The NRL recognises the importance of your privacy and your right to control your Personal Information and is committed to complying with applicable Privacy Laws.
The NRL is always seeking to better understand how Players, Rugby League Administrators, Clubs, States and, most importantly, NRL fans interact, communicate and otherwise share Personal Information in order to continue to develop the game of Rugby League. The NRL has invested heavily, in conjunction with the Clubs, States and selected third parties, to establish and administer a best practice preference centre and data storage architecture for processing your Personal Information (Rugby League Exchange).
2. ANONYMITY AND PSEUDONYMITY
We offer you the opportunity, wherever it is lawful and practicable, of not identifying yourself, or of using a pseudonym, when entering transactions, or otherwise dealing with, the NRL in relation to a particular matter.
3. WHAT KINDS OF PERSONAL INFORMATION DO WE COLLECT?
3.1 The types of Personal Information the NRL may collect depends on the purposes for which it is collected but may include (without limitation):
(a) your name, gender, date of birth, occupation, residential address, email address, telephone number and other contact details;
(b) your favourite NRL Club and other information dealings with the NRL, the Clubs, States or selected ticketing companies such as memberships, subscriptions and attendance history at NRL Matches (whether you have used your membership to purchase tickets or as a casual ticket purchaser) ; and
(c) purchasing preferences and financial details.
3.2 The NRL will not collect Sensitive Information about you unless:
(a) you have consented to the collection of such specific Sensitive Information;
(b) the NRL is specifically permitted to do so under the NRL Rules, including for health, medical and anti-doping testing purposes and investigation of disputes (whatever the nature of the dispute);
(c) the collection is required or authorised by law; or
(d) the collection is otherwise permitted under Privacy Laws.
4. HOW DO WE COLLECT YOUR PERSONAL INFORMATION?
4.1 Where it is reasonable and practicable to do so, the NRL will collect your Personal Information from you. If you are a Minor, the NRL may collect Personal Information about you from your parent or legal guardian.
4.2 In addition to collecting Personal Information directly from you, the NRL may also collect Personal Information from:
(a) the Clubs, States and selected third parties (for instance, Ticketek and Ticketmaster) as part of the Rugby League Exchange; and
(b) a third party (such as a corporate partner of the NRL or Clubs, or information that is on public record or which is otherwise unsolicited).
5. WHY DO WE COLLECT, USE, HOLD AND DISCLOSE YOUR PERSONAL INFORMATION?
5.1 The NRL generally only collects, uses, discloses or holds Personal Information that is reasonably necessary for the NRL to perform one or more functions or activities in administering the game of Rugby League (the primary purpose), including:
(a) organisation, conduct and promotion of Competitions and Matches (including for the purpose of providing information and making ticket offers to you);
(b) direct communication with you by Rugby League Administrators;
(c) disclosure to Rugby League Partners, unless you have indicated that you do not want to receive any communication from Rugby League Partners;
(d) compliance with the NRL Rules, including the administration and development of Rugby League (if you are a Participant); and
(e) serving advertising that is suited to your age.
5.2 Wherever practicable, the NRL will inform you more specifically of the primary purpose of a collection as part of its collection statement, which will be made available to you at the time of the collection.
5.3 When we collect your Personal Information, your Personal Information will only be used or disclosed for the primary purpose for which it was collected, a related secondary purpose, in accordance with any consent you grant the NRL or as otherwise lawfully required (e.g. where your Personal Information is requested by a law enforcement agency).
5.4 The NRL may use or disclose your Personal Information to a Rugby League Administrator for the secondary purpose of direct marketing communication, if:
(a) the NRL collected the information from you;
(b) you would reasonably expect your Personal Information would be used or disclosed for direct marketing;
(c) the NRL has provided a simple means by which you can request not to receive direct marketing; and
(d) you have not made a request not to receive direct marketing.
