NRU Privacy Policy
The Northland Rugby Union (‘NRU’, 'we', 'us', 'our') respects the privacy of the individuals
in relation to whom we collect, use, disclose and hold personal information and is
committed to managing personal information in accordance with the Privacy Act 2020.
This Privacy Policy sets out how we handle your personal information (including the
collection, storage, use and disclosure of your personal information), how you can access
and change your information and how you can provide us with feedback or make a
complaint.
How we collect information about you
We collect personal information about you:
Directly from you when you register for a course, competition or event.
Directly from you when you make enquiries of us or provide us with any personal
information when you communicate with us directly through our websites or via
any other written and verbal communications or through social media.
From other people or organisations when you authorise us to contact them to obtain
personal information about you.
Through your use of our websites.
We also collect personal information from participants through our participation
registration process, meaning any person that has, by completing the participation
registration process, agreed to be bound by any constitution, regulations, bylaws and
policies of the Provincial Union with jurisdiction and control over the competition they are
registered for, as well as World Rugby and NZR constitutions, regulations, bylaws and
policies applying from time to time. For the avoidance of doubt, a participant includes a
player, referee, coach or administrator and any other individual involved in the
organisation or promotion of rugby including a director, other officer, employee or
volunteer of a rugby team, school or club (‘Participant’).
The kind of personal information we collect
We only collect the personal information you give to us or authorise us to collect from
other people or sources. The information we collect may include your name, address, email
address, phone number, gender, date of birth and IP address (including country IP address
originates from). We may also collect any other personal information you may choose to
provide to us or authorise other persons to provide to us.
We also collect personal information from Participants who complete the participation
registration process, as set out in NZR registration forms.
If you choose not to provide us with personal information, we may be unable to provide
access to certain content or services.
58
How we use your personal information
We will primarily use your personal information:
to provide you with information about courses, competitions and events that you
register to attend and renewal opportunities (if applicable);
to provide you information or a response to any enquiries or messages you send to
us, either verbally or written;
to track and analyse user activity on NRU websites; and
for any other purpose that we notify you of at the time your personal information is
collected.
We may communicate with you by email or, where you provide us with your phone
number, by phone call or text/picture/video message.
We also use personal information collected through the participation registration process
for the purposes of:
the general administration of the game of rugby by us, clubs and schools, including
managing registration, managing and dealing with injury and insurance matters,
rugby-related communications, statistical analysis and research; and
the promotion of the game of rugby, including ticketing offers and other marketing
of the game of rugby, together the "Purposes".
NZ Rugby hold Participant personal information on a national database and make
Participant personal information available to the rugby organisation (i.e. club or school)
that a Participant is registered with, the Provincial Union their rugby organisation is
affiliated to, and (if applicable) the Super Rugby Club for their region, for the Purposes.
Participant personal information may also be made available to our service providers and
other persons as we consider appropriate for the Purposes.
Withdrawing consent
If we rely on your consent as our legal basis for processing your personal information, you
have the right to withdraw that consent at any time.
Restricting processing
You can ask us to 'block' or suppress the processing of your personal information in certain
circumstances, such as where you contest the accuracy of that personal information or you
object to us doing so. If you are entitled to restriction and if we've shared your personal
information with others, we will let them know about the restriction where it is reasonably
possible for us to do so.
Right to object
You can ask us to stop processing your personal information, and we will do so, if we are
processing your personal information on the basis of the legitimate interests of us or
a third party, unless we can demonstrate overriding compelling legitimate grounds
for the processing, or the processing is required for the establishment, exercise or
defence of legal claims; or
processing your personal information for direct marketing purposes.
59
How we may share your personal information
We may share your personal information with people and organisations that we may
appoint to carry out administration, courses, competitions, events, processing and other
services on our behalf. These service providers will not be authorised by us to use or
disclose your personal information except as necessary to perform services on our behalf,
or to comply with legislation.
We may also disclose your personal information for the purposes of safety and security to
relevant law enforcement bodies, or as may be authorised by you.
Cookies and analytics
Like many other website operators, we may use 'cookies' on the NRU website. Cookies are
small pieces of information that are stored by your browser on your computer's hard drive
and are used to record how you navigate the NRU website on each visit, including
providing us with information about pages and advertisements (including click through
from emails) which have been viewed, how frequently particular pages are visited and the
most popular areas of the NRU website.
