CURUFC Data Protection Statement


This statement explains how CURUFC and its associated subsidiaries (“we” and “our”) handle and use the personal data we collect about our alumni and our past, current and future supporters, whether donors, volunteers or participants in membership groups (“you” and “your”) that we run. CURUFC trades as Cambridge University Rugby Union Football Club as an Incorporated Company with Charitable Status. Company No. 09658537, VAT No. 214470100. CURUFC’s associated subsidiaries relate to CURUFC Sports & Social Limited Company No. 03667927 and CURUFC Trading Limited Company No. 03667930 VAT Reg. 720332973.

Developing a better understanding of our alumni and supporters allows us to keep in touch with you, in order to keep you apprised of our activities and developments, to provide services and benefits to you, and to identify ways in which you can support us, through donations or other forms of financial and non-financial support.

We are committed to protecting your personal information and being transparent about what information we hold. The CURUFC group has a data protection policy and procedures, an overview of which can be found here:  The following statement sets out how CURUFC and its associated subsidiaries (referred below as “CURUFC”) specifically uses your personal data for supporter, customer, supplier, fundraising and alumni relations purposes.

Personal data held by CURUFC

We may hold information relating to you from a number of sources. A significant proportion of the information we hold relates to our alumni and is information which is provided to us (for example, by filling in forms on the CURUFC/University’s websites, or by corresponding with us by telephone, email or otherwise). If you are a Cambridge student and played at the Club some of your personal data will have been transferred from your CURUFC student record to the CURUFC alumni database.

For alumni and supporter groups especially, most records contain:

  • details of your education (e.g. your College(s), dates of study)
  • unique personal identifiers and biographical information (e.g. date of birth)
  • your contact details (and we update these whenever you let us know that they have changed)
  • details of your interactions with CURUFC, the University and Colleges, including:
    • your membership of teams, clubs, societies, and alumni groups
    • your attendance at CURUFC, Varsity and University related events
    • other contact with us or our partners (as listed below)
    • your relationships with other alumni or supporters of CURUFC, the University and Colleges
  • details about you and your family (e.g. your marital status, the name of your partner or spouse, relationship with other members of the community)
  • personal data provided by you for specific purposes (e.g. disability and dietary preferences for event management purposes)
  • your communication preferences, to help us provide tailored and relevant communications

For alumni and supporter groups especially, we also record, where applicable, based on information which you provide to us and, in some cases, publicly available information and information from our partners (as listed below):

  • financial information relating to you and your family, including:
    • personal data enabling us to administer financial transactions (e.g. direct debits)
    • your history of donations made to CURUFC (the University and Colleges where known)
    • your ability and willingness to make donations, including our assessment of your income and whether particular donations or funding appeals may be of interest to you
    • your philanthropy and other giving, including donations to other organisations and other support that you provide (e.g. details of volunteering roles)
  • your career highlights and other life achievements
  • information about your areas of interest and extra-curricular activities

We augment the data we hold from CURUFC, the University and the Colleges with data from our partners (as listed below) and publicly available data.

We use targeted internet searches and may search the following websites (either directly or using search engines), where relevant in order to obtain and maintain the accuracy of the data listed above:

  • Public sources for companies (in order to find personal data of those companies’ employees, etc.):
    • Companies House and other business-related resources (free and subscription) for UK companies
    • US Securities and Exchange Commission for US companies
    • Capital IQ (subscription) for international companies
    • Company websites
  • Public sources for charities (in order to find personal data of those charities’ employees, trustees, etc., and to find information about donations and support):
    • Charity Commission and other internet sources for UK non-profits
    • GuideStar US for US non-profits
  • Public sources for individuals:
    • Who’s Who and Debrett’s People of Today (subscription)
    • Sunday Times Rich List
    • Other rich lists, including Forbes Magazine’s international rich lists
    • Property websites
    • The Queen’s Honours Lists
    • National change of address services
    • LinkedIn, to check business details
  • Press sources:
    • Factiva (subscription) for international press
    • Lexis Diligence (subscription) for negative press for due diligence purposes

How your data is used by CURUFC

Your data is used by us for a number of interdependent purposes in support of alumni relations, supporter (including those who are both suppliers and customers) communications and fundraising.  These include:

  • providing services, including access to CURUFC facilities
  • administrative purposes (e.g. in order to process a donation directly with CURUFC or via our partners (CAF Donate & Cambridge University) or to administer payment and/or ticketing for an event you have registered for or attended). Information relating to our suppliers and customers will be kept to a minimum in order for the Club to carry out commercial related transactions
  • sending you publications (e.g. alumni/supporter Gazette es/electronic newsletters and updates about the Club)
  • conducting surveys, including research on when and whether particular donations or funding appeals may be of interest to you
  • sending you tailored proposals, appeals and requests for donations
  • sending you details of volunteering opportunities
  • inviting you to supporter, alumni and other CURUFC/University events
  • the promotion of other opportunities, benefits and services available to you (e.g. offers and opportunities available through CURUFC & the University’s network of alumni groups)
  • wealth analysis and research in order to improve our understanding of our alumni and supporters, inform our fundraising strategy and target our communications more effectively
  • internal record keeping, including the management of any feedback or complaints

Before seeking or accepting major donations we are required to conduct due diligence, including reviewing publicly available personal data relating to the donor’s criminal convictions and offences.

