will we share this data with, where and when?
We may share personal data where necessary for the purposes described in this notice, including with:
- football authorities and governing bodies, including the FA, EFL and Premier League;
- law enforcement, courts, regulators and government authorities where disclosure is lawful or required;
- Fortress and other providers supporting Evergreen Membership, membership payments and Reward Credit services;
- providers of ticketing, retail, online shop, hospitality, payment, website, application, hosting, security, maintenance, customer support, communications, marketing, analytics, identity-checking and fraud-prevention services;
- professional advisers, insurers and auditors;
- travel and event providers where necessary to fulfil a service or contract; and
- social media platforms where you choose to connect to or share through those services.
Where a provider processes personal data on our behalf, it must act only on our documented instructions, subject to appropriate contractual, confidentiality and security requirements. Some organisations may act as separate controllers and will be independently responsible for their processing.
International transfers
Some suppliers or systems may process personal data outside the United Kingdom. Where personal data is transferred internationally, we use a transfer mechanism permitted by UK data protection law and apply appropriate safeguards. Depending on the circumstances, these may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.
You may contact the Data Protection Officer for further information about safeguards relevant to a particular transfer.
What rights do I have?
Depending on the circumstances, you may have the right to:
- be informed about how your personal data is used;
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate or incomplete personal data;
- ask us to delete personal data;
- ask us to restrict the processing of personal data;
- object to processing based on legitimate interests;
- object at any time to direct marketing;
- receive certain personal data in a structured, commonly used and machine-readable format, and ask us to transfer it where the legal conditions apply;
- withdraw consent where processing relies on consent; and
- ask for human intervention, express your view and challenge a decision where solely automated decision-making produces legal or similarly significant effects.
These rights are not absolute. We may refuse or limit a request where the law permits us to do so, including where complying would adversely affect another person’s rights, where information must be retained by law, or where a valid exemption applies. We may request information to verify your identity before acting on a request.
Where information is required to enter into or perform a contract, this will normally be explained when it is collected. If required information is not provided, we may be unable to register an account, complete a purchase, provide a membership or deliver the requested service. Other information may be optional.
How do I get in touch with you?
If you have a question about this notice, want to exercise a data protection right, wish to opt out of direct marketing, or have concerns about how we use personal data, please contact:
Data Protection Officer
Email: dataprotection@pafc.co.uk
Post: Data Protection, Plymouth Argyle Football Club, Home Park Stadium, Plymouth, Devon, PL2 3DQ
General enquiries may also be sent to argyle@pafc.co.uk. Marketing preferences may also be updated through the Argyle Account preference centre, where available, or through the unsubscribe link in Club marketing emails.
If we are unable to resolve your concern, you have the right to complain to the Information Commissioner’s
Office, the UK supervisory authority for data protection.
Information Commissioner’s Office
How long will you retain my data?
We keep personal data only for as long as it is reasonably required for the purpose for which it was collected, including legal, accounting, contractual, safeguarding, fraud-prevention and operational requirements. Current retention approaches include:
- Registration data is retained while an account remains active and generally for 6 years afterwards.
- Where a person has agreed to marketing, marketing may continue while the person remains an active user. An active user is currently treated as someone who has opened a Club email or made a purchase within the previous 3 seasons. We review inactive marketing records for removal.
- Where someone opts out of marketing, we retain sufficient suppression information for as long as necessary to respect that choice.
- Personal data processed in connection with a contract, purchase or competition is generally retained for 6 years from the last relevant interaction.
- Evergreen Membership and Rewards information is retained while needed to administer the active programme and afterwards in accordance with applicable contractual, transaction, accounting, complaint, fraud-prevention and legal-claims retention requirements.
- Supplier and partner information is generally retained for at least 6 years following the end of the contract, or longer where required by law.
- Routine CCTV footage is normally retained for 1 month, unless it is required for an incident, investigation, complaint, legal claim or legal obligation.
- Health and safety accident records are generally retained for 7 years, subject to the nature of the record and applicable legal requirements.
Where information is required for an ongoing complaint, rights request, incident, investigation or legal claim, the relevant information may be retained until the matter is resolved. We may retain anonymised information where it can no longer identify an individual.
Changes to this notice
We review this Privacy Notice regularly and update it when our services, systems, processing activities or legal requirements change. The latest version and effective date will be published through the Club’s official channels. Where a change materially affects how we use personal data, we will take reasonable steps to bring it to the attention of affected individuals.
Effective Date: This Privacy Notice was updated 16 October 2026 and is effective as of that date.
Check cookies and update Cookie preferences