Privacy Policy

Important Notice

Please read this privacy policy carefully. By using our website and services, you agree to the collection and use of information in accordance with this policy.

Arsenal Football Club Plc ("Arsenal", "we", "us", or "our") is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our services.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website arsenal.com, use our mobile application, attend matches at Emirates Stadium, or engage with our services.

We are registered as a data controller with the Information Commissioner's Office (ICO) under registration number Z5765423.

1. Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when you:

• Create an account or register for membership
• Purchase tickets, merchandise, or other products
• Subscribe to our newsletter or marketing communications
• Enter competitions or participate in promotions
• Contact us with enquiries or feedback
• Apply for employment opportunities
• Attend events at Emirates Stadium

This information may include:

• Identity Data: Name, date of birth, gender, photograph
• Contact Data: Email address, telephone number, postal address
• Financial Data: Payment card details, bank account information
• Transaction Data: Purchase history, ticket records
• Profile Data: Username, preferences, feedback, survey responses
• Marketing Data: Communication preferences

Information Collected Automatically

When you access our website or app, we automatically collect certain information:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, click patterns
• Location Data: General geographic location based on IP address
• Cookie Data: Information stored via cookies and similar technologies

2. How We Use Your Information

We use your personal information for the following purposes:

Service Delivery

• Process ticket purchases and merchandise orders
• Manage your membership account
• Provide customer support and respond to enquiries
• Send transactional communications (order confirmations, delivery updates)

Marketing & Communications

• Send newsletters, match updates, and promotional content (with your consent)
• Personalise content and recommendations
• Conduct surveys and gather feedback
• Administer competitions and promotions

Security & Safety

• Ensure safety and security at Emirates Stadium
• Prevent fraud and unauthorised access
• Comply with legal obligations and stadium regulations
• Enforce our terms and conditions

Analytics & Improvement

• Analyse website usage and improve user experience
• Develop new products, services, and features
• Conduct research and statistical analysis

3. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us:

• Essential Cookies: Enable core functionality like security, network management, and accessibility
• Performance Cookies: Collect anonymous data about how visitors use our website
• Functionality Cookies: Remember your preferences and settings
• Targeting Cookies: Deliver relevant advertisements and track campaign effectiveness

You can manage your cookie preferences through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect website functionality.

For detailed information about the cookies we use, please see our Cookie Policy.

4. How We Share Your Information

We may share your personal information with:

Service Providers

Third-party companies that help us operate our business, including:

• Payment processors and fraud prevention services
• Email and marketing platforms
• IT and hosting providers
• Analytics and advertising partners
• Customer service providers

Football Authorities

We may share information with:

• The Premier League and English Football League
• UEFA for European competitions
• The Football Association
• Other football clubs (for away ticket allocations)

Legal Requirements

We may disclose information when required by law, court order, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure servers and firewalls
• Regular security assessments and penetration testing
• Access controls and authentication procedures
• Staff training on data protection
• Incident response procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to implementing industry best practices.

6. Your Rights

Under data protection law, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the details in Section 11. We will respond within one month. There is no fee for most requests, but we may charge a reasonable fee for manifestly unfounded or excessive requests.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Children's Privacy

We are committed to protecting the privacy of children. Our website is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13 without parental consent.

For Junior Gunners membership and other services aimed at children, we require parental or guardian consent and provide appropriate safeguards.

If you believe we have collected information from a child without appropriate consent, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries outside the UK and European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

• Transfers to countries with adequate data protection laws
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules for transfers within corporate groups
• Certification schemes such as the EU-US Data Privacy Framework

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification (for significant changes)
• Displaying a prominent notice on our website

We encourage you to review this policy periodically to stay informed about how we protect your information.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For general enquiries, please visit our Contact Page or call 020 7619 5003.