Privacy Policy

01About this Privacy Policy

This Privacy Policy describes how Matchday Affairs Pte Ltd ("Matchday Affairs", "we", "us", "our"), a company incorporated in Singapore (UEN 201927910K), with registered address at 511 Guillemard Road, #02-10, Grandlink Square, Singapore 399849, collects, uses, discloses, transfers and protects your personal data.

This Policy applies whenever you interact with us, including when you:

• Browse or make an enquiry through matchdayaffairs.com or builder.matchdayaffairs.com;
• Message us on WhatsApp (+65 8803 1136 or any other WhatsApp number we operate);
• Engage with us on social media (Instagram, Facebook, TikTok, YouTube) or via email;
• Book a travel package, match ticket or any matchday-related service;
• Participate in our promotions, contests, surveys or fan engagement campaigns; or
• Provide your details through any of our partners, suppliers or third-party booking funnels.

We comply with the Singapore Personal Data Protection Act 2012 ("PDPA") and, where applicable, the data protection rules of the platforms we use (including Meta Platforms, Inc. for WhatsApp, Instagram and Facebook).

02Personal Data We Collect

We collect personal data that you provide voluntarily, that is generated automatically when you interact with our digital services, or that we receive from authorised third parties. The categories include:

2a · Identity & Contact Information

• Full name, salutation, date of birth, gender, nationality;
• Passport number and passport expiry date (only when required for travel bookings);
• Email address, mobile number, WhatsApp number;
• Mailing or billing address;
• Emergency contact details (where you choose to provide them).

2b · Booking & Travel Information

• Club preference, fixture choice, travel dates, group size and composition;
• Flight, hotel and transfer preferences;
• Dietary requirements, accessibility requirements and other special requests;
• Travel insurance details (where shared with us).

2c · Payment Information

• Transaction records, invoice numbers, refund records;
• Last 4 digits of card or partial bank reference for reconciliation;
• We do not store full card numbers — payment processing is handled by PCI-DSS compliant providers (e.g. Stripe).

2d · Conversation & Engagement Data

• Messages you exchange with us on WhatsApp, email, web chat or social media;
• Voice notes, photos or documents you share with us during a booking;
• Survey responses, feedback, reviews and testimonials;
• Match-day photos and videos (where you consent to be featured — see Section 4).

2e · Technical & Usage Data

• IP address, device type, browser type and version, operating system;
• Pages visited, time spent, clicks, referral source;
• Cookie identifiers, pixel data and analytics IDs (see Section 11).

2f · Data from Third Parties

• Information from our advertising partners (Meta Ads, Google Ads) about leads who clicked on a campaign;
• Referrals from existing customers (with their consent);
• Publicly available information from social media profiles you have made public.

03How We Use Your Personal Data

We use your data only for purposes that are reasonable, lawful, and necessary to deliver and grow our services. Specifically:

04Marketing & Promotions

We use the personal data you share with us to send you marketing communications about Matchday Affairs services, including:

• New EPL fixture releases and limited-availability packages;
• Seasonal promotions, early-bird offers, group discounts and loyalty rewards;
• Football tourism content, matchday guides, fan stories and supplier highlights;
• Surveys, contests and fan engagement campaigns;
• WhatsApp broadcasts (only to numbers that have given consent).

4a · Channels we may use

Marketing may reach you through email, WhatsApp, SMS, push notifications, social media (Meta & Google audiences), or in-app banners on our booking builder. You will only receive WhatsApp marketing if your number was provided to us by you or via a Meta-approved opt-in flow.

4b · Match-day media & testimonials

If you join a Matchday Affairs trip, group photos and videos may be taken during the experience. By participating in the trip, you agree that we may use these materials for marketing (website, social media, advertising). If you do not want your image used, you may opt out at any time by notifying our team — see Section 14.

4c · Opting out of marketing

You can withdraw consent for marketing at any time and at no cost. You may:

• Reply STOP to any WhatsApp or SMS marketing message;
• Click the Unsubscribe link in any marketing email;
• Email info@matchdayaffairs.com with the subject "Unsubscribe".

