Privacy policy

Last updated: 27 October 2026

This policy explains what personal data steveslife.com collects when you create an account or buy from the Kit Sale, and how it is used.

What I collect

How it's used

Your data is used only to provide your account and the services on this site. It is never sold or shared for marketing.

Where it's stored

Data is stored with Cloudflare, which hosts this site. If you use Google sign-in, Google processes your sign-in under its own privacy policy. Account emails, such as password reset links, are sent through Resend, an email delivery service, which receives only your email address, your name and the message itself.

To protect accounts from password-guessing, the site briefly records the number of sign-in attempts from each IP address and email address. These records are deleted automatically within 24 hours.

Payments

Kit Sale payments are handled by Stripe, which processes your card details under its own privacy policy. Card details never reach this site. Order details are shared with the club volunteers who pack, post or hand over your items.

How long it's kept

Order records are kept for six years for Sutton & Epsom RFC's financial records, even if you delete your account. Your other data is kept until you delete your account. You can do this at any time from your account page, which permanently removes your details.

Your rights

Under UK data protection law, you can access, correct or delete your personal data, and you can complain to the Information Commissioner's Office (ico.org.uk). Most of this you can do yourself on your account page. For anything else, get in touch via the contact details on the home page.