Colchester United Event Ticketing — Privacy Notice
1. About this notice
This notice supplements the Colchester United Privacy Policy. It explains the additional personal data that is processed specifically by the Colchester United Event Ticketing service at coluboxoffice.com for the purchase, fulfilment and use of tickets, parking and related products.
Your account, your identity, your marketing preferences, and how you exercise your data-protection rights are all governed by the main Privacy Policy. Please read that policy as well — it is the authoritative document for everything about your Colchester United account.
Colchester United FC is the Data Controller for the personal data described in this notice, HotLizard Limited provides and operates the Event Ticketing service on behalf of Colchester United as part of the digital services platform.
2. Additional data we collect for ticketing
In addition to the account information described in the main Privacy Policy, the Ticketing service collects and uses the following additional information where needed.
| Data | When collected | Why |
|---|---|---|
| Ticket-recipient email address | When a ticket is purchased and the recipient email is different from the purchaser’s account email. | To send the ticket or mobile wallet pass to the right person. |
| Vehicle registration number | When you book parking for an event | To allow venue parking access using automatic number-plate recognition (ANPR) system can admit your vehicle. This is stored against the booking, not on your profile. |
| Billing and delivery address; saved-address details | At checkout, or when you save an address for faster checkout | To fulfil your purchase and to comply with payment requirements. |
| Purchase, attendance and entitlement history | When you buy tickets, make bookings, use credits or pledges, or attend events | To manage your purchases, process refunds and produce ticketing and financial reports. |
| Hospitality dietary and allergen information | If you voluntarily provide this in connection with a booking | To help us provide appropriate food and serve you safely. |
| Payment and reconciliation information | When you pay | To reconcile and refund payments. Full card details are processed by the payment provider and are not stored by us. |
| Marketing email suppression record | If you withdraw consent, object to marketing or close your account | To make sure we do not contact you where you have asked us not to. |
Where dietary or allergen information reveals health information or other sensitive information, we use it only for the purpose of managing your booking and helping us provide appropriate food safely. We limit access to this information to those who need it for that purpose and protect it in line with UK data protection law.
3. Legal basis for this additional processing
We rely on the following lawful bases for the additional Ticketing processing described in this notice:
- Contract — processing and fulfil your ticket, parking and related purchases or bookings.
- Legitimate Interests — to protect the integrity of the mobile pass system, carry out anti-abuse checks for parking and access, support ticketing operations and reporting, and send relevant service-related marketing about similar Ticketing products or services where permitted by law.
- Consent — for any general marketing that goes beyond the Event Ticketing service — for example cross-product promotions and partner offers — captured and managed on your Colchester United account at https://colchesterunited.solelysecured.com.
- Legal Obligation — keeping financial and suppression records where required by law.
Where dietary or allergen information reveals health information or other sensitive information, we process it only where you have voluntarily provided it for the specific purpose of managing your booking and helping us provide appropriate food safely
When you buy a ticket or use the Event Ticketing service, we may send you service-related marketing about similar Event Ticketing products or services, such as event reminders, offers or similar updates. We rely on our legitimate interests to send these communications where permitted by electronic marketing rules, including the “soft opt-in” for similar products and services. You can object to these messages at any time by using the unsubscribe link in the message or by updating your communication preferences through your Colchester United account.
Separate general marketing, such as cross-product promotions or partner offers, is sent only where you have given consent. You can withdraw that consent at any time through your Colchester United account. More information is set out in Section10 of the main Colchester United Privacy Policy.
4. How this site keeps in step with your Colchester United account
When you sign in to the Event Ticketing service, it receives the account information it needs to identify you and provide the service, such as your name, email address and any relevant saved address details.
Your core account details are managed through your Colchester United account and are kept consistent across participating Colchester United digital services. The Ticketing service does not hold your password or multi-factor authentication secret.
5. How long we keep ticketing data
| Data | Retention |
|---|---|
| Ticket records containing personal data, such as recipient name, recipient email | Kept for 24 months. After that point the personal-data is anonymised;and financial reconciliation is retained for 7 years. |
| Vehicle registration for (ANPR) parking | 30 days after the event. |
| Mobile wallet pass download log | 90 days. |
| Payment and reconciliation records | 7 years in line with UK financial and tax law. Account-linked personal data is anonymised from these records on account closure; while the financial record is retained. |
| Dietary / allergen information | Deleted after the event. |
| Marketing email suppression record | Retained indefinitely as proof of suppression and to make sure we do not contact you where you have asked us not to. |
6. What happens when you ask us to delete your account
When you request deletion of your Colchester United account, the Event Ticketing service is notified. During the 14-day grace period described in the main Colchester United Privacy Policy, Event Ticketing records linked to your account are marked as pending deletion.
If you do not cancel the deletion request during that period, we anonymise personal data linked to your account in Event Ticketing, except where limited information must be retained for legal, financial, operational, security or suppression purposes.
We keep:
- financial and reconciliation records (with personal data removed where possible) for 7 years, in line with UK financial and tax law.
- a record that the account has been anonymised, for audit purposes; and
- the marketing email suppression record.
7. Venue access and ground operations
Colchester United operates its own venue. Access-control data, such as ticket scans, is used to admit you to the event and support venue access, safety and security.
8. Cookies and similar technologies
The Event Ticketing service uses cookies and similar technologies on the same terms as other Colchester United digital services. Your cookie choices apply across Colchester United digital services. See Section §8 of the main Colchester United Privacy Policy for the categories of cookies and how to change your choices.
9. Your rights and how to contact us
The main Privacy Policy explains in full the rights you have over your personal data and how to exercise them. You can exercise most rights directly from your Colchester United account at https://colchesterunited.solelysecured.com by using the contact details in Section §1 of the main Privacy Policy.
For questions about a Event Ticketing purchase, you can contact the Event Ticketing support team at events@colchesterunited.net. For data-protection queries, please use the contact details in Section §1 of the Colchester United Privacy Policy.
10. Complaints
If you are unhappy with how we have handled your personal information, please contact us using the details in Section §1 so we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office. Full contact details are set out in the main Colchester United Privacy Policy.
11. Changes to this notice
We may update this Privacy Policy from time to time to reflect changes in our practices, our services or the law. If we make material changes we will notify you through the relevant Colchester United digital service, by email, or both. Minor changes are indicated only by an updated "Last updated" date at the top. The policy in force at the time of each previous publication is retained and accessible at https://tickets.colchesterunited.net/privacy/versions.