We may use cookies to enrich your experience of using the NRU website by allowing us to
develop and improve the NRU website to reflect your interests by tailoring what you see to
reflect what we have learned about your preferences during your visits to the NRU website.
This will mean some of your stored browsing history can be accessed by us.
In addition to cookies, we may use Google Analytics and other tracking software including,
but not limited to, Google, Facebook, Instagram and Twitter retargeting throughout the
NRU website to understand and optimise user experience and to improve NRU
advertising. This tracking software collects and analyses certain types of information,
including cookies, IP addresses, device and software identifiers, referring and exit URLs,
onsite behaviour and usage information, and other similar information.
We and any of our third-party analytics service providers may:
use cookies to anonymously track and target advertising based on your browsing
behaviour; and
use the cookies of that analytics service provider together with the cookies of
another analytics provider to inform, optimise, and serve ads based on a user's past
visits to the NRU website.
The NRU website may also detect and use your IP address or domain name for internal
web traffic monitoring and capacity purposes, or to otherwise administer the NRU website,
but no personal information is collected.
Patterns of use by visitors to NRU websites may be tracked for the purposes of providing
improved service and content based on review of user’s website traffic patterns.
Turning off cookies and opting out of analytics
You do not have to accept cookies and can change your browser settings to prevent cookies
being stored on your computer. But if you do turn cookies off this will limit the service that
we are able to provide to you and may affect your visitor experience.
For further information on cookies and how to switch them off see
www.allaboutcookies.org.
60
You can opt-out of Google Analytics using the ads settings at
(www.google.com/settings/ads).
Storage and security
We will only hold your personal information for as long as necessary for the purposes for
which it was collected (unless otherwise required by law).
We will take reasonable steps to store your personal information safely and securely
against loss, unauthorised access, disclosure, use, modification or other misuse. However,
we cannot guarantee the security of information you provide to us via electronic means as
information sent over the internet may be unsecure.
Overseas disclosures
Your personal information may be held by us in New Zealand. It may also be held on our
behalf by service provider.
Accessing and correcting your personal information
You are entitled to request access to, and the correction of, the personal information we
hold about you.
If the information you have requested can be readily retrieved, and subject to any lawful
grounds for withholding, we will provide you with a copy of the personal information you
have requested.
You may update or correct your personal information by contacting us in writing or by
email. If we agree with the correction requested, we will make the change. If we do not
make the correction requested, you can ask for your request to be kept with the personal
information of yours that we hold.
Requesting erasure of your personal information
You can ask us to delete or remove your personal information in some circumstances, such
as where we no longer need it, if you withdraw your consent (where applicable) or you
validly object to the processing. If you are entitled to erasure we will comply with your
request as soon as reasonably practicable. Note, even after our reasonable efforts to erase,
there may be some residual information that could remain within our databases and other
records which is not removed. We may also need to retain certain information for
recordkeeping purposes, for compliance with our legal obligations, for the establishment,
exercise or defence of legal claims and/or to complete any transactions started before your
request is received. If we have shared your personal information with others, we will let
them know about your request where reasonably possible.
Data portability
You have the right, in certain circumstances, to obtain personal information you've
provided us with (in a structured, commonly used and machine-readable format) and to
reuse it elsewhere. You may also ask us to transfer this data to a third party of your choice
where this is technically practicable.
61
Right to lodge a complaint with the supervisory authority
If you are based in the European Economic Area (EAA) and have a concern about any
aspect of our privacy practices, including the way we've handled your personal
information, you can report it to the relevant Supervisory Authority in the EEA.
If you ask us, where it is reasonably possible and lawful for us to do so, we will tell you who
we have shared your personal information with so that you can contact them directly.
Please be aware that some of these rights may be limited or unavailable, for example where
we have an overriding interest or legal obligation to continue to process the data.
Obligation of NRU to notify privacy breaches
If NRU has a privacy breach that has caused serious harm to you (or is likely) to do so, we
will need to notify the Office of the Privacy Commissioner and any affected people
(including you) as soon as possible after becoming aware of the privacy breach.
Privacy Policy review and update
We may, from time to time, amend or update this Privacy Policy. Any changes to this
Privacy Policy will be available on the website this Privacy Policy is located.
Contact us
You can contact us at any time regarding your personal information by the following
means:
Address: Northland Rugby Union, 50 Kioreroa Road, Whangarei | PO Box 584,
Whangarei
Email: reception@northlandrugby.co.nz
Adopted – March 2021
Reviewed – Biennially
Last Reviewed – March 2023
