Rugby Xplorer™ Platform Privacy Policy

1. Overview

1.1 Rugby Xplorer™ is owned by Rugby Australia Ltd (RugbyAU) and is an all-in-one registration, competition management and digital content SaaS platform operated on a not-for profit basis, in Australia by Rugby AU, and in other parts of the world by Rugby Xplorer LLC (RXLLC) and Rugby AU’s other authorised related entities and affiliates (collectively,Rugby Xplorer, we,our, or us).

1.2 We are committed to protecting and respecting your privacy. This policy (Privacy Policy) applies to the types of information we may collect about you, or that you may provide, when you use the Rugby Xplorer™ websites (including https://xplorer.rugby/ and any of its subdomains), Rugby Xplorer™ web and mobile applications and related Rugby Xplorer™ tools and services (collectively, the RX Platform) and associated services. This Privacy Policy also describes our practices for collecting, using, maintaining, protecting, and disclosing that information.

1.3 Use of the RX Platform is governed by this Privacy Policy and our Terms of Service. By accessing or using the RX Platform, you acknowledge that you have read, understood and agreed to be legally bound by and comply with this Privacy Policy and our Terms of Service. If any term in this Privacy Policy is unacceptable to you, please do not use the RX Platform or provide your Personal Information via the RX Platform. If you do not wish to provide your Personal Information via the RX Platform, you may not be able to participate in the competitions that are administered by a Rugby Body that uses the RX Platform, or Rugby Xplorer or the Rugby Body may not be able to provide you with the product or service you are after. This Privacy Policy may change from time to time and your use of the RX Platform after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

1.4 This Privacy Policy does not apply to information collected by any third party, including through any website, application or content (including advertising) that may link to, be embedded or hosted on, or otherwise accessible from or on the RX Platform. Also, you may be subject to different privacy policies, terms of use and/or terms of service for the Rugby Body whose website, application and/or content is hosted, and which you may access, on the RX Platform. For example, the Privacy Policy of Rugby AU can be found by clicking here and the Privacy Policy of USA Rugby can be found by clicking here . This Privacy Policy applies only to the data practices of Rugby Xplorer in connection with the RX Platform and information collected in connection with it, and not to the data practices of third parties that we do not control or with respect to information collected by us that is not connected to the RX Platform or your use of it.

1.5 In this Privacy Policy, when we say:

Participants, we mean players, match officials, coaching staff, administrators, volunteers and other individuals involved in playing, officiating and administering Rugby for or on behalf of a Rugby Body and who may have a registered to do so by creating an account with their Rugby Body via the Rugby Body Website or Rugby Body App;

Personal Information, we mean information that is defined as personally identifiable information under applicable law and may include Sensitive Information described in Section 2 of this Privacy Policy;

Rugby means the game of rugby union including any derivatives of the game;

Rugby Body, we mean each international, regional or national Rugby governing body and each of their affiliated members (including but not limited to clubs, schools, universities, colleges, associations and other Rugby governing bodies) that use the RX Platform (including through the use of a Rugby Body Website or Rugby Body App) to administer Rugby in their relevant jurisdiction and engage with Participants and Supporters within that jurisdiction and from around the world;

Rugby Body Website orRugby Body App, we mean the official branded website or web or mobile application of a Rugby Body hosted on the RX Platform;

Supporters, we mean visitors to, or users of, the RX Platform, a Rugby Body Website and/or Rugby Body App who are not also Participants.

2. Information we collect about you and how we collect it

2.1 Information about you, your participation / interests in rugby and payment details:We collect several types of information including Personal Information from and about users of the RX Platform. This includes:

• Depending on whether you are a Participant (and the type of Participant you are) or a Supporter, the following information:

  • your name, residential and postal address, email address, telephone number and date of birth;

  • unique identifiers such as your username and password;

  • your credit card, payment and billing information;

  • your marital status, occupation, interests and other biographical information;

  • photographs and/or videos of you;

  • details about your performance and, where applicable, your individual development plan;

  • Rugby Bodies with whom you have relationships or are registered;

  • details of Rugby programs, fixtures and competitions you have participated in;

  • details of memberships, subscriptions, items you have ordered or purchased via the RX Platform (including via third party platforms such as ticketing agencies linked to the RX Platform);

  • details of Rugby matches or training sessions you have attended;

  • details of any accreditations you hold and education / training courses you have completed;

  • your participation status and history (whether as a player, coach, official, volunteer, etc);

  • your relationships to other users on the RX Platform;

  • details of any disciplinary breaches you may have been involved in;

  • cases and queries you have raised with us with respect to the RX Platform;

  • your availability and preferences (including times and locations/venues) for scheduling purposes;

  • notes and commentary relevant to you or your Rugby team;

  • information about your use of the RX Platform, how you input data and the data you input;

  • opinions and beliefs provided in surveys and questionnaires conducted via the RX Platform; and

  • any other information we specifically request.
    

