Privacy Policy

At Matchday, protecting your privacy and ensuring the security of your personal data is a fundamental principle of our business. This Privacy Policy details how we collect, process, and protect your information in full compliance with the General Data Protection Regulation (GDPR) and applicable international laws.

Data Protection Officer (DPO) Contact: If you have any privacy-related inquiries, please reach out securely at team@matchday-shop.com.

1. Information We Collect

To provide our services, process your orders, and optimize your experience, we collect specific categories of personal data:

Category	Data Collected	Purpose
Identity & Contact	Full name, billing/shipping address, email, phone number.	Order fulfillment, shipping, and direct customer support.
Financial Data	Transaction details, purchase history. (We do not store full credit card numbers).	Payment processing and fraud prevention.
Technical & Usage	IP address, browser type, device info, browsing behavior on our store.	Service improvement, security monitoring, and localized experiences.

2. Data Security & Shared Liability

We deploy robust technical and organizational measures to safeguard your data against unauthorized access. However, digital security is a shared responsibility.

Our Commitment: We utilize encrypted protocols (SSL/TLS) for data transmission and partner exclusively with PCI-DSS compliant payment gateways.
Your Responsibility: You are responsible for maintaining the confidentiality of your account credentials. Matchday is not liable for data breaches resulting from user negligence, such as sharing passwords or accessing our store via unsecured public Wi-Fi networks.

3. Third-Party Sharing & International Transfers

We do not sell your personal data. We strictly share it with trusted third parties necessary for our operations (e.g., Shopify for hosting, Stripe/PayPal for payments, logistics carriers).

Third-Party Autonomy: Data processed by our payment gateways and platforms like Meta/Google is governed by their respective privacy policies. Matchday assumes no liability for incidents originating within the independent infrastructure of these third-party processors.

By using our website, you expressly consent to the transfer and processing of your data in jurisdictions outside your residence (e.g., EU data processed in North American servers), always under adequate GDPR safeguards.

4. Your Rights & Data Retention

Under the GDPR and applicable laws, you hold the right to Access, Rectify, Restrict Processing, and request the Erasure of your personal data.

Retention Exemption: While we honor erasure requests, Matchday retains the absolute right to preserve specific transactional data for longer periods if strictly necessary to comply with European tax, legal, or auditing obligations.

5. Age Restrictions

Our website and products are not intended for individuals under 16 years of age. We do not knowingly collect personal data from minors. If we discover that data from a minor has been collected without verifiable parental consent, it will be immediately and permanently deleted.

6. Policy Updates & Acceptance

Matchday reserves the right to modify this Privacy Policy at any time to reflect operational or legal shifts. Continued use of our website following any updates constitutes your tacit acceptance of the revised terms.