5.5 Where you would not reasonably expect your Personal Information to be used for direct marketing, or the information has been collected from a third party (for instance, from the Clubs as part of the Rugby League Exchange), the NRL may use the information for the secondary purpose of direct marketing communication only where:
(a) you have consented to the use or disclosure for direct marketing, or it is impracticable for the NRL to seek your consent before that use;
(b) You have not made a request to the NRL not to receive direct marketing communication;
(c) In each direct marketing communication, the NRL always prominently displays a simple notice or actionable option that you may express a wish not to receive any further direct marketing communication; and
(d) each written direct marketing communication by the NRL with you sets out the NRL’s contact details including business address, telephone and fax numbers and email address.
6. WHO DO WE DISCLOSE YOUR PERSONAL INFORMATION TO?
(a) disclose your Personal Information to its affiliates (including without limitation the States, a Competition Administrator and a Club) to enable them to administer the game of Rugby League in their area and provide related activities and services; and
(b) unless you inform the NRL otherwise, disclose your information to Clubs, States, Rugby League Partner and selected other partners as part of the Rugby League Exchange to enable such recipients to provide you with information, materials and promotional opportunities. This sharing of Personal Information via the Rugby League exchange platform will assist the NRL, Clubs, States, Rugby League Partners and selected other partners to more effectively administer promotional and information sharing activities
6.2 The NRL may disclose your Personal Information to its service providers such as ticketing agents, mail houses or other similar third-party organisations for the purpose of implementing the primary purposes, including fulfilling ticket requests and communicating Rugby League related offers. For example, the NRL uses third party credit card payment gateway services on its website. If you pay for tickets or services through the NRL’s website, the NRL will be required to provide certain financial details to the third-party service provider to effect the transaction. The NRL requires these third-party organisations to keep your contact details and Personal Information confidential and only use them for the designated purpose.
7. DATA QUALITY AND SECURITY
7.1 The NRL will take reasonable steps to:
(a) make sure that the Personal Information it collects, uses or discloses is accurate, complete and up-to-date; and
(b) protect the Personal Information it holds about you or that is within its direct control from misuse, interference and loss and from unauthorised access, modification or disclosure.
7.2 The NRL will take reasonable steps to destroy or permanently de-identify Personal Information if it is no longer needed for any purpose for which the information may be used or disclosed, unless the NRL is required by or under an Australian law, or a Court order, to retain such information.
8. OPENNESS, ACCESS AND CORRECTION
8.1 The NRL, as part of the Rugby League Exchange, developed a best practice preference centre designed to provide you with greater control over the Personal Information the NRL collects from you or about you from the Clubs, States and other third parties.
8.2 The preference centre will offer you a single-point-of-access in relation to your Personal Information held by the NRL. In order for the NRL to be reasonably satisfied of your identity and right to access Personal Information, you will be required to use your login credentials to access the preference centre. If you don’t have login credentials with us, you can still opt out of and otherwise manage your preferences through links in emails and other communications we send to you from time to time. You will be responsible for ensuring your Personal Information held in the preference centre remains accurate, complete and up to date. The preference centre reflects the NRL's commitment to open and transparent management of your Personal Information.
8.3 Separate from the preference centre and upon your request, the NRL will take reasonable steps to let you know, in general terms, what sort of Personal Information it holds, for what purposes, and how it collects, holds, uses and discloses that information.
8.4 Before supplying any Personal Information to you, the NRL must be reasonably satisfied as to your identity (for example, by asking to see your passport or driver’s licence). The NRL is not under any obligation to provide Personal Information to you where the NRL is not required to do so under the Australian Privacy Principles or otherwise at law.
8.5 If the NRL refuses to provide you with access to Personal information it holds on you in the manner requested by you, the NRL will either:
(a) take such steps (if any) as are reasonable in the circumstances to give access to the information in a way that meets the needs of the NRL and you; or
(b) provide you with a written notice that sets out:
(i) the reasons for the refusal except to the extent that, having regard to the grounds for the refusal, it would be unreasonable to do so; and
(ii) the mechanisms available to complain about the refusal.
(a) the NRL is satisfied that, having regard to a purpose for which the Personal Information is held, the information is inaccurate, out-of-date, incomplete or irrelevant or misleading; or
(b) you request the NRL to correct your Personal Information,
the NRL will take reasonable steps to correct the Personal Information to ensure that, having regard to the purpose for which it is held, it is accurate, up-to-date, complete, relevant and not misleading. The NRL will not charge you for making such a request or for correcting the information.
