Privacy Policy
This Privacy Policy explains how RugbyConnector (“RugbyConnector”, “we”, “us”, “our”) collects, uses, shares, and protects personal data when you use our websites, mobile apps, and related services (collectively, the “Services”). If you do not agree with this policy, please do not use the Services.
What data we collect
- Account & profile data: name, email, phone (optional), password, location, profile photos, playing position(s), experience, qualifications, eligibility to work, and other fields you add.
- Club/role data: club details, role descriptions, compensation/benefits, location, and preferences.
- Usage & device data: IP address, device identifiers, browser type, OS, pages viewed, interactions, referring URLs, approximate geolocation, and crash logs.
- Communications: messages you send via the platform, support requests, survey responses.
- Payments: billing name, address, VAT number (if applicable), last four digits of card, card expiry, payment IDs, and transaction metadata (handled by our payment processor). We do not store full card numbers.
- Marketing preferences: consents and unsubscribes, campaign engagement.
How we use your data (purposes & legal bases)
We process personal data under the GDPR using the following legal bases:
- To provide and operate the Services (e.g., account creation, profiles, matching, messaging, posting roles, applications) — contract necessity.
- To maintain safety, security, fraud prevention, and integrity (e.g., detecting spam/scams, abuse) — legitimate interests and/or legal obligation.
- To improve and develop the Services (analytics, A/B tests, troubleshooting) — legitimate interests.
- To communicate with you about updates, service messages, and support — contract necessity and legitimate interests.
- To send marketing (newsletters, offers) — consent where required; you can withdraw consent at any time.
- To process payments and invoicing — contract necessity and legal obligation.
Sharing your data
We share personal data with:
- Service providers / processors: hosting, analytics, security, customer support, email delivery, and payment processing. We require appropriate data protection commitments.
- Other users: information you choose to make public on your profile, club pages, job/role posts, and applications will be visible to other users as intended by the feature.
- Affiliates and partners: where needed to operate the Services or with your consent.
- Law enforcement / regulators: where required by law or to protect rights, safety, and property.
- Business transfers: in connection with a merger, acquisition, or asset sale.
International data transfers
If we transfer personal data outside the EEA/UK, we will rely on adequacy decisions or Standard Contractual Clauses and implement additional safeguards where appropriate.
Retention
We keep personal data only as long as necessary for the purposes set out above:
- Account/profile data: for the life of the account; on deletion, we retain minimal logs and records for up to 6 years for compliance and audit.
- Payment and invoicing records: 7 years (or longer if required by tax law).
- Logs and security data: up to 12 months unless required for investigations.
- Application/job post archives: up to 24 months after closure to support audit and dispute resolution.
Your rights (EEA/UK)
You have the right to access, rectify, erase, restrict, object, port your data, and to withdraw consent at any time (where processing is based on consent). You also have the right to lodge a complaint with your local supervisory authority. In Ireland, this is the Data Protection Commission (www.dataprotection.ie).
Exercising your rights & contacting us
- Data requests: Email [privacy@rugbyconnector.com] with the subject line “Data Request” and specify your request (access, deletion, etc.). We may need to verify your identity.
- Data Protection Contact / DPO (if appointed): [Name], [Email], [Postal Address].
Security
We use organizational and technical measures, including encryption in transit, role-based access, least-privilege by default, vulnerability management, and regular backups. No system is 100% secure; users must also safeguard their credentials.
Children
The Services are not intended for users under 16 (or the age required by local law). We do not knowingly collect data from children; if you believe a child has provided data, contact us to delete it.
Controllers & roles
RugbyConnector is the data controller for personal data processed through the Services. Clubs and coaches may act as independent controllers for candidate data they download or process outside the platform. Each party is responsible for complying with applicable laws for the data it controls.
Cookies & similar technologies
We use cookies and similar technologies for authentication, preferences, analytics, and marketing. Where required, we obtain consent via a banner. You can manage preferences in our Cookie Settings and browser settings. See our Cookie Policy for details.
Changes to this policy
We may update this policy from time to time. Significant changes will be notified via email or in-app notice. Continued use after the effective date means you accept the updated policy.
