What we do with your information

Last updated 27 September 2026. It covers this website and the Iron Trust members' app.

Who holds it

Scunthorpe United Supporters Society, trading as The Iron Trust, a registered society (no. 31581R) at Iron Trust, 17 Lea Gardens, Peterborough, PE3 6BY. We are the data controller for everything described here. Ask us anything about it at theirontrust@gmail.com.

What we hold, and why

• Your membership. Name, postal address, email address, phone number if you give one, date of birth for junior members, and the names you list on a family membership. We need it to run the membership you bought: to post your card and badge, to know who can vote, and to reach you.
• Your payment. How much you paid, when, and by what method. If you pay by card or PayPal the payment itself is handled by Stripe or PayPal and your card details never reach us: we keep only their reference and the amount, so the board can reconcile the accounts.
• Signing in. A one-time link or six-digit code sent to your email address, and how recently you signed in. The app stores a token on your own phone so it can open your card without a signal.
• Your membership card. The card in the app, and the Apple Wallet or Google Wallet copy if you add one, carry your name, membership number, type and status, and a code we scan at Trust Corner.
• Trust votes. We record that you voted, and separately what was voted for, with nothing linking the two. That is deliberate: it means nobody — not the board, not whoever built this — can see how any member voted.
• Emails we send. Whether you have asked for Trust news, and whether an email we sent you failed. Every newsletter carries an unsubscribe link that works immediately and for good.
• Notifications. If you allow them, your phone gives the app an anonymous token so we can send a notification when a ballot opens or news is published. It identifies the phone, not you, and turning notifications off in your phone's settings ends it.
• Messages you send us. What you write in the contact form, with your name and email, so we can reply.

Why we are allowed to

Running your membership is a contract between you and the Trust. Keeping proper accounts and a register of members is a legal duty of a registered society. Newsletters go only to members who asked for them, and you can stop them at any time. Nothing here is used to build a profile of you, and none of it is automated decision-making.

Who else sees it

Nobody buys it, and we do not sell, rent or trade it. Your details sit in the Trust's own database on our hosting, not on somebody else's mailing platform. A small number of suppliers see the parts they need to do their job: our hosting provider, the service that sends our email, Stripe or PayPal when you pay, and Apple or Google if you choose to add your card to their wallet or to receive notifications. The board sees the membership list because it has to. We hand anything to anybody else only if the law requires it.

How long we keep it

Membership is for life, so we hold your details for as long as you are a member. Cancel and we keep the minimum needed for the register and the accounts — normally seven years for anything financial — and delete the rest. Sign-in codes expire within minutes. Unsubscribes are kept for good, because that is the only way to be sure we never email you again.

What you can do about it

You can see what we hold, correct it, ask us to delete it, ask for a copy to take elsewhere, or object to us using it. Much of it you can do yourself in My Membership or in the app. For the rest, email theirontrust@gmail.com and we will answer within a month. If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can put it right.

Cookies

This site sets a cookie only when you sign in, to keep you signed in. There is no advertising, no tracking across other sites, and no analytics that identifies you. To see which pages are read, the site counts visits without cookies: it records the page, the site you came from and your type of device, with an anonymous code that changes every day so a visit can't be followed from one day to the next. Your IP address is not stored with it. When members sign in, we record the date and whether it was on the website or in the app.

Children

Junior memberships are held by a parent or guardian, whose email address we use for everything. Junior members can follow Trust votes but do not take part in them.

Changes

If this changes we will post the new version here and say when it changed. Anything significant will be told to members by email rather than left for you to find.