Privacy Policy

A public map of what The Football House keeps: who the controller is, which fields a form can carry, the legal bases under GDPR, how long records stay, who else may see them, and how you can exercise a right. It is written for people who use the site, and for people who land here from search or from Google Ads. The Football House is an independent football match viewing venue at 34 N Rand Rd, Hughes, Boksburg, 1459. A form is a visit or table request, not a confirmed reservation.

Takes effect: 14 September 2026
Last changed: 30 September 2026
Data controller (masthead): The Football House
Street: 34 N Rand Rd, Hughes, Boksburg, 1459, South Africa
Voice: +27 60 863 2291
Post: [email protected]

1. Why this page exists

These paragraphs are the privacy notice for The Football House. The rooms talk about football match viewing, food and non-alcoholic refreshments. A form sits on Contact. A venue-update field sits in the footer. This notice describes the site as it actually runs. It does not invent a customer warehouse, a till, or advertising pixels that are not on the pages. Clubs, leagues, FIFA and UEFA do not run this desk and are not joint controllers of the mail you send here.

Four jobs. First: what happens to a name, an email or a body you send. Second: what ordinary technical crumbs a host may see when a page opens. Third: a destination text that an ads platform, including Google Ads, can read — who we are, what a form is (a request, never a paid checkout), and how to write back. Fourth: a privacy map a visitor can use to exercise a right without guessing.

A green line after a form is a receipt, not a completed order, not a membership, not a deposit, not a contract. A later reply, if any, is a separate step. Read this with the Cookie Policy and the Terms of Use. This page is written in plain English to match the site. It is not legal advice and it does not replace reading Regulation (EU) 2016/679 (GDPR) or taking your own counsel.

2. The controller and how to reach the desk

The data controller for personal information sent through this website is the operator of The Football House, reached at the Boksburg coordinates below. The Football House keeps this venue. It is a football match viewing venue with a contact form, not an online payment till, not a confirmed reservation desk. This notice does not invent a company registration number, a VAT number, a board of directors, or a named data-protection officer title that is not printed elsewhere on the site. If those identifiers are confirmed later, they would be added here rather than guessed.

  • Masthead / controller name as shown: The Football House
  • Street: 34 N Rand Rd
  • City and postcode: Hughes, Boksburg, 1459
  • Country: South Africa
  • Voice: +27 60 863 2291
  • Post: [email protected]
  • Form: Contact

Privacy questions, access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and questions about venue updates can travel through that form, the phone, or the mailbox. Using those channels does not open a completed order. Privacy mail may go to [email protected]. We aim to answer a rights request without undue delay and within one month of receipt, as GDPR requires, unless a lawful extension applies.

This map covers people who read the public rooms and people who send a form. It does not cover networks reached through the public social icons. Those services keep their own controllers and their own rules.

3. How this notice sits with other pages

The venue is kept from Boksburg, South Africa. Personal information sent through a form is used to serve the site and to read a note. It may be handled in South Africa and, where a host or font service requires it, in other countries. The main rules that set conditions for that handling are:

  • Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR);
  • The Protection of Personal Information Act, 2013 (POPIA), where it applies to this venue in South Africa;
  • the ePrivacy rules that sit beside cookies and similar storage, described on the Cookie Policy, where they apply to a visitor;
  • consumer-protection rules that apply to a free information site with a contact form and no checkout.

Where GDPR applies, personal data should be processed for specified purposes, kept to what is needed, and guarded with appropriate security. You have rights to information, access, rectification, erasure, restriction, portability, objection, and to withdraw consent where consent is the basis. Those rights have edges. A record of a note may stay while it is still needed to handle the request or to meet a legal duty.

There is no login vault, no stored membership, no till, no live-chat profile, no subscriber portal. Because those rooms are absent, this notice does not describe passwords, saved cards, or dashboards. Online refunds, shipping and e-commerce billing do not apply: nothing is taken at a checkout. The Terms of Use say the same limit. If conversion, remarketing or analytics tags are added later, this page and the Cookie Policy will be updated before those tools are treated as current, and a consent banner will be required for EEA visitors where the law and Google’s EU User Consent Policy require it.