05WhatsApp & Messaging Channels

Matchday Affairs uses WhatsApp Business (operated through Meta Platforms, Inc.) as a primary channel for customer service, booking enquiries and marketing broadcasts. When you message us — or we message you — the following applies:

5a · Data shared with Meta / WhatsApp

• Your phone number, WhatsApp profile name and message content are processed by Meta in line with the WhatsApp Business Policy and Meta's Privacy Policy.
• Meta does not use the content of your business messages for advertising on Meta platforms.
• Meta may use metadata (e.g. message status, timestamps) for service delivery and abuse prevention.

5b · How we handle your WhatsApp data

• Conversations are logged in our internal systems to provide consistent service across our team;
• Some replies may be drafted or routed by AI-assisted tools we operate (always under our control) — your data is not used to train third-party AI models;
• We use approved Message Templates for any business-initiated message outside the 24-hour customer service window, as required by Meta;
• You can ask us to delete your WhatsApp message history with us at any time (see Section 10).

5c · Other messaging channels

The same principles apply to Instagram DM, Facebook Messenger, email and SMS. The underlying platform's own privacy policy also applies to data shared via that platform.

06Sharing With Third Parties

We do not sell your personal data. We share data only with parties who need it to deliver your booking, run our business or comply with the law. These include:

All third parties are subject to confidentiality obligations and may only use your data for the purpose for which we share it.

07International Transfers of Data

Because we operate a global service, your data may be transferred to, processed in, or accessed from countries outside Singapore — including the United Kingdom, the European Union, the United States and other jurisdictions where our suppliers and platform providers are located.

When we transfer personal data outside Singapore, we take reasonable steps to ensure the recipient provides a standard of protection comparable to the PDPA, including by entering into contractual safeguards with our processors.

08How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purposes set out in this Policy, or as required by law. Typical retention periods are:

When data is no longer required, we will securely delete or anonymise it.

09How We Protect Your Data

We use a combination of technical, administrative and physical safeguards to protect personal data, including:

• Encryption in transit (HTTPS/TLS) on our websites, booking builder and APIs;
• Encryption at rest for sensitive databases and credential storage (e.g. 1Password);
• Role-based access controls — only authorised Matchday Affairs personnel access your data;
• Two-factor authentication for our team accounts and admin systems;
• Vendor due diligence on our hosting, payment and AI service providers;
• Regular review of permissions, logs and security incidents.

While we work hard to protect your data, no system can guarantee absolute security. If we ever become aware of a data breach that may pose significant harm, we will notify affected individuals and the Personal Data Protection Commission in line with PDPA requirements.

10Your Rights Under the PDPA

Under the Singapore Personal Data Protection Act, you have the following rights:

• Access — request a copy of the personal data we hold about you and how it has been used or disclosed in the past year;
• Correction — request correction of inaccurate or incomplete personal data;
• Withdrawal of consent — withdraw your consent for us to collect, use or disclose your personal data (subject to legal/contractual restrictions);
• Marketing opt-out — unsubscribe from any marketing communications at any time (see Section 4);
• Deletion — request deletion of your personal data where it is no longer required for a legitimate purpose;
• Data portability — request that we transmit certain data to another organisation (where technically feasible).

To exercise any of these rights, please contact our Data Protection Officer (see Section 14). We will respond to your request within 30 days. We may need to verify your identity before fulfilling certain requests, and certain limited exemptions under the PDPA may apply.

11Cookies, Pixels & Tracking Technologies

Our websites use cookies and similar technologies to make the site work, remember your preferences, measure traffic and deliver advertising. The categories include:

• Strictly necessary — required for the booking builder, login and security;
• Analytics — e.g. Google Analytics, used to understand how visitors use our site;
• Marketing & remarketing — e.g. Meta Pixel, Google Ads tags, TikTok Pixel, used to show you relevant ads on other platforms;
• Functional — remembering preferences such as language or saved drafts.

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

12Children's Data

Our services are intended for adults aged 18 and above. We do not knowingly market to children. Where a booking includes a minor (e.g. a family travel package), the personal data of that minor is provided by, and processed under the responsibility of, the adult making the booking. If you believe we have inadvertently collected data from a minor without parental consent, please contact us so we can delete it.

13Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes in our services, technology, legal requirements or business practice. The "Last updated" date at the top of this Policy shows when it was most recently revised. We encourage you to review this page periodically. Where changes are material, we will notify you through our website, WhatsApp or email.

14Contact Us & Data Protection Officer

If you have questions, requests or complaints about this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

If we are unable to resolve your concern, you may lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) at www.pdpc.gov.sg.