Last updated: September 2026
This Privacy Policy explains how Golafly Match Day (“we”, “our”, “us”) collects, uses and protects your personal data when you use our website and booking services for match tickets, hospitality and matchday travel. Golafly Match Day is operated by Golafly Ltd, which acts as the data controller for the processing described here. Data collected through Golafly’s football programme applications (trials, player management, internships) is covered by the notices shown on those forms.
• Account data: name, email address, phone number, country and communication preferences. - Attendee details: names of everyone on a ticket booking and, where a club or stadium requires it for restricted fixtures, date of birth and photo ID details. - Travel details: names, dates of birth and passport or ID details where an airline or authority requires them for ticketing. - Booking data: matches, seat categories, hospitality packages, stays, flights, transfers, eSIM plans, booking references and support history. - Payment data: processed by our payment providers. We receive only tokenised references and the last four digits of the card — never full card numbers. - Device & usage data: IP address, browser type, pages visited and interactions, collected through cookies and similar technologies.
We process your data to: - Complete and manage your bookings (contract performance) - Send booking confirmations, e-tickets, travel documents and matchday updates - Provide customer support and resolve disputes - Verify attendees where a club or venue requires it, and prevent ticket fraud and misuse - Personalise offers and send our matchday briefing, where you have consented - Comply with legal obligations (tax, aviation and border regulations)
We share personal data only as needed to deliver what you booked: - Clubs, venues and hospitality partners — attendee names and, where required, ID details for ticketing, entry and security - Airlines — traveller names and documents required for ticketing and check-in - Properties and transfer providers — guest names and trip details for your reservation - eSIM network operators — the details needed to provision your data plan - Payment processors — to process and, where applicable, refund payments - Authorities — where required by law (for example, advance passenger information or stadium safety requirements) We never sell your personal data, and providers may use the data we pass on only to deliver the booked service.
We use essential cookies to keep the site working (sessions, cart, security, theme preference) and analytics cookies to understand how the platform is used. You can control non-essential cookies from your browser settings; blocking essential cookies may prevent checkout from working.
If you subscribe to the Golafly briefing or opt in at checkout, we send offers, fixture news and football insights. You can unsubscribe at any time using the link in any email. Service messages about your bookings — such as confirmations and ticket delivery — are not marketing and will continue.
Under the GDPR and equivalent laws, you can: - Access a copy of the personal data we hold about you - Correct inaccurate data - Request deletion of your data (“right to be forgotten”) - Receive your data in a portable format - Object to or restrict certain processing, including marketing To exercise any of these rights, email contact@golafly.com. We respond within 30 days. You may also complain to your local data protection authority.
We keep booking records for as long as needed to provide the service and meet legal obligations (typically up to 7 years for financial records). Account data is deleted or anonymised when you close your account, except where retention is legally required.
Data is encrypted in transit (TLS) and at rest. Access to personal data is limited to staff who need it, under confidentiality obligations. Payments use 3-D Secure authentication through certified processors.
Because matches and travel are international, your data may be transferred to clubs, venues and providers outside your country. Where data leaves the UK or EEA, we rely on adequacy decisions or standard contractual clauses.
We may update this policy as the platform evolves. Material changes are announced by email or on the site before they take effect. The “Last updated” date at the top always reflects the current version.
For privacy questions or to exercise your rights: Email: contact@golafly.com Golafly Match Day is operated by Golafly Ltd, 128 City Road, London EC1V 2NX, United Kingdom.
Questions about your data? Write to contact@golafly.com or visit Help & FAQs.