Privacy
What we do with your details.
Last updated 16 September 2026.
Who we are
Dugout AI Ltd (company number 16821108, registered office 2nd Floor College House, 17 King Edwards Road, Ruislip, London HA4 7AE) is the data controller for dugout90.com. Contact hello@dugout90.com.
What we collect and why
When you order we collect your name, email, phone number, billing and delivery address, what you ordered, and — for trade orders — the name of your club or bar and any delivery notes. We use this to take payment, deliver your order, send the confirmation and delivery emails, and deal with any returns or questions. The legal basis is performing our contract with you, plus our legal obligation to keep sales and tax records.
Payment is handled by Stripe. Your card details go straight to Stripe and never touch our servers. Stripe's own privacy notice applies to that step.
Who else sees it
Stripe (payments), Vercel (hosting) and Google (email). We don't sell or share your details with anyone else and we don't send marketing emails unless you've asked for them.
The QR code on the can
Scanning the can takes you to our Sussex non-league shows and app. That link records nothing about you beyond the standard web-server logs of the site you land on.
Cookies
This site sets no advertising or tracking cookies. Stripe sets cookies on its checkout page that are strictly necessary to take payment and prevent fraud.
How long we keep it
Order records are kept for six years after the tax year of the sale, as HMRC requires. Everything else is deleted when it's no longer needed.
Your rights
You can ask for a copy of what we hold, ask us to correct or delete it, or object to how we use it — email hello@dugout90.com. You can also complain to the Information Commissioner's Office at ico.org.uk.