1. Who operates the site
AFCB.uk is operated as a personal, independent and non-commercial supporter project based in United Kingdom. It is not owned, operated, sponsored, approved or endorsed by AFC Bournemouth.
- Operator
- AFCB.uk
- Privacy contact
- info@afcb.uk
- Website
- AFCB.uk
2. Scope of this notice
This notice applies to public visits to AFCB.uk and to restricted administration access used to operate the website. It does not apply to external websites reached through links from AFCB.uk; those services publish their own privacy information.
The public website does not provide supporter accounts, customer accounts, public profiles, comments, uploads, paid memberships, ticket sales, newsletters or direct marketing subscriptions.
3. Information processed
Public visits
Web servers and application security systems may process technical request data, including an IP address, request date and time, requested URL, browser or device information, response status, error information and indicators of abusive or malicious activity.
Anonymous page statistics
AFCB.uk keeps privacy-friendly daily page-view totals so the operator can understand which public sections are useful. Each stored row contains only a calendar date, a named application route and an aggregate number of page views. This feature does not store IP addresses, cookies, referrers, full user-agent strings, device fingerprints or per-visitor identifiers, and it does not claim to measure unique visitors.
Administration, API, login, health-check, sitemap and static-asset requests are excluded. Recognised automated crawlers are detected from the request user-agent for the immediate exclusion decision, but the user-agent value itself is not retained by the statistics feature.
Restricted administration
The administration system may process an authorised operator's name and email address, password hash, encrypted multi-factor authentication information, recovery codes, session information, login attempts, security events and administrative activity required to manage the website.
Information AFCB.uk does not intentionally collect
- payment-card or bank information;
- public supporter or customer account profiles;
- advertising identifiers or cross-site marketing profiles;
- newsletter or promotional mailing lists;
- special-category information submitted through a public form.
4. Purposes and lawful bases
Technical and administrative information is used to:
- deliver pages and requested website functions;
- authenticate and protect restricted administration access;
- prevent abuse, investigate errors and respond to security incidents;
- maintain, troubleshoot and improve the reliability of the project;
- comply with a legal obligation or respond to a valid legal request where required.
Where UK data-protection law applies, the main lawful basis is the operator's legitimate interest in running and securing a small informational website in a way that has a limited effect on visitors' privacy. Legal obligation may apply where information must be retained or disclosed by law. Consent will be requested before any future processing that specifically requires consent.
5. Cookies and browser storage
Security and session cookies
Laravel session and CSRF/XSRF cookies may be used to maintain secure requests and restricted administration sessions. Session cookies are encrypted where configured, marked HttpOnly where applicable and are not used for advertising.
Local preferences
Browser local storage is used to remember choices such as theme, text size and selected map layers. These values remain on the user's device until they are changed or removed through the website or browser controls.
AFCB.uk does not intentionally use advertising cookies, cross-site tracking pixels or third-party analytics cookies. This notice will be updated before materially different storage or tracking technology is introduced.
6. External services and content
Some pages load OpenStreetMap map tiles directly in the visitor's browser. The browser may therefore send technical request information, including the visitor's IP address, to the map-tile provider.
News images, publisher logos and video thumbnails may be loaded from their original or approved external hosts. When this happens, the visitor's browser connects to that host and the host may receive ordinary request information under its own privacy terms.
Fixtures, weather, transport and other supporter information may be obtained by the AFCB.uk server from external data providers. These server-to-server requests are not intended to include a public visitor's identity. Following an external link transfers the visitor to a separate service controlled by its own operator.
7. Retention
- Application logs are normally rotated and retained for up to 30 days, unless a longer period is reasonably required to investigate a specific security incident or comply with law.
- Hosting, web-server, firewall or infrastructure logs may follow a separate retention schedule configured by the relevant hosting or infrastructure service.
- Anonymous daily page-view aggregates may be retained as historical operational totals. They contain only the date, route name and count and can be removed by the operator without affecting public content.
- Administrator account and authentication information is retained while the account is required and is removed or disabled when it is no longer needed.
- Local preference values remain in the visitor's browser until changed or cleared.
9. Security
Reasonable technical and organisational safeguards are used, including restricted administration access, password hashing, multi-factor authentication, encrypted secrets, secure-session controls, rate limiting, security headers and activity logging. No website or internet transmission can guarantee absolute security.
Suspected security vulnerabilities should be reported privately to info@afcb.uk and should not be exploited or publicly disclosed before there has been a reasonable opportunity to investigate.
10. Your rights
Depending on the circumstances and applicable law, individuals may have rights to request access to personal information, correction, erasure, restriction, objection or data portability. Some rights are limited and may not apply to every type of processing.
Requests should be sent to info@afcb.uk. Enough information may be requested to verify identity and locate the relevant data. Individuals may also complain to the UK Information Commissioner's Office.
11. Changes and contact
This notice may be updated when the project's features, service providers, storage technology or legal obligations change. The current version and update date will be published on this page.
Questions about this notice or the handling of personal information can be sent to info@afcb.uk.