How we handle data

The controller

Responsibility for personal data on footballkingdoms lies with the Salt River Pima-Maricopa Indian Community, 9800 East Talking Stick Way, Scottsdale AZ 85256, US. Reach the privacy desk at privacy@footballkingdoms.com.

Data points we gather

• Connection details — IP address, a coarse geolocation worked out from that address (roughly town or region), the user agent string your browser reports, screen size and the URLs requested.
• Messages — the fields you fill in on our contact page: name, email, chosen topic and text.
• Consent record — the on/off state of each cookie category, saved in local storage on your device.

Purposes and legal grounds

• Delivering pages and spotting abuse — our legitimate interest in a working, safe site.
• Analytics: anonymous-style totals of visits and popular sections — consent.
• Marketing: letting an affiliate partner recognise a booking that began here — consent.
• Replying to mail — legitimate interest, or pre-contract steps at your request.

Recipients

Processors that host the site or measure traffic for us see technical data. If advertising cookies are on, affiliate and partner networks receive identifiers that link a booking to a click here. After you click through, each resort's website applies its own data rules. Contact-form content is never sold or rented out.

Several vendors operate from the United States or other countries. Cross-border transfers rely on recognised safeguards, for example standard contractual clauses, where these are legally required.

Retention

Raw server logs: deleted after no more than 90 days. Aggregated analytics: up to 26 months. Correspondence: as long as the exchange is active, then a maximum of two further years. Consent record: twelve months, after which the cookie bar asks again.

European rights (GDPR, UK GDPR)

Access, rectification, erasure, portability, restriction and objection are all available to you, and you may pull consent back at any moment; earlier processing stays lawful. A supervisory authority where you live can hear complaints.

Californian rights (CCPA / CPRA)

Residents of California can learn which categories and pieces of personal information we hold, ask for correction or deletion, limit use of sensitive information and opt out of selling or sharing for cross-context behavioural advertising. A Global Privacy Control signal counts as that opt-out on this site and keeps advertising cookies off automatically. Exercising any of these rights never leads to worse treatment.

Children

This guide is written for grown-up travellers. Anyone under 18 should not send us personal data; if a young person's message reaches us, let us know and it will be erased.

Sending a request

Write to privacy@footballkingdoms.com and say which right you want to use. A short identity check may come first; answers follow within the legal deadline.