Communications to you may be sent by post, telephone or electronic means (principally by email), depending on the contact details we hold and the preferences expressed by you about the types of communications you wish to receive.

If you have concerns or queries about any of these purposes, or how we communicate with you, please contact us using the details listed below.

For alumni and supporter groups especially, we may use automated or manual analyses to link data together to help us identify your potential for supporting CURUFC, to provide you with an improved experience, to send you communications which are relevant and timely, to identify volunteering opportunities or opportunities for providing support which may be of interest to you, and to avoid approaching you with opportunities which are not of interest. All of this enables us to raise more funds, sooner, and more cost-effectively, in support of CURUFC’s strategic objectives. We always seek to ensure that any opportunities we present are aligned with your interests, based on the research we conduct.

We will always respect a request by you to stop processing your personal data, and in addition your statutory rights are set out below.

In addition to the Club’s focus on alumni relations, supporter communications and fundraising, CURUFC may also use your data sporadically to promote opportunities available from the Club’s Corporate Partners (e.g. Sponsors); opportunities which might be deemed of interest and beneficial to the CURUFC community.

How we protect your data

We are committed to protecting your personal information and being transparent about what information we hold in line with both the Data Protection Acts of 1998 and 2018. Please see our Group Data Protection Policy at

We ensure we have appropriate data sharing agreements in place before sharing your personal data.

We do not sell your personal data to third parties under any circumstances or permit third parties to sell on the data we have shared with them.

We also facilitate communication between individual alumni and supporters, but in doing so we do not release personal contact details without prior permission.

Any transfers of your data overseas (outside of the European Economic Area), for example to an international alumni organisation, as set out above, are protected either by an ‘adequacy decision’ by the European Commission (declaring the recipient country as a ‘safe’ territory for personal data) or by standard contractual clauses adopted by the European Commission (which give obligations for the recipient to safeguard the data) or, before 25th May 2018, based on the CURUFC’s self-assessment of the risks involved with the transfer and its determination that the data will be adequately protected during and after the transfer. Further information about the measures we use to protect data when being transferred internationally is available from our Data Protection Officer (whose contact details are set out below).

When CURUFC shares your data with others (our partners)

We work closely with the University and the Colleges to provide our shared alumni and supporters with a coordinated approach.   Any transmission of data to or from the University and/or the Colleges is managed through agreed processes which comply with relevant data protection legislation.  The University and all of the Colleges have their own data protection statement and procedures.

We sporadically share data with Cambridge in America (CAm), which advances the mission of the University of Cambridge, its clubs & societies and its thirty-one member Colleges by providing expertise in fundraising and alumni relations and by growing the base of support for Collegiate Cambridge among alumni and friends in North America. Data sharing with CAm is managed through agreed processes which comply with relevant data protection legislation.

Additionally, we share limited data on a considered and confidential basis, where appropriate, with:

  • affiliated organisations and individuals which support and provide services to alumni and supporters, such as:
    • Cambridge University Development & Alumni Relations, Varsity Match Ltd, the Colleges, Hawks/Ospreys Clubs
    • volunteer partners closely related to us (e.g. Captains, Honorary Secretaries, CURUFC networkers, development and advisory board members, the CURUFC Executive Committee & Board and the CURUFC Management & Administration team
    • educational trusts and donors associated with the Club who awarded you a scholarship/bursary
  • third parties engaged by CURUFC to provide fundraising related services, such as:
    • third party agencies who provide us with data about alumni and supporters
    • consultants advising us on individuals’ capacity to donate
    • other contractors providing services to you on our behalf or services to us
  • selected companies who provide CURUFC-branded or CURUFC-endorsed products and services

Your rights

You have the right to:

  • ask us for access to, or rectification or erasure of your data
  • restrict processing (pending correction or deletion)
  • object to communications or direct marketing
  • ask for the transfer of your data electronically to a third party (data portability)

You have the right to lodge a complaint with the Information Commissioner’s Office at

Further information

The legal basis for processing your personal data for the interdependent purposes set out above is that it is necessary for the pursuit of our legitimate interests, or the carrying out of a task in the public interest, or in the exercise of our official authority. We always handle your personal data securely and minimise its use, and there is no overriding prejudice to you by using your personal information for these purposes.  In addition, there is no statutory or contractual requirement for you to provide us with any personal data.

