Ophir Rugby Football Club ("Ophir RFC", "the Club", "we", "us") is committed to protecting your personal data and maintaining compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This statement explains how we collect, use, store, and share information when you visit www.ophirrugby.com or interact with our digital channels.

Data Controller: Ophir Rugby Football Club

Home Ground: Ulster University Jordanstown (UUJ), Co. Antrim, Northern Ireland

2. What Information We Collect

We may collect personal data when you use our website, register for membership, sign up for news, or buy tickets/merchandise:

Contact Information: Name, email address, phone number, and postal address.

Membership Details: Age, emergency contacts, medical disclosures (where relevant for playing safety), and team allocations (Mens, Womens, Azlans, Youth, Mini).

Technical IP address, browser type, device information, and site interaction data via essential and performance cookies.

Transaction Payment details (processed securely via regulated third-party payment gateways; we do not store full payment card details).

3. Legal Grounds for Processing Data

We process your personal information under the following UK GDPR legal bases:

Contractual Necessity: To manage membership, run fixtures, fulfill shop orders, and provide club services.

Legitimate Interests: To communicate club updates, maintain team performance records, organize events, and manage club operations.

Legal Obligation: To comply with health and safety regulations, safeguarding mandates, and tax/accounting rules.

Consent: Where you opt-in to non-essential direct marketing emails or cookies. You can withdraw consent at any time.

4. How We Use Your Data

Your data is used to:

Administer club memberships, player registrations, and matchday logistics.

Communicate club news, match fixtures, results, and fundraising updates.

Ensure athlete welfare, emergency response readiness, and child protection/safeguarding.

Process payments for kit, tickets, and social events.

5. Sharing Your Data

We do not sell or rent your personal data to third parties. We only share information with:

Governing Bodies: Ulster Rugby and the Irish Rugby Football Union (IRFU) for competition management, player registration, and insurance.

Service Providers: Web hosting, database management (e.g., Pitchero or similar sports platforms), and payment processing providers operating under strict data processor contracts.

Legal Authorities: Where required by law or to protect safety.

6. Cookies & Tracking Technologies

Our website uses essential cookies to ensure basic site functionality. Non-essential cookies (such as analytics to help us improve site navigation) are deployed only with your consent given through our cookie banner. You can manage or block cookies through your browser settings at any time.

7. Data Retention & Security

We employ technical and organizational safeguards to prevent unauthorized access, loss, or disclosure of your data. We retain personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with statutory legal requirements.

8. Your Data Protection Rights

Under the UK GDPR, you have the right to:

Access: Request a copy of the personal data we hold about you.

Rectification: Request correction of inaccurate or incomplete data.

Erasure ("Right to be Forgotten"): Request deletion of your data where no overriding legal basis requires retention.

Restriction & Objection: Object to processing based on legitimate interests or restrict how your data is used.

Data Portability: Request transfer of your data to another organization.

To exercise any of these rights, please contact the Club Committee Secretary at [insert contact email]. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.