Privacy policy

1. Who we are

This privacy policy explains how Birmingham City Football Club plc ("the Club", "we") and Sports Illustrated Tickets, acting as the Club's authorised ticketing partner and joint controller for the purpose of fulfilling hospitality bookings, collect, use and protect your personal data when you use bcfc.sitickets.co.uk to book matchday hospitality. It applies to guests, account holders and website visitors.

2. What we collect

We collect the information you give us directly, and a small amount of information collected automatically:

• Account & booking data: name, email address, and order/booking history.
• Guest data: the name of every guest on a booking, plus any dietary requirements, allergies or access needs you tell us about. Dietary and allergy information is "special category data" under UK GDPR and is only collected with your explicit consent at checkout.
• Payment data: card payments are processed by Shopify Payments; we do not see or store full card numbers ourselves.
• Technical data: IP address, browser/device type and pages visited, collected automatically via cookies and similar technologies (see Section 6).

3. How we use it

We process your data on the following legal bases under UK GDPR:

• Contract — to take your booking, issue e-tickets, and provide the hospitality package you've paid for.
• Legal obligation — to meet health and safety, food-safety and allergen-disclosure duties.
• Legitimate interests — to prevent fraud, keep the site secure, and improve our service, in a way that does not override your rights.
• Consent — for dietary/allergy data (a special category of data under Article 9 UK GDPR) and for optional marketing communications and non-essential cookies, both of which you can withdraw at any time.

4. How long we keep it

Dietary and allergy data is deleted no later than 30 days after the relevant match. Account and order data is kept for as long as you hold an account, and for a further period afterwards as required to meet our accounting and tax obligations. If you ask us to delete your account, we will do so unless we're required to keep specific records by law.

5. Who we share it with

We share personal data only where necessary to fulfil your booking or meet a legal duty:

• Sports Illustrated Tickets — our ticketing partner, who processes bookings alongside the Club.
• Shopify — our e-commerce and payments platform, which processes orders and payments on our behalf.
• Catering and hospitality staff — who receive guest names and dietary information solely to prepare and serve your booking.
• Regulators or law enforcement — where we are legally required to disclose information.

We do not sell your personal data, and we do not share dietary or allergy data with any third party beyond what's needed to prepare your food safely.

6. Cookies

We use strictly necessary cookies to run checkout, keep you signed in and remember your bag — these don't require consent and can't be switched off, in line with the Privacy and Electronic Communications Regulations (PECR). With your consent, we also use optional cookies to understand how the site is used, so we can improve it; these are only set if you choose "Accept All" on the cookie banner, and you can change your choice at any time by clearing your browser's site data and reloading the page.

7. Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data erased in certain circumstances; restrict or object to certain processing; and receive your data in a portable format. To exercise any of these rights, contact the Hospitality Team using the details below; we'll respond within one month.

8. Contact & complaints

Questions about this policy, or requests relating to your data, can be sent to bcfc@sportsillustratedtickets.com. If you're unhappy with how we've handled your data, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.