1. Who is responsible and how to contact us
The committee of Manchester City Official Supporters Club Singapore is responsible for personal data handled through this Member Desk. Our Data Protection Officer / privacy contact is the OSC Singapore Committee. For privacy questions, access or correction requests, withdrawal of consent or complaints, email osc@mancity.sg with the subject line “Privacy request”.
2. Personal data we may handle
Depending on the feature you use, this can include your name, email address, mobile or WhatsApp number, delivery address, country, purchase and payment-reference details, Manchester City Supporters Number, membership status, ticket application details, football interest and availability, and messages or documents you choose to provide. If you include accessibility information in a ticket application, we will use it only for the relevant application or support request.
When PayPal checkout is enabled, PayPal processes payment information directly. We may receive a payment confirmation, payer details made available by PayPal and a transaction reference, but we do not collect or store payment-card details.
3. Why we use personal data
We use personal data to verify whether an email appears on the current branch member register; set the membership route and fee; administer branch membership; take, process and fulfil merchandise orders; arrange delivery or collection; respond to enquiries; assess and administer ticket applications; organise community and football activities; communicate relevant branch updates; protect the desk and prevent misuse; keep necessary records; and meet legal or regulatory obligations.
We will collect, use or disclose personal data with your consent unless the PDPA permits or requires otherwise. Where a form asks for consent, please do not submit it unless you agree to the stated purpose.
4. Who may receive personal data
Access is limited to committee members and service providers who need the information for the purposes above and are expected to handle it appropriately. Relevant information may be shared with the payment provider, hosting and security providers, operational tools used by the branch, or Manchester City / an official-supporters-club administrator where a separate official registration or ticket process requires it. We may also disclose information where required or permitted by law.
5. Cityzen Help and external content
If Cityzen Help’s AI service is enabled, your question and a short recent chat history may be sent to an AI service provider to generate a support response. Do not include payment-card, identity-document, health or other sensitive personal data in the chat. Cityzen Help is not used to make automated membership, payment or ticket-allocation decisions.
Instagram embeds, PayPal, Manchester City links and other third-party services are governed by their own privacy notices and may collect information or set cookies when you use them.
6. Overseas transfers, security and retention
Some service providers may process or store information outside Singapore. Where the PDPA applies, we will take reasonable steps to ensure that transferred personal data receives a standard of protection comparable to that under the PDPA.
We use reasonable administrative, technical and organisational safeguards appropriate to the data and service. No online service can guarantee absolute security. We retain personal data only for as long as it is needed for the stated purposes, legal obligations, financial records or to resolve a dispute, then delete or anonymise it where appropriate.
7. Cookies and temporary verification
This desk uses essential cookies to keep committee access active and to maintain a temporary membership-verification session. The access cookie may last up to seven days; the membership-verification cookie lasts up to 20 minutes. These cookies are used for the desk to function and are not advertising cookies. Third-party services may set their own cookies under their notices.
8. Your choices and rights
You may request access to or correction of personal data in our possession or control, subject to the PDPA and applicable exceptions. You may withdraw consent for future collection, use or disclosure by contacting us, although this may affect our ability to provide membership, ticketing or other services. Please keep your details accurate and tell us about any change.
9. Concerns, data breaches and updates
If you have a concern, contact us first at osc@mancity.sg. We will assess personal-data incidents and notify affected individuals and the Personal Data Protection Commission where required by law. We may update this policy as the desk or our processes change; the effective date above will be updated when we do.