Privay Policy

This privacy policy explains how Nujum Sports CIC collects, uses and protects personal data in connection with the Children of Gaza website at childrengaza.org and its related events. It applies to visitors to the website, newsletter subscribers, people who contact us, people who buy tickets to our events, and people whose stories or images we publish with their consent.

1. Who we are

Nujum Sports CIC is the data controller for the personal data described in this policy. Nujum Sports CIC is a Community Interest Company registered in England and Wales, company number 12901178. Our registered office is c/o Z.S.N Accountancy Office, 15, 321-323 High Road, Romford, England, RM6 6AX.

2. How to contact us about privacy

If you have a question or concern about how we handle your personal data, contact us at info@nujumsports.co.uk. Based on our own assessment using the Information Commissioner’s Office’s online self-assessment tool, Nujum Sports CIC does not currently need to pay the ICO’s data protection fee. We review this assessment periodically as our data processing activities change.

3. What personal data we collect

  • If you visit the website, we may collect data through cookies and similar technologies. See our cookie policy for details.
  • If you sign up to our newsletter, we collect your email address, sent and stored through our email platform, Brevo.
  • If you contact us, we collect your name, email address, and the content of your message.
  • If you buy a ticket to one of our events, our ticketing partner, Ticket Tailor, collects your name, contact details, and payment information on our behalf, and, where applicable, your bidding information if you take part in a charity auction at the event.
  • Where a child’s personal account is featured on our Stories page, we publish it only with the consent of a parent or guardian, obtained before publication.

4. Our lawful basis for using your data

  • Newsletter: your consent.
  • Contact form enquiries: our legitimate interest in responding to your enquiry.
  • Event tickets and auction bids: performance of a contract with you, and our legitimate interest in running the event.

Stories content concerning children can involve special category data under Article 9 of the UK GDPR, for example information that indirectly reveals racial or ethnic origin, religious belief, or health, given the subject matter. Our lawful basis for this is the explicit consent of a parent or guardian, given before publication.

5. Who we share your data with

  • Ticket Tailor, who process bookings and payments for our events on our behalf, as our data processor. Their privacy policy is at tickettailor.com/legal/privacy-policy.
  • Brevo, who send our newsletter on our behalf.
  • Google, through Google Analytics, which helps us understand how the website is used.
  • Our named registered charity partner for the relevant campaign or event, currently Children Not Numbers. Where you buy an event ticket, the net proceeds, after Nujum Sports CIC’s reasonable event costs, are passed to them; see our website terms and conditions and our events terms and conditions for how this works. Where you donate directly to them through a link on our site, your donation and payment details go straight to them and we do not receive, hold, or process it ourselves.

We do not sell your personal data to anyone.

From time to time we may also use other providers to help us run the website, process payments, send communications, or deliver events, in addition to those named above. Any new provider will be limited to the same categories of activity described in this policy, for example website hosting and analytics, email communication, payment and ticketing, or social media, will only receive the personal data needed for that purpose, and will be required to protect it in line with UK data protection law. We will update this policy where a new provider represents a material change to how we use your data.

6. Sending data outside the UK

Our website is hosted with GoDaddy, and we use Google Analytics and Brevo, each of which may process personal data outside the UK as part of its standard operations. Where this happens, we rely on the legal safeguards recognised under UK data protection law, such as the UK’s international data transfer agreement or the UK Addendum to the EU Standard Contractual Clauses, incorporated into our contracts or terms of service with each provider. Google and Brevo each publish details of the transfer safeguards they use in their own data processing terms. Ticket Tailor’s own privacy policy sets out the safeguards it applies to any transfers it makes as our processor. Contact us at info@nujumsports.co.uk if you would like more detail about the safeguards used for a particular provider.

7. How long we keep your data

  • Newsletter data: until you unsubscribe.
  • Contact form enquiries: 12 months from your last contact with us, then deleted.
  • Ticket and booking data: 6 years, in line with our standard accounting and tax record-keeping obligations.
  • Stories content: for as long as it remains published on the site. The consent obtained for it is kept for the same period, then for a further 12 months as a record that consent was given.

8. Your rights

Under the UK GDPR, you have the right to: access the personal data we hold about you; have inaccurate data corrected; ask us to delete your data in certain circumstances; restrict or object to our processing of your data in certain circumstances; receive your data in a portable format, where relevant; and withdraw your consent at any time, where we rely on consent, without affecting the lawfulness of anything we did with your data before you withdrew it. You also have the right to complain to the Information Commissioner’s Office if you are unhappy with how we have handled your data (ico.org.uk, telephone 0303 123 1113). To exercise any of these rights, contact us at info@nujumsports.co.uk.

9. Children and safeguarding

Our Stories page may publish personal accounts about children affected by the war in Gaza. We only publish this content with the consent of a parent or guardian, given before publication. The same standard applies to any photograph or video of a child taken at our events that we wish to publish; see clause 6 of our events terms and conditions. If you are a parent, guardian, or the subject of a story and want it removed or amended, contact us at info@nujumsports.co.uk

10. Cookies

Our website uses cookies and similar technologies. See our cookie policy for full details of what we use and how to control them.

11. Keeping your data secure

We take reasonable technical and organisational steps to protect personal data against loss, misuse, or unauthorised access.

12. Changes to this policy

We may update this policy from time to time. The version at the top of this page is the current version. Last updated: 19 September 2026.