The controller for your personal data is the Secretary of CURUFC, and can be contacted at or by telephoning 01223 354 131

Our Data Protection Officer is responsible for monitoring compliance with relevant legislation in relation to the protection of personal data, and can be contacted at

Please contact us at if you have any concerns or questions about the above information or you wish to ask us not to process your personal data for particular purposes.  Where you have specific requests relating to how we manage your data, we will endeavour to resolve these, but please note that there may be circumstances where we cannot comply with specific requests.

We will retain your data indefinitely in support of your lifelong relationship with CURUFC or until you request us to do otherwise.  We will publish on our website any changes we make to this data protection statement and notify you by other communication channels where appropriate.

Where you exercise your right to erasure, we will continue to maintain a core set of personal data (name, link to a captain, team details, and date of birth) to ensure we do not contact you inadvertently in the future, and to maintain your playing record for archive purposes.  We may also need to retain some financial records about you for statutory purposes (e.g. Gift Aid, anti-fraud and accounting matters).

If you have any concerns about your personal data held by the University or your College, you will need to contact both the University and the College separately.


University Football Ground
Grange Road

01223 354 131

The CURUFC Group Data Protection Policy can be found here

We are proud of our alumni and friends and want to stay in touch.

CURUFC and The University (Development & Alumni Relations – DAR) have a shared interest in and co-ordinated approach to their alumni and supporters. This statement explains how CURUFC handles and uses data it collects about its alumni, its friends, and its current and future supporters. The University has its own database and access to CURUFC’s database, and both institutions also maintain other electronic and paper records. The University has their own data protection procedures. CURUFC keeps in touch with all University alumni and supporters, provides information on social and networking opportunities to them and nurtures relationships with potential and existing donors.


The records are used by CURUFC for alumni relations and fundraising purposes. These include publications, alumni surveys, appeals/campaigns and the marketing of alumni events. Communications may be sent by post, telephone or electronic means. Most records contain information on education, contact details, the constituents’ career and other achievements. Contact and relationships with CURUFC since graduation and donations are also recorded. In some cases other data is added, such as data from external partners (see below); sensitive data you provide for a specific purpose (disability or lifestyle status for event management or updating of personal history for example); information about your family and other relationships; financial data coming from you or reputable public sources; and information about your areas of interest and potential to support CURUFC and The University.


Security and controlled data sharing with partners

All information is held and transmitted securely and (in addition to disclosure as permitted or required by law) may be disclosed on a considered and confidential basis only with:

  • CURUFC trading as Cambridge University Rugby Union Football Club
  • CURUFC associated subsidiaries (CURUFC Trading & CURUFC Sports & Social Club)
  • CURUFC volunteers/captains
  • VMCL (Varsity Match Company Limited)
  • CUDAR (Cambridge University Development and Alumni Relations)
  • Colleges
  • University clubs and societies
  • Alumni societies and volunteers
  • Cambridge in America (the University’s affiliate office in the US)
  • Associated bodies for example various Cambridge scholarship trusts, and wholly owned companies such as Cambridge Enterprise Ltd
  • Selected companies who provide University-branded alumni programmes (merchandise, travel etc)
  • The University and CURUFC also facilitates communication between individual alumni, but in doing so does not release personal contact details without prior permission.


You are in control. If you have any queries about the use of your personal data at CURUFC, wish to restrict data processing or sharing including use for marketing or do not want to be contacted by CURUFC, please inform us (Minimal information is always retained to make sure you are not contacted again inadvertently: name, year of Blue, college, link to a captain/team and date of birth.) You will also need to contact DAR and your college separately if you wish to restrict data processing, sharing, marketing or contact. We will publish any changes we make to this data protection statement and notify you where appropriate. Please refer to for a more detailed explanation of this statement.

Data Protection legislation requires us to check your preferences about marketing by electronic mail (e.g. – email and sms messages)

If you do NOT wish to receive unsolicited e-communications, please email us by clicking here to notify us which communications you no longer wish to receive:

☐       Fundraising Campaigns

☐       Any unsolicited CURUFC updates (events, matches, alumni/networking groups, fundraising activity)

If you leave a box blank, until informed otherwise, we will assume you are happy to receive such material electronically. As most of our communications will be electronic mail, if you tick a box, you might not receive any notification of the excluded activity at all.



University Football Ground
Grange Road

01223 354 131

CURUFC’s Data Protection Policy can be found here

A summary of CURUFC’s Data Protection Statement can be found here