Your Data
Last updated: October 2026
ESFR (Eat Sleep Football Repeat) is run by Pete Old, trading as PCO Holdings, 17 Cheddington Road, Bournemouth BH9 3NB. We are the "controller" of the personal data described here, which means we decide how and why it's used.
Contact us about anything in this policy at info@esfr.uk.
Bookings are paid through Stripe's checkout. When you book, we receive:
Stripe also collects your card and billing details to take the payment. We never see or store your full card details.
For free tickets, we collect your name, email address, and optionally your phone number and the team or player you're supporting.
Each booking gets a ticket with a unique QR code for every event booked. We email it to you, and when it's scanned at the entrance we record how many people on the booking have arrived and when.
We use these details to confirm and manage your booking, send your tickets, check people in at the entrance, organise the event (for example, putting teams into age groups), contact you about the event or any changes to it, and keep records of payments. Our legal basis is contract: we need these details to provide the booking you've made.
Many of our players are children. Their details, usually just a name and age group, are given to us by a parent, guardian or team official making the booking. We use them only to organise the event they're booked on, and we don't contact children directly.
If you use our contact form, we collect your name, email address, your phone number if you give it, what your message is about, and your message. It is sent to our team by email. If you email or call us directly, we use your details in the same way.
We use them only to reply and to deal with what you asked. Our legal basis is legitimate interests: you have asked us to get back to you.
Like any website, our hosting provider automatically processes technical information when you visit, such as your IP address and browser type, to deliver pages and protect the site from attack. This is kept briefly in their system logs.
Our site uses fonts from Google Fonts. To show them, your browser connects to Google's servers, which see your IP address.
We don't sell personal data. We use a small number of trusted providers to run the site and our events, who process data on our behalf and only as we instruct:
We may also share information if the law requires it.
Some of these providers are based in, or use servers in, the United States. Where personal data leaves the UK, we rely on the safeguards UK law allows, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.
We don't use advertising, analytics or tracking cookies, which is why you won't see a cookie banner on our site. The payment pages are run by Stripe, which sets its own cookies to prevent fraud.
Event pages can show a Google Map of the venue. The map only loads if you click Show Map, and Google may then set its own cookies. We remember that choice in your browser so maps load straight away on other event pages. To undo it, clear this site's data in your browser.
Under UK data protection law you have the right to:
Email info@esfr.uk to use any of these. We'll reply within one month. It's free, unless a request is clearly unfounded or excessive. If you're a parent or guardian, you can make these requests on behalf of your child.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Our events are for young players, but bookings and enquiries must be made by an adult, such as a parent, guardian or team official. We don't knowingly accept bookings or messages from anyone under 18.
If we change how we use personal data, we'll update this page and the date at the top.