• Sensitive Information: this includes the following information (where applicable) about your health or other sensitive personal information:

  • your height and weight;

  • information about your health (such as injuries you have suffered playing Rugby e.g., concussion);

  • medical and injury history, medications and supplement use for professional and semi-professional players through an athlete data management system administered by the relevant Rugby Body. For example, in Australia, the athlete data management system administered by Rugby AU in accordance with the Rugby AU Medical Policy and Rugby AU Sports Supplements Policy;

  • information about your eligibility to participate in Rugby in the capacity in which you participate or intend to participate such as your criminal history or authority to work with children;

  • information about your racial or ethnic origin;

  • information regarding your gender; and

  • information necessary to administer the relevant policies of a Rugby Body.

We collect this information:

• directly from you when you provide it to us.

• automatically as you navigate through the RX Platform (e.g., usage details, IP address, and information collected through cookies, web beacons, and other tracking technologies).

• from publicly available sources or third parties, for example, from other Participants (such as parents, players, coaches or the staff of a Rugby Body including tournament directors, competition managers and team managers) or other third parties, including other Rugby governing bodies and data providers.

2.2 Information you provide to us directly: the information we collect on or through the RX Platform may include:

• information that we collect when you browse the RX Platform or a Rugby Body Website or download one of the Rugby Explorer™ mobile apps or a Rugby Body App. Even without creating an account on the RX Platform, we still may collect from you some of the information described in thisSection 2: Information we collect about you and how we collect it;

• information that you provide on the RX Platform, including information provided when you sign in or register for an account on the RX Platform or with a Rugby Body or for services provided by one of our affiliates, or through communications with you through the RX Platform or as a result of any services provided to you in connection with the RX Platform;

• information to process or respond to your inquiries related to requests for payment, customer service; technical support and when you provide feedback on the RX Platform, including payment processing information that includes billing information, such as a name, address, email address, and payment card information. When you provide or update your payment processing information, we transmit the payment via an encrypted connection to a PCI compliant third-party credit card processor. We do not collect or store your full credit card details;

• records and copies of your correspondence (including email addresses) if you contact us, such as when you report an issue with the RX Platform or associated services;

• information or content that you provide for display or posting on the RX Platform including information that you may post on your social media accounts if you have linked them with your RX Platform account. Please do not provide information for display or posting on the RX Platform that you do not want others to save or share. For example, when you upload photos or videos to the RX Platform, a Rugby Body Website or Rugby Body App, those files may contain location information or other metadata. This metadata may be accessible to others if you share such content on the RX Platform; and

• your search queries on the RX Platform.

2.3 Information we collect about you: as with many other websites and applications, as you navigate through and interact with RX Platform, we may use automatic data tracking technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• details of your visits to the RX Platform, including traffic data, location data, logs, language, date and time of access, frequency, and other communication data and the content, features, resources and tools that you access and use on the RX Platform;

• information about the devices you use and Internet connection, including your IP address, host domain, browser types, browser language, operating system, platform type, device types, and device IDs such as unique identifiers or advertising identifiers;

• Details of referring websites (URL). We also may use these technologies to collect information about your online activities across third-party websites or other online services (behavioural tracking);

• usage information, which may include files you download, domain names, landing pages, your browsing activity, pages viewed, advertising viewed or visited, forms or fields you complete or partially complete, search terms, whether you open an email and your interaction with the content, access times, and error logs, and other similar information; location information, which may include the country, city, state/region and ZIP/Postal code associated with your IP address, information derived through Wi-Fi triangulation,

• precise location information from GPS-based functionality on your mobile devices or from your use of the Rugby Xplorer™ mobile apps or a Rugby Body App, and with your consent, your precise GPS information; viewing behaviour, which may include the content you view, how long you watch each video, the quality of the service you receive (e.g., buffering, load times) as well as advertisements displayed on the pages you have visited; and

• offline information, which may include certain information that may also be stored while you are offline and transmitted to us when you next connect to the Internet, regardless of where you connect from or the device you use to connect.

