Soccer Trippers

Privacy Policy

Last updated: 3 August 2026.

1. Who is responsible for your data

Clubhouse Concepts is the controller for personal data processed through Soccer Trippers. Clubhouse Concepts is registered with the Netherlands Chamber of Commerce under number 73643076 and has its business address at Professor Oudemansstraat 30, Delft, the Netherlands. Privacy questions and requests can be sent to info@soccertrippers.com.

2. Data we process

  • Saved-trip data: email address, optional first name, destination, club, fixture, travel dates, departure city, group size, ticket preference, trip status and the page or campaign that generated the request.
  • Email and preference data: consent status, destinations, travel stage, frequency preferences, delivery, opens, clicks, bounces, complaints and unsubscribe events.
  • Ticket-alert data: email address, optional first name, the exact fixture, club, city, current listed kick-off, alert status, source page and confirmation or delivery status. We keep alerts separate per fixture so one alert never overwrites another.
  • Contact and community data: information you send through a contact, venue suggestion, rating, correction, hotel tip or business-claim form, including supporting links and business details where relevant.
  • Essential technical data: a random first-party browser identifier, requested page, event type, security logs and a one-way hash derived from an IP address for rate limiting. We use the hash to recognise repeated requests without storing the IP address in the rate-limit record.
  • Analytics data: if you allow analytics, Google Analytics receives browsing, device and approximate location information in accordance with your consent choice. We do not send the contents of trip or contact forms to Google Analytics.

3. Why we process data and our legal bases

  • Provide a requested service: save and reopen an exact trip, follow an exact fixture for verified ticket-sale information, send the corresponding confirmations and alerts, process a contact request or publish an approved contribution. The legal basis is taking steps at your request or performing our agreement with you.
  • Marketing email: send relevant planning advice and offers only after an affirmative opt-in. The legal basis is consent, which you can withdraw at any time.
  • Analytics: load Google Analytics only after you select “Allow analytics”. The legal basis is consent.
  • Operate and protect the service: prevent abuse, diagnose errors, keep information current, understand first-party funnel performance and record affiliate attribution. The legal basis is our legitimate interest in operating a secure and useful service. We limit this processing and do not use it to make decisions with legal or similarly significant effects.
  • Comply with law and resolve disputes: retain information where needed for legal obligations, claims or complaints.

4. Saved trips and access links

Each saved trip is stored as a separate record. Its confirmation email contains a unique access link that reopens that trip; the secret part of the link is stored in hashed form where the service supports it. Treat the link as private because someone who receives it may be able to view the plan or update its status. You can ask us to delete a saved trip by emailing us from the address used to save it.

5. Ticket alerts, email consent and service messages

A saved-trip confirmation or fixture-specific ticket alert is sent because you requested that service. A ticket alert remains linked to that fixture and can include a verified announcement, live-sale or changed-sale-time message. Each ticket-alert email provides a link to stop that alert without changing other alerts or marketing preferences. Planning sequences, newsletters and promotional messages require the separate marketing checkbox. Each marketing email provides an unsubscribe or preference link. We may retain a minimal suppression record after an opt-out so that we do not accidentally subscribe the address again.

When you provide an email address for a requested service, contact enquiry, venue or hotel contribution, or business claim, we also keep one deduplicated customer record that identifies those service relationships. New records are non-mailable by default. Creating this record does not grant marketing consent, and an existing marketing opt-in is not changed by using another service.

6. Cookies, browser storage and analytics

Soccer Trippers uses an essential HTTP-only cookie named st_aidcontaining a random identifier. It lasts for up to 12 months and helps us connect first-party journey events, apply abuse controls and avoid treating every page as a completely unrelated visit. It is not an advertising cookie.

When you arrive through a source-tagged editorial or publisher link, we may store a limited HTTP-only attribution cookie named st_distributionor st_earned_distribution for up to 30 days. It contains only a publisher reference and, where relevant, a club, campaign or content label. It does not contain your email address or the raw page you came from. The most recent measured publisher touch replaces an older one.

Your analytics choice is stored in your browser undersoccertrippers_analytics_consent. Google Analytics is loaded directly, not through Google Tag Manager, and analytics storage remains denied until you give permission. You can change the choice through “Analytics preferences” in the footer.

We also use limited device storage to remember actions such as a sports-bar rating or closure report. A Stay22 hotel map loads only after you click to open it. At that point, or when you follow another external partner link, the third party may process data under its own privacy notice.

7. Affiliate links

Some external booking links contain a campaign or placement reference. The partner or affiliate network can use it to attribute a booking and calculate a commission. We may receive transaction-level reporting such as partner, destination, campaign reference, booking date, status and commission amount. We do not receive your full payment-card details from these links.

8. Service providers and recipients

We use providers that help us operate the service, including:

  • Vercel for website hosting and delivery;
  • Supabase for database and server-side application services;
  • Resend for transactional and consented email delivery;
  • Google Analytics after analytics consent;
  • our content-management and football-data providers; and
  • booking providers and affiliate networks such as Booking.com/CJ, Stay22, Expedia/Partnerize, GetYourGuide, Tiqets, Omio/Impact and, when activated, P1 Travel, when you choose to use the relevant link or widget.

Providers that process data for us receive only what is reasonably needed for their task and are subject to contractual or legal safeguards. A booking provider you visit acts under its own terms and privacy notice for the booking journey it controls. We may also disclose information if required by law or necessary to protect legal rights and service security.

9. International transfers

Some providers may process data outside the European Economic Area. Where the receiving country does not have an applicable adequacy decision, we rely on an appropriate transfer mechanism, such as the European Commission's Standard Contractual Clauses, and any additional safeguards required for the transfer.

10. How long we keep data

We use the following retention criteria:

  • saved-trip data is kept while the plan and its follow-up remain useful and is then deleted or anonymised when it is no longer reasonably needed;
  • ticket-alert records are kept while the relevant fixture and requested notification remain active, then completed, deleted or anonymised when no longer reasonably needed; delivery and suppression records may be retained to prevent duplicate or unwanted sends;
  • marketing profiles are kept while subscribed; after an opt-out, only the data needed to honour the suppression and resolve delivery issues is retained;
  • contact, claim and community records are kept while we review, publish or defend the contribution and then according to the needs of the record;
  • security and first-party event data is kept only as long as reasonably needed to prevent abuse, troubleshoot and measure the service; and
  • records required for a legal obligation or dispute are kept for the applicable statutory period.

11. Security

We use access controls, signed or hashed tokens, server-side administration, rate limiting and transport encryption where appropriate. No online service is completely risk-free. If you believe a saved-trip link or personal data has been exposed, contact us promptly.

12. Your privacy rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests or withdraw consent. You always have the right to object to direct marketing. Withdrawing consent does not affect processing that lawfully took place before withdrawal.

Send a request to info@soccertrippers.com. We may ask for proportionate information to confirm your identity. You may also lodge a complaint with the Dutch Data Protection Authority, or with the supervisory authority in your country.

13. Children

Soccer Trippers is not directed at children under 16 and we do not knowingly request their data for marketing. If you believe a child has provided personal data without appropriate permission, contact us so we can review and remove it.

14. Changes and contact

We may update this policy when the service, providers or applicable rules change. The latest version and date will remain on this page. Questions or privacy requests can be sent to info@soccertrippers.com or through the contact page.