8.7 If the NRL refuses to correct the Personal Information at your request, the NRL will provide you with a written notice that sets out the same matters listed in clause 8.5(b).
9. TRANSBORDER DATA FLOWS
9.1 Subject to clauses 9.2 and 9.3, the NRL will not transfer your Personal Information to an overseas recipient unless it has first taken steps reasonable in the circumstances to ensure that the information that it transfers will not be held, used or disclosed by the recipient of the information inconsistently with, or otherwise in breach of, the Australian Privacy Principles (for example, NRL may adopt appropriate contractual clauses with overseas recipients that ensure their compliance with the Australian Privacy Principles). This clause does not apply to the transfer of Personal Information in accordance with the NRL Rules, including to facilitate the registration of a Player by an international Rugby League association.
9.2 We may disclose your Personal Information to overseas recipients for things such as processing membership and hosting services, most likely in China, the United States and New Zealand, although countries where such recipients are located may vary.
9.3 The NRL may transfer Personal Information about you to someone who is in a foreign country if:
(a) the NRL reasonably believes that the recipient is subject to a law or binding scheme that has the effect of protecting the information in a way that is, overall, substantially similar to the Australian Privacy Principles and there are mechanisms available to you to enforce that protection or scheme; and
(b) you expressly consent to the transfer after the NRL has informed you that the Australian Privacy Principles will no longer apply if you provide your consent.
10. INQUIRIES PROCEDURE
The Privacy Officer
Rugby League Central
Moore Park NSW, Australia 2021
+61 9359 4000
10.2 At all times, privacy complaints will be treated seriously, dealt with promptly and confidentially, and will not affect your existing obligations or commercial arrangements with the NRL.
In this Policy:
Club means any Club registered with the NRL or the States from time to time.
Club Official means any person involved with the administration, management or organisation of a Club (whether paid or unpaid).
Competition means any competition, tournament or league registered or carried out by the NRL or the States including the pre-season, season proper, finals series and any post season tournament or knockout cup competition and any other football competition or tournament.
Competition Administrator means the entity responsible for the conduct and staging of a Competition and includes (without limitation) the NRL and the States (including the divisions and associations that make up the States).
Match means a game of Rugby League football and includes any match staged, participated in, sanctioned by, or played under the auspices of the NRL, the Leagues or a Competition Administrator (including any match held as part of a Competition).
Match Official means any person in charge of safety or any other person appointed by the NRL, the States or a Competition Administrator to assume responsibility in connection with a Match.
NRL Privacy Officer means the personappointed by the NRL from time to time to deal with complaints and inquiries under this Policy.
NRL Rule smeans its constitution, rules, regulations, policies and procedures and any other ancillary document that governs the NRL in administering the game of Rugby League, as promulgated and amended from time to time.
(a) a Club Official, Match Official or Team Official;
(b) an employee, consultant, officer or director of the NRL, the States or a Competition Administrator; or
(c) a member of a council, committee, panel or body constituted by the NRL, the States or a Competition Administrator.
Player means any person who is, from time to time, registered to a Club or is selected as a member of a Representative Team, whether that person is male or female, junior or senior or an amateur or professional.
Privacy Act means the Privacy Act 1988 (Cth).
Representative Match means a team participating in a Representative Match.
Representative Team means any team selected to participate in a Representative Match.
Rugby League Administrators mean the NRL, the States, a Competition Administrator or a Club (as the case may be) with which the Participant has a direct relationship, including for the purposes of registration with the League and participation in a Competition.
Rugby League Partners means any entity that has a commercial agreement or arrangement with the NRL, Member Association, Competition Administrator or Club (as the case may be) and which you may also have a direct relationship with (including by participation in a Competition).
States means Queensland Rugby League, New South Wales Rugby League, Country Rugby League of NSW and the States and Territories of Australia that do not currently have a Club competing in the NRL Competition based within their territorial limits.
Team Official means any personnel involved with the management, preparation or participation of a Club’s team (whether paid or unpaid), including the coaches, managers, medical staff (including team or match day doctor), physiotherapists, gear persons and other support staff.