Last updated: 2 June 2026 · Version privacy-clubsite-colchester-utd-r1
1. About this notice
This notice supplements the Colchester United Privacy Policy. It explains the additional personal data used by the Colchester United Club Site at https://www.cu-fc.com, including personal data collected through forms and enquiries submitted through the Club Site.
Your account, your identity, your marketing preferences, and how you exercise your data-protection rights are all governed by the main Privacy Policy. Please read that policy as well — it is the authoritative document for everything about your Colchester United account.
Colchester United FC is the Data Controller for the personal data described in this notice. HotLizard Limited provides and operates the Club Site on behalf of Colchester United as part of the digital services platform.
2. Additional data we collect for the Club Site
In addition to the account information described in the main Privacy Policy, the Club Site collects and uses the following additional information where needed.
| Data |
When collected |
Why |
| Enquiry and contact details, such as your name, email address, telephone number and organisation where relevant |
When you submit a Club Site form or enquiry |
To respond to your enquiry and route it to the correct Colchester United team |
| Details of your enquiry or application |
When you include information in a form, message or application |
To understand and respond to your request, including venue hire, commercial, hospitality, general enquiries or community event applications, and to route your enquiry to the relevant Colchester United team or, where applicable, the Colchester United Community Foundation |
| Event or venue hire details |
When you submit a venue hire or community event |
To assess and manage your request |
| Streaming-related limited account details |
When you choose to access or purchase the Streaming Service |
To allow HotLizard to identify you and provide access to the Streaming Service |
| Special category personal data or other sensitive information that you choose to provide through a Club Site form |
If you choose to include it when using a form on the Club Site |
To deal with the specific enquiry or request for which you provided it. |
| Marketing email suppression record |
If you withdraw consent, object to marketing or close your account |
To make sure we do not contact you where you have asked us not to. |
If information you provide through a Club Site form includes health information or other sensitive information, we use it only where reasonably necessary to deal with your request or submission. We limit access to this information to those who need it for that purpose and protect it in line with UK data protection law. Please do not include sensitive information in a Club Site form unless it is necessary for your request or submission.
If you submit a form intended for the Colchester United Community Foundation, Colchester United FC will share the information you provide with the Colchester United Community Foundation so they can respond. The Colchester United Community Foundation is an independent data controller for the personal data it receives.
3. Legal basis for this additional processing
We rely on the following lawful bases for the additional Club Site processing described in this notice:
- Contract — where processing is needed to respond to a request or provide a service you have asked about, such as venue hire or event-related services.
- Legitimate interests — to respond to and manage enquiries, administer the Club Site, route requests to the correct team, maintain appropriate records, protect the Club Site from misuse and send relevant service-related communications where permitted by law.
- Consent — for any general marketing that goes beyond the Club Site service — for example the club newsletter, cross-product promotions and partner offers — captured and managed on your Colchester United account at https://colchesterunited.solelysecured.com.
- Legal obligation — where we need to keep records or disclose information to comply with the law.
Where your enquiry includes special category personal data or other sensitive information, we will process it only where permitted under UK data protection law.
When you submit an enquiry or request through the Club Site, we may send you service-related communications connected with that enquiry or request. These communications are used to respond to you and administer the service you have asked about.
If we send marketing about similar Colchester United products or services, we will do so only where permitted by electronic marketing rules, including where the “soft opt-in” applies, or where you have given consent. You can object to marketing at any time by using the unsubscribe link in the message or by updating your communication preferences through your Colchester United account.
4. How this site keeps in step with your Colchester United account
When you sign in to the Club Site, it receives the account information it needs to identify you and provide the service, such as your name, email address and any relevant preferences or details needed for the feature you use.
Your core account details are managed through your Colchester United account and are kept consistent across participating Colchester United digital services. The Club Site does not hold your password or multi-factor authentication secret.
