Legal

Privacy Policy

Last updated 1 October 2026

This policy explains how Winfield & Co handles personal data in two situations: when you use this website or contact us, and when we work with a football club and process data about its supporters on the club’s behalf.

Who we are

Winfield & Co Ltd (“Winfield & Co”, “we”, “us”) is a fan intelligence consultancy for professional football clubs, registered in England & Wales (company no. 17230321). Our registered office is 14 St Andrews Drive, Ilkeston, DE7 5GW. You can reach us at dan@winfieldandco.co.uk.

The data we collect through this website

If you complete the enquiry form, email us or call us, we collect the details you choose to give us:

• Your name
• Your club or organisation
• Your email address
• Your phone number, if you choose to give it
• Anything you write in your message

Our hosting provider also records standard technical information (such as IP address and browser type) in server logs for security and reliability. We do not use advertising or tracking cookies. We use Netlify Analytics to understand how many people visit the site and which pages they view. It works from these server logs, sets no cookies and does not track you across other websites.

How we use it, and our lawful basis

We use the information you send us solely to respond to your enquiry and, if you become a client, to carry out and manage our engagement with you. Our lawful basis is our legitimate interest in responding to people who contact us about our services, and, once we are working together, the performance of our contract with you.

Who we share it with

We do not sell your data or share it for marketing. We use a small number of trusted providers to run our business, who act as our processors under contract:

• Netlify — hosts this website and processes form submissions.
• Our email provider, used to correspond with you.
• Google Fonts — serves the typefaces on this website, and receives your IP address in order to do so. It sets no cookies.

Some providers are based outside the UK. Where personal data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

Fan data: how we handle a club’s supporter data

When we work with a club’s data, we process personal data about that club’s supporters. In this work the club is the data controller and Winfield & Co is the data processor: we act only on the club’s documented instructions, under a written data-processing agreement, and never for our own purposes.

• We agree the scope, purpose and lawful basis with the club before any data is shared.
• We take only the data the work genuinely needs, and we tell the club honestly what the data can and cannot support.
• Fan data is never shared with other clients, never resold, and never used to train products for anyone else.
• We apply appropriate technical and organisational security measures, including access controls and encryption in transit and at rest.
• We return or securely delete the data at the end of the engagement, as agreed with the club.

If you are a supporter of a club and wish to exercise your rights over your data, please contact your club as the controller in the first instance; we will support the club in responding.

How long we keep data

We keep website enquiries only as long as needed to deal with them and to keep a reasonable record of our correspondence, after which they are deleted. Client and fan data is retained only for the period set out in the relevant engagement agreement.

Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to data portability. To make a request, email dan@winfieldandco.co.uk.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.