The information we collect automatically includes statistical data and may also include Personal Information. We may also maintain it or associate it with Personal Information you provide to us or that we collect in other ways or receive from third parties. Collecting and using this information helps us to improve the RX Platform and to deliver a better and more personalised service, including by enabling us to:

• Estimate how individuals access and use the RX Platform;

• Store information about your preferences;

• Speed up your login to, and navigation through, the RX Platform;

• Recognise you when you return to the RX Platform.

Information collected about you using web analytics, cookies and other tracking technologies

As with many other websites and applications, the RX Platform may use ‘cookies’, web beacons and other technologies to help us deliver content specific to your interests, to process your requests, and/or to analyse your visiting patterns. We may collect the following types of information about your visit to the RX Platform including: the domain from which you access the Internet; IP address; operating system and information about the device or browser used when visiting the RX Platform; date and time of your visit; content you visited; general location; and search information provider (such as google, edge or Bing) and website referral source (such as email notice or social media platform) that connected you to the RX Platform.

The RX Platform uses certain types of cookies: single-session (temporary) and multi-session (persistent). Temporary cookies last only as long as your web browser is open and are used for technical purposes such as enabling better navigation through the RX Platform. Once you close your browser, the cookie disappears. Persistent cookies are stored on your device for longer periods and are used for purposes including tracking the number of unique visitors to the RX Platform and information such as the number of views a page gets, how much time a user spends on a page, and other useful data. Cookies, by themselves, will not be used by us to disclose your individual identity. This information identifies your browser to our servers when you use the RX Platform. We use this information from cookies to ensure that the RX Platform and associated services are better tailored to our users’ needs.

We also use different types of first- and third-party cookies on the RX Platform. For example, we may use cookies to track user trends and patterns. This helps us better understand and improve areas of the RX Platform that our users find valuable. We may use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We may also share information about your browser’s use of the RX Platform with our social media, advertising and analytics partners. When we collect analytics data, or use third-party analytics tools, this helps us to measure traffic and usage trends for the RX Platform or to create profiles about you for advertising, marketing, and analytics purposes. These tools collect information sent by your browser or device, including the pages you visit, your use of third-party applications, and other information that assists us in analysing and improving the RX Platform. You can use the settings in your browser to control how your browser deals with cookies. However, in doing so, you may be unable to access certain pages, features or content on the RX Platform.

We may employ web beacons, which are used to anonymously track the online usage patterns of users of the RX Platform. In addition, we may also use clear gifs in HTML-based emails sent to you to track which emails you open and which links you click. The information allows for more accurate reporting and improvement of the RX Platform.

We may also collect ‘IP addresses’ relating to you when you access and use the RX Platform. We may collect and manage IP addresses for internet session management and security purposes. When you access the RX Platform by or through a mobile device, we may receive or collect and store a unique identification numbers associated with your device or our mobile application (including, for example, a UDID, Unique ID for Advertisers (IDFA), Google Advertising ID (GAID), or Windows Advertising ID), mobile carrier, device type, model and manufacturer, mobile device operating system brand and model, phone number, and, depending on your mobile device settings, your geographical location data, including GPS coordinates (e.g. latitude and/or longitude) or similar information regarding the location of your device.

We may use the data collected through cookies, log file, device identifiers, location data, web beacons and other collection information to do various things to improve your experience when using the RX Platform including by enabling us to:

• remember information so that you do not need to re-enter it during your visit or the next time you visit the RX Platform;

• provide custom, personalised content and information, including advertising;

• provide and monitor the effectiveness of the RX Platform;

• monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on the RX Platform, a Rugby Body Website and/or a Rugby Body App;

• diagnose or fix technology problems; and

• plan for improvements and other enhancements to the RX Platform, a Rugby Body Website and/or a Rugby Body App.

By visiting the RX Platform, whether as a registered user or otherwise, you consent to us tracking your activities in connection with the RX Platform and your use of it through the technologies described above, as well as similar technologies developed in the future, and that we may use such tracking technologies in any electronic communications we may have with you.

