Privacy policy.

1. Who we are

The Match House Ltd ("we", "us") is the data controller for personal data collected through this website and through our investor and member communications. We are registered in England and Wales under company number 17089458. Our registered office is 1 Allied Business Centre, Coldharbour Lane, Harpenden, Hertfordshire AL5 4UT. The club is being developed in Basildon, Essex. For anything to do with your personal data, email info@thematchhouse.co.uk.

2. What we collect

• When you contact us by email, WhatsApp or text: your name, your contact details and the content of your message.
• When you request the investor pack: your name, email address and telephone number, how you heard about us, and the investor category you confirm you fall into.
• If you go on to invest: identity documents and the results of identity verification, your date of birth, residential address and nationality, the bank account used for your subscription, the agreements you sign, the tax reference details needed for SEIS or EIS compliance statements, and the entries we are required by law to keep in the company's register of members.
• When you register your interest in the club: your name, your email address, your mobile number if you give it, and the parts of the club you are interested in. We use these to tell you about the opening and membership, on the basis of your consent, and you can ask to be removed at any time by replying to any message or emailing info@thematchhouse.co.uk.
• When you visit this website: technical information such as your IP address, browser and device type, the pages you view and the time of your visit, held in our hosting provider's server logs. This site does not use advertising or analytics cookies. See the Cookie policy.
• If you become a member when the club opens: the account, booking, payment and family details needed to run your membership. We will update this policy before the member app launches.

3. Why we use it, and the lawful basis

• To answer your enquiry and send you what you asked for. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in running the company.
• To check that you are eligible to receive information about the investment, and to keep a record of that check. Lawful basis: compliance with the legal rules on financial promotions.
• To verify your identity, process your subscription, issue your shares and share certificate, and submit the SEIS or EIS compliance statement so that you can claim relief. Lawful basis: performance of the investment agreement and our legal obligations under company law and tax law, including anti-fraud and anti-money laundering checks.
• To keep you informed as a shareholder, including statutory communications and updates on the club. Lawful basis: performance of our contract with you and our legitimate interests.
• To keep this website secure and understand how it is used in aggregate. Lawful basis: our legitimate interests.
• Marketing. We only send marketing about the club or future raises with your consent, or where the rules allow us to contact existing customers about similar services. You can opt out at any time by replying to any message or emailing us.

4. Who we share it with

• Service providers who process data on our instructions and under contract: website hosting (Vercel), email and documents (Google Workspace), text and WhatsApp messaging (Twilio), identity verification (Didit), electronic signatures (eSignatures.com), our investor records database (Supabase) and transactional email (Resend). We will update this list if our providers change.
• Our professional advisers, including our accountants, Cubed Consultancy, and our legal advisers.
• An FCA-authorised firm where one is engaged to approve our financial promotions and needs to see records of how they were used.
• HMRC, Companies House and other authorities where the law requires, for example to maintain the register of members and to submit SEIS and EIS compliance statements.
• A buyer or successor if the company or its business is sold or reorganised.

We do not sell personal data.

5. International transfers

Some of our providers process data outside the United Kingdom, for example in the United States or the European Economic Area. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum, together with the providers' own security commitments.

6. How long we keep it

• Enquiries that do not lead to an investment: up to two years from our last contact with you, then deleted.
• Investor pack requests and eligibility records: six years from the date of the request, so that we can show the rules were followed.
• Investor records: for as long as you hold shares and then for at least six years, which is the period company law and tax law require. Register of members entries are kept for as long as company law requires.
• Website server logs: held by our hosting provider for a short period for security purposes.

7. Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have inaccurate data corrected, to ask us to delete data we no longer need, to restrict or object to processing (including direct marketing), to receive data you have given us in a portable format, and to withdraw consent at any time where consent is the basis we rely on. To exercise any of these rights, email info@thematchhouse.co.uk. We will respond within one month and may need to confirm your identity first.

8. Security

Personal data is held on systems protected by encryption in transit and at rest, access controls and activity logs. This website is served over HTTPS. No transmission over the internet is completely secure, but we take reasonable steps to protect the information you send us.

9. Children

This website and the investment opportunity are intended for adults aged 18 and over. We do not knowingly collect data from children through this site.

10. Other websites

This site links to third-party websites, including the sources for the figures we quote, and to WhatsApp. This policy does not cover those services. Please read their own policies before giving them personal data.

11. Changes to this policy

We may update this policy from time to time. Changes will be published on this page with a new date.

12. Complaints

If you are unhappy with how we have handled your data, please contact us first so that we can put things right. You also have the right to complain to the Information Commissioner's Office: