Privacy Policy

The Carlisle United Supporters' Club London Branch was established in 1974 and exists to bring together exiled supporters of Carlisle United FC and provide membership services such as away travel, social events and news updates.

We take your privacy seriously and take care to ensure we always keep your data safe, only for as long as is needed and that it will only ever be used for the purposes for which we collect it. This policy details our promises to you and your rights in regard to your personal data. If you do not agree to this policy please do not use our services.

1. Who are we?
2. What data will we collect?
3. How will we use your data?
4. How long will we keep your data?
5. Who will we share your data with?
6. Cookie policy
7. Your rights
8. Getting in contact

1. Who are we?
Carlisle United Supporters' Club London Branch, henceforth referred to as 'we', 'us' or 'the Branch', is a not-for-profit membership organisation established in 1974. The organisation is run by a team of six voluntary committee members elected annually at the Annual General Meeting by members of the organisation. To aid in fulfilment of membership services the committee also appoints Branch Officers at its discretion.

The organisation has no registered address with all administration taking place at the home locations of Committee and Officers.

2. What data will we collect?
We will never collect more data than is necessary for the purpose for which you have provided it. Any data that is unnecessary for the purpose for which we have obtained it will be deleted.

We will collect your data in a number of ways. In the majority of cases this will be when you provide it to us directly. We may also collect your data when you use our website or when you give third parties, including social networks, permission to share your data with us. We may also obtain data from third parties such as internet searches when we have a legitimate interest in obtaining and processing said data.

The Branch's online payments platform is through PayPal who specialise in secure online payment processing. They pass some personal information to us to aid processing of the product or service you have made payment for but we will never receive your card information.

3. How will we use your data?
We will only ever use your data for the purpose, or purposes, for which you have provided it. In the majority of these instances this will be because you are a member of the Branch for purposes of delivering your membership benefits. There are a number of different legal bases under which we are able to process your personal data. We may process your personal data because we have a legal obligation to do so, because it is necessary for performance of a contract - such as membership of the Branch and delivery of associated membership benefits - because you have consented to it, or because we have a legitimate interest to do so that does not harm any of your rights.

The virtual Hit The Bar! email newsletter will be sent to all members as a benefit of your membership unless you opt-out of receiving it. You will be presented with the opportunity to opt-out on every virtual Hit The Bar! newsletter you receive. In line with delivering your membership benefits we may also distribute email newsletters on subjects we believe may be of interest to you or you have expressed an interest in, such as away travel, social events and the Branch's football team. You can control your communication preferences at any time through your account on the Membermojo platform.

Your personal data will be processed by Committee or Officers of the Branch who have received guidance on data protection and are subject to ongoing monitoring and evaluation in their processing of personal data by our Data Protection Lead. Through our online Membermojo membership management platform we by default disclose your name and postcode sector to fellow members of the Branch. No other personal data will ever be shared with other members of the organisation without your consent and you can remove your name and postcode sector from display on the membership list within your preferences in Membermojo.

Your personal data will be stored securely on the Membermojo platform, Google Drive and computer systems and/or on paper records held by Committee and Officers of the Branch. We take all reasonable steps to prevent accidental or unlawful destruction, loss, alteration or unauthorised disclosure of, or access to, your data.

4. How long will we keep your data?
We will never retain your data for longer than is necessary for the purpose for which it has been provided.

In some instances we are required to hold information for set periods of time to meet statutory requirements.

If you withdraw consent or request not to be contacted by us, we may still hold limited personal data to ensure we can honour your request, unless you request to be forgotten completely.

Some examples of our data retention periods include:
  • Membership of the Branch - up to one year following lapse of membership (longer for archival purposes only).
  • Order of merchandise - up to one month following despatch or in-person delivery (longer for archival purposes only).

5. Who will we share your data with?
If you pay to receive a hard copy of Hit The Bar! mailed to you as part of your membership then your name and postal address will be shared with our trusted print suppliers Blueprint to fulfilment.

If you join the Branch's 40 Club and wish to claim a prize provided by a third party, such as Carlisle United AFC 1921 Limited, then your name and email address will be shared with this third party for delivery of your benefit.

These procedures are carried out in accordance with guidance from the UK Information Commissioner's Office.

Other than in these instances we will never share your data with any third parties unless we are legally required to do so or receive your consent to do so either at point of data collection or subsequently.

6. Cookie policy
The only cookies used on the Branch website are third-party cookies, which are placed for analytics purposes only. We use Google Analytics to track visitors to the Branch website to better understand how visitors are using the website and to make improvements to the service. The data collected can include, but is not limited to, pages visited, the amount of time spent on a page, activity on a page and the type of device used to access the website.

In certain instances the Branch website includes content provided by third parties, such as embedded YouTube videos, which also use cookies.

You can disable cookies at any time within your browser settings, however doing so may limit certain features of the Branch website. If you do not change your browser settings and continue to use the Branch website we will infer that you have consented to us using cookies for the purposes set out above.

7. Your rights
When you provide us with your personal data you have a number of rights:
  • To know what data we hold on you, why we hold it and how long we will hold it for (the right to be informed). This information is contained within this privacy policy.
  • To see a copy of the data we hold on you (the right of access). We will provide this to you within one month of your request. If you would like to see a copy of your data, please contact us for a 'subject access request form'.
  • To correct the data we hold on you if it is incorrect (the right to rectification).
  • To ask us to remove all personal data we hold about you (the right to erasure).
  • To ask us to stop using your personal data for a specific activity or for all activities (the right to restrict processing).
  • To receive a copy of your data and reuse for your own purposes (the right to data portability).
  • To object to us using your personal data for direct marketing purposes (the right to object).
  • To be informed about and refuse to be subject to automated profiling or decision marketing (the right to review automated decision making/profiling).

8. Getting in contact
If you wish to discuss anything contained within our privacy policy, find out more about our data protection policies, correct information we hold about you or request a copy of your personal data, you can get in contact with us by emailing

Alternatively, you can write to our Data Protection Lead at:
Data Protection Lead,
Carlisle United Supporters' Club London Branch,
Park House,
191 Stafford Road,

We will aim to respond to your enquiry as soon as possible and always within the statutory requirement of one month of receipt.

If you are not satisfied with the response you receive from us or believe we are processing your personal data unlawfully you can complain to the Information Commissioner's Office.

This policy is kept under regular review and was last updated in May 2018.