4. What can arrive here

Personal data here means a field that identifies you or can reasonably be tied to you — a name, an email, a phone number typed into free text. The table lists what the current pages can receive. If a field is not on a form, this notice does not pretend it is required.

Kind Examples on these pages When it arrives
Who you are, how to write back Name, email, a phone number if you type one into the body When you send a contact form or drop a number into free text
The body of a note Subject, topic, kind of note, a line about a match, a visit, food or a table request When you send a contact form
Stay Updated An email address only When you send the footer form
Technical crumbs Browser, device, pages asked for, date and time, referring URL, campaign parameters if they sit in the address bar When you open a page or arrive from an advertisement

Leave out identity-document numbers, cards, bank accounts, passwords, access codes, copies of keys, and scans of ID. The forms are not built for those special categories or for payment data. If you send them anyway, whoever reads the note may still see them. That is why they should stay out. We do not ask for health data, political opinions, or other special-category data under GDPR Article 9, and you should not include them in a form about The Football House.

5. Notes and venue updates

Sending Contact asks The Football House to read a question or a line about a page. Name and email may be used to write back. A phone number typed into the body may be used for the same note. The on-page receipt means the words left the browser. It does not mean a table was confirmed, a seat was guaranteed, or a contract formed.

The footer form is separate. It takes only an email. It is not a paid list and it does not mint a fee. You may withdraw consent and ask to stop those notes at any time using the coordinates on this page. Stay Updated are not sent unless you used that form. We do not buy email lists and we do not append extra marketing profiles to an address you typed here.

Required fields exist so a note can be read. They are not a tool to build a commercial profile, to publish a testimonial in your name, or to fire an automated quote. You may walk every public room without sending a form. Submitting a form is a freely given, specific request: you choose to send the fields so we can read them.

6. Logs, hosting and fonts

When a page opens, the host may process ordinary crumbs needed to serve it: IP address as seen by the server, browser, device, pages asked for, time, referring URL, similar server-log fields. Cookies or similar storage may exist if a page needs them to work. The long version is on the Cookie Policy.

Those crumbs help deliver pages, keep hosting ordinary, and support the visible form. They are not used here to build a public visitor profile, to flash a personal offer, or to pretend a completed order opened.

Pages load type from Google Fonts. The browser asks Google for that type. Google may handle technical data around that request under Google’s own rules, including Google’s Privacy Policy at policies.google.com/privacy and Google’s advertising / business privacy information at business.safety.google/privacy. If third-party requests are blocked, the page can still be read; the intended type may not appear. Layout libraries such as Bootstrap files hosted with the site are for presentation. They are not a second customer warehouse.

7. What we do with it

A contact note is read, and a reply may follow if that makes sense. A reply may use the email you gave, and a phone number if you put one in the body. Stay Updated go only to addresses that used the footer form.

The current purposes are short:

  • to see which room the note is about — matches, football nights, food or a table request;
  • to answer questions about the pages or about a visit;
  • to handle privacy questions and rights requests about what you sent;
  • to keep an ordinary record while a note is still being read, and for a limited time after;
  • to run and guard the site, including ordinary hosting logs;
  • to send venue updates only if you asked;
  • to understand, at a technical level, that a visitor arrived from search or from an advertisement when campaign parameters sit in the address bar — not to build a remarketing audience on this domain unless such a tag is actually installed and this notice is updated.

Submitted fields are not fed into an automated score, an instant quote, a credit check, or a public testimonial in the sender’s name. There is no automated decision-making that produces a legal or similarly significant effect about you (GDPR Article 22).

GDPR Article 6 requires a legal basis for each purpose. The table matches the current site. If a new tool is added, the basis will be named here before that tool is treated as live.

