Privacy Policy
1. Introduction
At Orrell Rugby, accessible via orrellrugby.com, we are committed to safeguarding and respecting your privacy. We believe in transparency, accountability, and responsible stewardship of personal data. This Privacy Policy outlines how we collect, process, store, and share your personal information, in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”). By using our website orrellrugby.com, contacting us, or submitting your information, you agree to the practices described herein.
2. Scope of the Policy and Data Controller Role
This Privacy Policy applies to all personal data collected through orrellrugby.com and any related services, interactions, or communications. For the purposes of applicable data protection laws, Orrell Rugby is the data controller of the personal information you submit. If you have any concerns or questions regarding your personal data, please direct your correspondence to [email protected].
3. Categories of Data We Process
We collect and process various categories of personal data to provide and improve our services, respond to inquiries, and deliver a personalized experience. These categories include:
a) Usage Data
Includes information such as your IP address, browser type, operating system, referring pages, pages visited, time spent on the website, and other diagnostic data collected through cookies and tracking technologies.
b) Account Data
When you register or create an account, we may collect your full name, postal address, email address, phone number, and relevant membership or affiliation details.
c) Profile Data
This comprises your preferences, browsing behavior, past purchases or bookings, favorite products, and engagement with our digital services.
d) Communication Data
Includes the contents of your inquiries, messages sent to customer support, communication preferences, and correspondence history.
e) Technical Data
Includes device type, screen resolution, operating system version, mobile network information, and browser plug-in details for technical diagnostics and compatibility.
f) Transaction Data
Comprises details related to past payments made through orrellrugby.com, banking or PayPal identifiers (where applicable), billing and delivery addresses, and transaction confirmations.
g) Preference Data
Includes your opt-in consent for marketing communications, product and service interests, and promotional campaign interaction data.
4. Legal Bases for Processing
We process your personal data under one or more of the following lawful bases as provided under Article 6 of the GDPR and supported by CCPA principles:
– Consent: Where you have provided your explicit consent to the processing of your data (e.g., newsletter sign-ups or marketing preferences).
– Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party (e.g., ticket purchases or membership services).
– Legitimate Interest: For purposes such as improving user experience, ensuring system security, customizing content, or managing communications.
– Legal Obligation: Where we are required to comply with legal or regulatory responsibilities such as financial record-keeping or fraud prevention.
5. Your Rights
As a user under GDPR and CCPA, you have specific data rights. We are committed to respecting and facilitating your ability to exercise these rights:
– Right of Access: You may request confirmation of whether we are processing your personal data and, if so, request a copy.
– Right of Rectification: You may correct or request correction of any inaccurate or incomplete data.
– Right to Erasure: You may request deletion of your personal information, subject to legal or operational constraints.
– Right to Restrict Processing: You may request restriction of processing under certain circumstances.
– Right to Data Portability: You may request that your information be transported to another service provider in a structured, machine-readable format.
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before fulfilling such requests.
6. Security Measures
We implement a broad array of technical and organizational safeguards to protect personal data from unauthorized access, disclosure, alteration, or destruction, including:
– Data encryption in transit and at rest using industry standards;
– Access controls and user authentication mechanisms;
– Regular backups of critical systems and databases;
– Staff training on privacy and data handling;
– Strict internal protocols for data access and handling.
7. International Transfers
Where personal data is transferred outside the European Economic Area (EEA) or other jurisdictional boundaries—such as for hosting, customer relationship management, or secure payment processing—we ensure appropriate safeguards, such as Standard Contractual Clauses or equivalent contractual, legal, or organizational arrangements, are in place.
8. Data Retention
We retain personal data only so long as necessary to fulfill the purposes for which it was collected, including:
– Account Data: Retained while your account remains active or as required for service delivery;
– Transaction Data: Retained for 7 years for financial and legal compliance;
– Usage Data: Retained for 12 months for performance analysis and security auditing;
– Communication Data: Retained for up to 3 years for litigation preparation and support tracking;
– Marketing Data: Retained until consent is withdrawn or interest is no longer reasonably inferred.
Data is securely disposed of once no longer required.
9. Cookie Policy
We use cookies and similar technologies to enhance user experience and collect information. Cookies fall into the following categories:
– Essential Cookies: Required for proper website functioning and account access;
– Functional Cookies: Facilitate user preferences and personalization;
– Analytics Cookies: Analyze usage patterns and performance (e.g., Google Analytics);
– Performance Cookies: Help identify stability and responsiveness issues.
10. Cookie Management & Legal Compliance
By using orrellrugby.com, you consent to the use of cookies in accordance with this policy. Consent for non-essential cookies is obtained through our cookie banner. Users have the right to withdraw this consent at any time.
You may modify or revoke your cookie preferences at any time via your browser settings or by using our cookie management interface. We respect “Do Not Track” signals as mandated by applicable privacy laws, including the CCPA.
11. Children’s Privacy
orrellrugby.com is not directed to children under the age of 13, and we do not knowingly collect any data from children under this age. If we become aware that we have inadvertently received information from a child under 13, we will delete such data promptly and comply with all parental consent or notification obligations as required by law.
12. Policy Updates
We reserve the right to update this Privacy Policy to reflect changes in technology, legal requirements, or our privacy practices. Any material changes will be communicated through prominent notice on our website. Please revisit this page from time to time to stay informed.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how your data is managed, please contact us at:
Email: [email protected]
Website: orrellrugby.com
We are committed to full compliance with GDPR, CCPA, and other relevant data protection regulations. Your privacy matters to us—please don’t hesitate to reach out should you have any questions or wish to exercise your data rights.