5. How long we keep Club Site data
| Data |
Retention |
| General Club Site enquiries |
Kept for as long as needed to respond to and manage the enquiry, then deleted or anonymised when no longer needed |
| Commercial, venue hire, hospitality or community enquiries/applications |
Kept for as long as needed to assess, manage and follow up on the enquiry or application, and for any period needed for legal, contractual, record-keeping or dispute-resolution purposes |
| Special category personal data or other sensitive information voluntarily provided through Club Site forms |
Kept only for as long as necessary to deal with the relevant enquiry or request and then deleted or anonymised where appropriate, unless we are required to retain it by law. |
| Marketing email suppression record |
Retained indefinitely as proof of suppression and to make sure we do not contact you where you have asked us not to. |
We may keep personal data for longer where required by law, needed to resolve disputes, prevent misuse, or establish, exercise or defend legal claims. Where we no longer need personal data, we delete it or anonymise it.
6. What happens when you ask us to delete your account
When you request deletion of your Colchester United account, the 14-day grace period described in the main Colchester United Privacy Policy applies.
If you do not cancel the deletion request during that period, we delete or anonymise personal data linked to your Colchester United account in the Club Site, except where limited information must be retained for legal, operational, security, suppression or dispute-resolution purposes.
Club Site form submissions and enquiries that are not linked to your Colchester United account will be handled in line with the retention periods in Section §5.
We keep:
- records that must be retained for legal, regulatory, audit, operational or dispute-resolution reasons, with personal data removed or anonymised where possible;
- a record that the account has been anonymised, for audit purposes; and
- the marketing email suppression record.
7. Streaming Service
The Club Site will include access to a streaming service provided by HotLizard. The Streaming Service is not currently available but will be introduced through the Club Site in the near future.
If you choose to purchase or use the Streaming Service, HotLizard acts as an independent controller for the personal data it uses to provide and administer that service. This is separate from HotLizard’s usual role as processor for Colchester United digital services.
Colchester United may share limited Colchester United account information with HotLizard, such as your user ID, display name and email address, so that HotLizard can identify you and provide access to the Streaming Service.
HotLizard will also collect and use additional information during the streaming purchase and access process, including purchase details, streaming entitlements, credits, payment reconciliation information, country/IP-derived access information, refund or chargeback information, and related administration records.
Before the Streaming Service becomes available, HotLizard will make a Streaming Privacy Notice available explaining how HotLizard uses personal data for the Streaming Service, including its lawful bases, retention periods, data sharing and your rights. Please read that notice before purchasing or using the Streaming Service.
8. Cookies and similar technologies
The Club Site uses cookies and similar technologies on the same terms as other Colchester United digital services. Your cookie choices apply across Colchester United digital services. See Section §8 of the main Colchester United Privacy Policy for the categories of cookies and how to change your choices.
9. Your rights and how to contact us
The main Privacy Policy explains in full the rights you have over your personal data and how to exercise them. You can exercise most rights directly from your Colchester United account at https://colchesterunited.solelysecured.com or by using the contact details in Section §1 of the main Privacy Policy.
For questions about the Club Site or a submission you have made through it, please contact us using the relevant contact route provided on the Club Site. For data-protection queries, please use the contact details in Section §1 of the Colchester United Privacy Policy.
For personal data processed by HotLizard as independent controller for the Streaming Service, please see HotLizard’s Streaming Privacy Notice.
10. Complaints
If you are unhappy with how we have handled your personal information, please contact us using the details in Section §1 so we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office. Full contact details are set out in the main Colchester United Privacy Policy.
11. Changes to this notice
We may update this notice from time to time to reflect changes in our practices, our services or the law. If we make material changes we will notify you through the relevant Colchester United digital service, by email, or both. Minor changes are indicated only by an updated "Last updated" date at the top. The notice in force at the time of each previous publication is retained and accessible at https://www.cu-fc.com/privacy/versions
— End of Club Site Privacy Notice —
Last updated: 2 June 2026 · Version: privacy-clubsite-colchester-utd-r1