Processing Article 6 basis Plain meaning
Contact form fields and a later reply Consent (Art. 6(1)(a)) and/or steps at your request before a possible discussion (Art. 6(1)(b)) You chose to send a note so we can read it and, where it fits, write back
Quiet-notice emails Consent (Art. 6(1)(a)) You submitted the footer form; you may withdraw at any time
Hosting logs and strictly necessary page storage Legitimate interests (Art. 6(1)(f)) Serving and guarding the public pages without a login or a till
Google Fonts request made by your browser Legitimate interests (Art. 6(1)(f)) for displaying the designed type; you may block third-party requests in the browser Layout, not a visitor profile
Privacy rights requests Legal obligation (Art. 6(1)(c)) GDPR requires us to handle access, erasure and related requests

Where consent is the basis, you may withdraw it as easily as you gave it: write to the mailbox or use Contact and say you want the notes or the stored fields stopped. Withdrawal does not make past lawful reading unlawful. Where legitimate interests apply, you may object; we will then weigh the request against the need to serve and guard the site.

9. Google Ads and lead notes

These pages may be a landing for search ads, including Google Ads. An ad may sketch a football venue theme in general terms. The landing must match: The Football House is about match viewing, food and non-alcoholic refreshments, and about notes from visitors. It is not an official club venue, a ticket marketplace, a betting desk, a streaming service, or an official FIFA or UEFA site. A click is not a completed order and does not create a contract.

If you click an ad and land here, this notice still applies. Campaign crumbs in a URL (for example a click identifier or campaign name) may be handled by the browser, the host, or the ads platform under that platform’s own terms. This page does not claim that a conversion tag, remarketing tag, analytics property, or ads pixel sits on these rooms unless such a tool is actually present. If those tools arrive later, this page and the Cookie Policy will be changed first, and EEA consent (including Google’s EU User Consent Policy and, where required, Consent Mode) will be implemented before personalised ads measurement is treated as current.

A form sent by someone who arrived from an ad is used the same way as any other note: to read it and, where it fits, to write back. It is not used to flash a personal offer, to take a deposit, or to enrol anyone in a paid list. The Football House does not use these pages to claim a licensed franchise, an award, or an official club, league, FIFA or UEFA partnership.

Google, as an ads and fonts platform, may process data on Google’s own properties under Google’s rules. This notice describes The Football House. It does not rewrite Google. See Google’s Privacy Policy and Google’s Business Data Responsibility / privacy information for advertisers and partners.

10. Who else may handle a field

People who read mail for The Football House may see a note. Hosts, mail paths, and font or layout services may process what they need to run those systems as processors or as separate controllers of their own services. That can include a hosting company, an email transmission path, and Google (Fonts, and Google Ads if you arrived from an advertisement on Google’s properties).

Social icons point at public homepages. Following them may let that network process data under its own terms. Those icons are not a claim that request details are shared with those networks as a commercial, franchise, or product partner.

A field may be disclosed if a law requires it, or if disclosure is reasonably needed to protect the site, a person, or property in connection with a note. This page does not invent a list of agencies that receive routine copies of forms, because that is not how the current desk works.

11. No sale of personal details

Personal information is not sold. A note is not listed, auctioned, rented, or handed over as a marketing file. The Football House is not a data broker. Quiet-notice addresses are not sold as a subscriber pack. We do not trade form fields for advertising credit.

To keep the till question clear for ads review: cards are not collected at a checkout, prices are not shown, and there is no online checkout. Refund, shipping and subscription-billing rules that belong to stores do not apply. If a later talk happens after a form is read, that talk sits outside this notice except for any personal fields that first arrived through a form.

12. How long a record stays

A field stays while it is needed to read a note, answer a question, keep an ordinary record of that request, or meet a legal duty that attaches to the mail.

  • Contact notes: kept while the note is being handled, then up to 24 months after the last reply unless you ask for earlier erasure and no legal duty requires a longer keep.
  • Quiet-notice addresses: kept while those notices remain wanted; deleted or suppressed after you withdraw consent, except a small record that the stop was handled.
  • Hosting logs: kept only as long as ordinary hosting security requires; this notice does not invent a host’s exact day-count if the host sets its own rotation.
  • Rights-request correspondence: kept as needed to show the request was handled, typically up to 24 months.

If you ask for deletion, the request is weighed against whether the field is still needed for the original job or for a legal duty. Where consent is withdrawn, we stop the processing that sat on that consent.

