Privacy Policy

1. Who we are

Red Robins (redrobins.co.uk) is operated independently of, and is not affiliated with, endorsed by or connected to Charlton Athletic Football Club. For anything covered by this policy, contact us at hello@redrobins.co.uk.

2. What we collect

• Account data: name, email address, password (stored as a salted hash, we never see or store it in plain text).
• Profile data you choose to add: avatar, banner image, bio.
• Content you post: feed posts, comments, match-day chat, news discussion, score predictions, photos you upload, and private messages you send to other members.
• Photos: if you upload a match-day or fan photo, it may show other identifiable people who were present at a public event, see section 7.
• Support requests: anything you tell us via the helpdesk.
• Technical data: standard web server logs (IP address, browser type, pages visited, timestamps) kept briefly for security and abuse prevention, and login session cookies (see section 4).

3. Why we use it, and our lawful basis

• Running your account and the community features (feed, messaging, predictions, photos): necessary to provide the service you signed up for.
• Keeping the site safe (spam/bot prevention via Cloudflare Turnstile at registration, moderation, banning abusive accounts): our legitimate interest in running a functioning, safe community.
• Emailing you about verification, password resets, and replies to helpdesk tickets: necessary to provide the service.
• We do not use your data for advertising, and we do not sell or rent it to anyone.

4. Cookies

We use only strictly necessary cookies: one to keep you signed in, and one for CSRF protection (stopping other sites from forging requests as you). Both are essential to the site working and don't require your consent under UK cookie law (PECR), but we're telling you anyway. We do not use advertising or analytics cookies, and there are no third-party tracking scripts on this site.

5. Who we share data with

We use a small number of service providers to run the site, each acting as a data processor on our instructions, none of them can use your data for their own purposes:

• IONOS: sends our transactional emails (verification, password resets, notifications).
• Cloudflare: processes your IP address momentarily to verify you're not a bot when you register (Turnstile).
• Our hosting provider, who stores the server this site runs on.

We will only disclose your data beyond this if required by law, or to protect the rights, safety or property of Red Robins, our members, or others.

6. How long we keep it

We keep your account data for as long as your account is active. If you delete your account, your profile, posts, and messages are removed from the live site; residual copies may persist briefly in backups (kept for disaster recovery only) before they age out. Server logs are kept for a limited period for security purposes, then discarded.

7. Photos of people

Our Fan Photography gallery lets members share photos taken at matches and other public football events. Every photo is reviewed by an admin before it goes live. If you appear in a photo on this site and would rather it wasn't there, email hello@redrobins.co.uk and we'll remove it. No questions asked, no need to justify it.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct it if it's inaccurate: most of this you can do yourself from your profile settings.
• Erase it: delete your account any time from your profile, or ask us to do it for you.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Complain to the ICO (ico.org.uk) if you think we've got something wrong, though we'd appreciate the chance to sort it out directly first, at hello@redrobins.co.uk.

9. Age

You must be at least 13 years old to register an account. We don't knowingly collect data from children under 13; if we become aware that we have, we'll delete it.

10. Security

The site is served over HTTPS, passwords are hashed (never stored in plain text), and access to member data is restricted. No system is 100% secure, but we take reasonable, proportionate steps to protect your information.

11. Changes to this policy

If we make significant changes, we'll update the date at the top of this page and, where the changes are material, ask existing members to review and confirm them.

12. Contact

Questions about this policy or your data: hello@redrobins.co.uk.