PRIVACY POLICY
Last updated: 09/10/2026
1. Who we are
Away Days is a football matchday planning service operated in the United Kingdom by Anoop Nandra. It is not operated through a limited company. Anoop Nandra is the data controller responsible for deciding how and why personal information is used.
Contact: anoop@awaydays.com
This policy covers awaydaysapp.com and the Away Days mobile app. The service is intended for UK users aged 13 and over.
2. What we collect and why
Waitlist: The Flamingo plugin stores your first name, last name, email address and IP address in our WordPress database. We use your signup details to manage the waitlist and send the Away Days development, launch or early-access emails you agreed to receive.
Contact enquiries: Information entered in the website contact form is emailed to anoop@awaydays.com, accessed through Outlook. Anoop reviews and responds to the message.
App suggestions: You can submit pub or matchday information without providing a name, email address or account details. Submissions go to our admin portal, which only the Away Days team can access. We review them and may add approved factual information to the app. Please avoid including personal details about yourself or others. We do not normally publish personal information included in a suggestion.
Website analytics: With your consent, we use Google Analytics to understand website usage and improve the website. It measures page views, visitors, sessions and interactions, together with device/browser information, approximate location and cookies or online identifiers where used. Approximate location is derived from IP addresses; this is not precise GPS location. Google states that Analytics does not log or store individual UK visitors’ IP addresses after deriving location. This does not describe separate hosting logs.
Flutter app: The app has no accounts, does not request your name, email address or phone number, does not use third-party analytics or advertising SDKs, and does not access or collect location. Personal information could still be included voluntarily in suggestion text. Any identifying infrastructure logs must be described separately.
Technical records: Hostinger hosts our website and provides access logs and PHP error logs for monitoring and troubleshooting. Access/security records may include IP addresses, timestamps, URLs and browser details; PHP error logs record technical errors as they occur. We do not use a dedicated website crash-monitoring service.
3. Our lawful bases
We rely on consent for the waitlist email updates you agreed to receive and for Google Analytics processing. You can withdraw consent at any time; this does not affect processing lawfully carried out beforehand.
We rely on legitimate interests to respond to enquiries, review suggestions containing personal information, operate a secure service and protect legal rights where necessary. These interests are balanced against your rights and interests, including children’s interests. We rely on legal obligation where processing is required by applicable law.
Signing up to the waitlist, contacting us and sending suggestions are optional. Without an email address we cannot send waitlist updates; without contact details we may be unable to reply to an enquiry. Accepting the T&Cs does not give marketing or tracking consent
4. Cookies and your choices
We use CookieYes to manage website cookie preferences. The cookie “cookieyes-consent” remembers your choices for approximately one year.
Necessary cookies remain enabled. Non-essential Analytics, Performance and Advertisement categories are blocked until consent. Selecting “Reject All” disables non-essential categories; developer testing found no Google Analytics, Google Tag Manager or related tracking requests after rejection. Category labels do not mean all those categories contain active cookies or that we display advertising.
You can change preferences and withdraw consent using the website’s cookie controls.
5. Who receives information and where
Hostinger hosts our WordPress website and its database. Waitlist records are stored in that database using the Flamingo plugin. Contact messages are handled through our email service. App suggestions are held in Supabase, with the app database located in the UK. Google provides website analytics, and CookieYes manages cookie preferences. Hosting, email and other technical providers receive information needed to supply their services.
We do not sell personal information. Where providers process it on our behalf, we require appropriate contractual protections. We may disclose information where legally required or where necessary and lawful to protect rights or investigate misuse.
Hostinger operates international infrastructure, and processing locations depend on the service and account configuration.
6. Retention
Waitlist: We delete the Flamingo waitlist records, including names, emails and IP addresses, within six months after the app is released. You can unsubscribe sooner using an email unsubscribe link or by contacting us. We do not automatically transfer subscribers to unrelated marketing. A minimal suppression record may be kept while necessary to honour your opt-out, separately from the active list.
Contact emails: Deleted once reviewed and actioned.
Suggestions: Original portal submissions are deleted after review. Approved non-personal facts may remain in the app while useful. Personal details inadvertently included are deleted with the submission, unless law requires retention.
Google Analytics: Our GA4 retention settings are 14 months for user-level data and 2 months for other event-level data. Google states that key-event data follows the user-level period and these settings do not govern standard aggregated reports.
Hostinger logs: Access and PHP error logs are maintained for monitoring and diagnostics. [Insert the account’s actual retention/deletion or rotation rules.]
Backups: Hostinger provides website/database backups according to the hosting plan. Deleted records can remain in backup or recovery copies until those copies expire.
Information required for a legal obligation is retained only as needed for that obligation.
7. Security and children
We take appropriate technical and organisational measures to protect information and restrict access to people and providers who need it. No online service guarantees absolute security.
Although the app does not require personal details or accounts, under-18s may supply information through website forms or generate website analytics information. We take children’s privacy and best interests into account and apply relevant UK data protection requirements
8. Your rights and complaints
Your right to object: You have an absolute right to object to direct marketing, and we stop it if you object. Where we rely on legitimate interests, you can object on grounds relating to your situation. We stop unless an applicable legal ground permits continuation, and explain our decision.
Contact anoop@awaydays.com for requests or complaints. We acknowledge privacy complaints within 30 days and investigate and respond without undue delay.
You can also complain to the Information Commissioner’s Office:
https://ico.org.uk/make-a-complaint/ or 0303 123 1113
9. External links and updates
We update this policy when our processing or requirements change and provide additional notice where required. A policy update does not replace obtaining new consent where needed. The latest version is available at
https://awaydaysapp.com/privacy-policy.
Contact: Anoop Nandra — anoop@awaydays.com