Privacy Policy
Facebook Platform Policy Compliance
Data Deletion Request
We comply with Facebook Platform Policy requirements for data deletion. Users can request deletion of their personal data through our automated data deletion endpoint.
Data We Collect
If you use Facebook Login (when available), we may collect:
- Your name and email address
- Profile picture (if provided)
- Facebook user ID (for account linking)
How We Use Facebook Data
Facebook data is used solely for:
- Creating and managing your account
- Providing membership services
- Communicating club updates and events
Data Deletion URL: https://pmadridistabd.com/api/data-deletion
This endpoint handles automated data deletion requests in compliance with Facebook Platform Policy Section 5.2.
Google OAuth & Data Collection
Google Data We Collect
When you choose "Continue with Google", we collect:
- Your name and email address
- Google profile picture (if available)
- Google user ID (for account authentication)
- Basic profile information for account creation
How We Use Google Data
Google data is used exclusively for:
- Creating your PMBD account automatically
- Authenticating your identity
- Providing seamless login experience
- Pre-filling your profile information
Data Sharing & Storage
• We do not share your Google data with third parties
• Your data is stored securely on our servers
• Google only provides the data you explicitly authorize
• You can revoke access at any time through your Google account settings
Google API Compliance: Our use of Google OAuth complies with Google API Services User Data Policy, including the Limited Use requirements.
Information We Collect
Personal Information
- Name, email address, phone number
- Membership details and preferences, including your assigned membership card number
- Payment information for membership fees and purchases
- Jersey and merchandise order details, including name, number, and customisation preferences
- Profile pictures and social media information (if provided)
Usage Information
- Website usage patterns and preferences
- Event participation and attendance records
- Communication history with PMBD
- Device information and IP addresses (used for security monitoring, fraud prevention, and aggregate analytics)
How We Use Your Information
- Membership Management: Process applications, maintain records, and provide member services
- Event Organization: Send event invitations, manage registrations, and coordinate activities
- Communication: Send newsletters, updates, and important announcements
- Website Improvement: Analyze usage patterns to enhance user experience
Legal Basis for Processing (EU/EEA Members)
If you are located in the EU or EEA, we process your personal data under the following legal bases under GDPR:
- • Contract (Art. 6(1)(b)): Processing necessary to provide membership services, process payments, fulfil jersey orders, and manage event registrations
- • Legitimate interests (Art. 6(1)(f)): Website security, fraud prevention, and aggregate analytics to improve our services
- • Consent (Art. 6(1)(a)): Where you have authorised use of Facebook Login or Google OAuth, and for optional marketing communications. You may withdraw consent at any time without affecting prior processing.
Information Sharing
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:
- • With your consent: When you explicitly authorize us to share your information
- • Service providers: With trusted partners who help us operate our services (email services). Membership and purchase payments are collected via personal mobile banking accounts (bKash, Nagad) and bank transfer — payment details you provide are used solely to complete your transaction and are not shared with third parties beyond what is necessary to process it
- • Legal requirements: When required by law or to protect our rights and safety
- • Real Madrid CF: As part of official Peña Madridista registration, we share the following personal data with Real Madrid CF via the Fan Club Member Form: your name, date of birth, nationality, national ID or passport number, address, mobile number, email address, and signature. This sharing is necessary to register you as an official Peña Madridista member. The form also includes optional consent to Real Madrid CF's personalised marketing. You can update both consent preferences at any time in your member dashboard under Preferences, or by contacting us.
Data Security
We implement appropriate security measures to protect your personal information:
Technical Safeguards
- • SSL encryption for data transmission
- • Secure database storage
- • Regular security updates
- • Access controls and authentication
Administrative Safeguards
- • Limited access to personal data
- • Staff training on privacy practices
- • Regular privacy audits
- • Incident response procedures
Data location: Your data is stored on servers operated by our hosting provider. If your data is transferred outside Bangladesh, we ensure appropriate safeguards are in place in accordance with applicable data protection law.
Data breaches: In the event of a data breach that may affect your personal information, we will notify you and the relevant regulatory authority as required by applicable law, including the Bangladesh Personal Data Protection Ordinance 2025 and GDPR where applicable.
Your Rights
You have the following rights regarding your personal information:
- Access: Request copies of your data
- Correction: Update inaccurate information
- Deletion: Request removal of your data
- Portability: Transfer data to another service
- Objection: Object to certain processing
- Restriction: Limit how we use your data
To exercise any of these rights, email pmadridistabd@gmail.com with your request and your membership details for identity verification. We will respond within 30 days. EU/EEA members may also lodge a complaint with their local supervisory authority. To withdraw consent to Real Madrid CF data sharing or marketing, you can update your preferences directly in your member dashboard under Preferences — no need to contact us.
Cookies and Tracking
We use cookies and similar technologies to improve your website experience:
- • Essential cookies: Required for website functionality
- • Analytics cookies: Help us understand website usage
- • Preference cookies: Remember your settings and choices
You can control cookie settings through your browser preferences.
Contact Us
If you have questions about this privacy policy or want to exercise your rights, please contact us:
pmadridistabd@gmail.com
Dhaka, Bangladesh
How Long We Keep Your Data
We retain your personal information for as long as necessary to provide our services and fulfil the purposes described in this policy:
- • Membership records: Retained indefinitely as part of PMBD's historical records, even after membership expires or is cancelled
- • Payment and order records: Retained indefinitely for financial record-keeping and dispute resolution purposes
- • Account data: Retained for as long as your account is active. If you request deletion of your account data, we will anonymise your personal information (name, email, profile picture) while retaining transactional records required for our records
- • Usage logs and session data: Retained for operational and security purposes and periodically cleaned up
To request deletion or anonymisation of your personal data, contact us at pmadridistabd@gmail.com or use the automated deletion endpoint linked in the Facebook compliance section above.
Policy Updates
We may update this privacy policy from time to time. We will notify you of any material changes by email and by posting the updated policy on our website at least 30 days before changes take effect. For changes that require your consent, we will ask for it explicitly. Continued use of our services does not constitute consent to materially changed terms.