13. Care and accuracy

Ordinary care is taken with notes that arrive through the site: limited access to the mailbox, no public posting of form bodies, and no till that would require card storage. No web path is free of risk. Do not put in a form anything you would not want stored or read.

Keep fields accurate enough to be understood. A mistyped email may mean a reply never lands. Government ID numbers, cards and passwords are not collected by design. Do not put them in a form.

14. Your privacy rights

You can skip every form. If you send one, include only what you want on the desk. You may exercise the following rights by using Contact, calling +27 60 863 2291, or writing to [email protected]:

  • to be informed (this page);
  • to access personal data we hold about you;
  • to rectify inaccurate fields;
  • to erase fields where the law allows (“right to be forgotten”);
  • to restrict processing in the cases GDPR lists;
  • to data portability for data you provided, where the basis is consent or a contract and the processing is carried out by automated means;
  • to object to processing based on legitimate interests;
  • to withdraw consent at any time, where consent is the basis;
  • not to be subject to a solely automated decision with legal or similarly significant effect — this site does not run such a decision.

Those rights have edges. A record may stay if it is still needed for the original note, for a legal duty, or for the establishment, exercise or defence of legal claims. When you write about privacy, it helps to say the mail is about website information, roughly when a note was sent if one was, and which address was used. That helps the matching record be found. It does not create extra categories beyond those already listed. We may need to ask you to confirm the mailbox so we do not disclose a file to the wrong person.

15. Younger readers

These rooms are for people reading about football match viewing and writing about The Football House. They are not aimed at children. The forms are not used, to this desk’s knowledge, to gather data from children for a separate child service. Where the law sets an age for consent, a parent or guardian usually needs to be involved below that age. A parent or guardian who thinks a child sent a form can write using the coordinates on this page so the note can be reviewed and, where required, erased.

16. Transfers beyond the EEA

The printed street is in Boksburg, South Africa. Hosting, fonts and mail paths may involve machines or vendors outside the EEA, because that is how many sites travel. Google Fonts and Google Ads (if you use Google’s properties) may involve processing in the United States or other third countries. Where such a transfer happens, it is for the same jobs described here: serving the rooms, displaying type, handling an ad click on Google’s side, and handling a note.

This notice does not mint a full country list for every subnet. Where a transfer relies on adequacy, standard contractual clauses, or another GDPR Chapter V tool, that tool sits with the relevant vendor. You can block third-party font and ads requests in the browser. Doing so may change how type looks; it does not stop you reading the public rooms.

17. Pictures and venue notes

Public rooms show match viewing, food and venue interiors. Those pictures sit beside text about football nights and matchday food. They are not staff portraits. They are not official club product photography. They are not used to collect personal data about visitors. Cookies and forms are not used to match a visitor to a photograph.

A typical note may name a match, a visit, food or a table request. Those words are treated as part of the message you chose to send. They help the reader of the note. They are not used to build a public profile of the sender and they are not treated as proof of club or league support.

The current site does not collect account passwords, saved cards, precise device location as a product feature, or a public review in the sender’s name. There is no login. There is no membership profile. There is no personalised price. Because those features are absent, this notice does not describe them as live processing.

18. When this notice changes

This page may change if forms, coordinates, hosting, cookies, ads tags, or visible processing change. The current text is the text on this URL. Dates sit at the top. Using the site after a change means the published version applies to later visits and later forms. If a change is material — for example adding an analytics or conversion tag — we will update this notice and the Cookie Policy before treating that tag as current.

19. Questions and complaints

For questions about this map, use Contact, call +27 60 863 2291, or write to [email protected]. Paper may go to 34 N Rand Rd, Hughes, Boksburg, 1459, South Africa.

Treat a privacy question as a question about website processing, not as a completed purchase. If you also want a heading discussed, say so in the same note so the two jobs are not mixed.

If you are not satisfied with how a privacy question is handled, you may lodge a complaint with a supervisory authority. For this venue in South Africa, public information is published by the Information Regulator at inforegulator.org.za. This site does not invent a complaint form for that authority. This page does not replace legal advice.