2.4 Information we receive from other sources: this is information we obtain from third parties whom we deal with in connection with the RX Platform and associated services and/or your use of it and/or those services (including sub-contractors, analytics providers, advertising networks and search information providers, or third parties who share your information to us so that you can register with a particular Rugby Body or otherwise receive associated services or communications from them). For example, this may include your parent or guardian who provides your information when they register you to play Rugby for a particular Rugby Body or they message or communicate with us about your participation in Rugby.

In addition, we may use third-party providers to serve or track your interactions on other websites. You may link to or access the RX Platform using other third-party websites. For example, we may receive information about you and your friends when you interact with a Rugby Body (or a Rugby Body Website or Rugby Body App) through social media, for example, by liking Rugby AU or USA Rugby on Facebook, following their profiles on Twitter, or connecting with them on Instagram, YouTube, or other social networks. The data we receive is dependent upon your privacy settings with the particular social media platform. Use of such third-party websites is subject to the terms of service and privacy policies of those third parties. Rugby Xplorer does not control the use of third-party technologies or the information collected through their use and is not responsible for any actions or policies of such third parties.

However, you may have the option to review, and if necessary, adjust your privacy settings on third-party websites and social media platforms before linking or connecting them to the RX Platform (including the Rugby Xplorer™ mobile apps), or any Rugby Body Website or Rugby Body App.

Where permitted by applicable law, we may also receive information about you from third-party sources (e.g., lead generators) to determine whether a product or service available on the RX Platform or a Rugby Body Website or a Rugby Body App is right for you and to promote such product or service to you via various electronic communication methods.

We may combine information we receive from other sources with information you give to us and information we collect about you. Depending on the types of information received, we will use the information received from other sources or the combined information for the purposes described inSection 3: How we use your information.

Third-party tracking technologies and online advertising:we may permit third party ad networks, social media companies, and other third-party services to collect information about users of or visitors to the RX Platform, a Rugby Body Website or a Rugby Body App through cookies, social plug-ins, or other tracking technologies.

Although the RX Platform does not currently contain third-party advertising, we may in the future permit third party online advertising networks to collect information about your use of the RX Platform, Rugby Body Website(s) or Rugby Body App(s) to facilitate the display of advertising that may be relevant to your interests. Typically, this information is collected through cookies or similar tracking technologies. You can set your browser or device settings to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the RX Platform may then be inaccessible or may not function properly.

Third parties may use their own tracking technologies when you visit the RX Platform, a Rugby Body Website or a Rugby Body and they may have access to information about you and your online activities over time and across different websites or applications when you use the RX Platform or a particular Rugby Body Website or Rugby Body App. Third parties’ use of such tracking technologies is not in our control and is subject to such thirty parties’ privacy policies.

3.How we use your information

3.1 Rugby Xplorer uses information about you, including Personal Information, to ensure that the RX Platform operates effectively, and to ensure the provision of associated services and support, to assist Rugby Bodies successfully administer the game of Rugby through effective and efficient interaction and communication with each other and other Rugby governing bodies, Participants and Supporters.

3.2 We may use information collected about you, including Personal Information, in the following ways:

• to operate, maintain, administer and manage the RX Platform and perform any services associated with the RX Platform, including providing you with technical support and to improve the RX Platform and our products and services;

• to provide you with access to the RX Platform, a Rugby Body Website and/or Rugby Body App;

• to complete any registration or other transactions or actions you request via the RX Platform, such as payment processing, including determining eligibility, use, and other benefits;

• to communicate with you about information, registration, education, accreditation, background checks, products, and technical support or other services (which may include via telephone, voicemail, email, SMS/text messages, or notifications within the RX Platform or other service-related communications, announcements and administrative messages to notify you about changes to the RX Platform or associated services);

• to administer your account, including processing your payments and fulfilling your orders;

• to provide you with information that you have requested or to respond to your inquiries;

• to create de-identified information that cannot be used to personally identify you, such as aggregated data relating to the use of the RX Platform, a Rugby Body Website and/or a Rugby Body App;

• to measure or understand the effectiveness of communications (including advertising) that we have with, or send to, you and others, and to deliver relevant communications to you (including from other users of the RX Platform) and to provide you with communications from Rugby Xplorer or a Rugby Body (including surveys, newsletters, publications and other information);

• to better understand our audience and fans of Rugby;

• to permit you to contact other users of the RX Platform;

• to create profiles about you, including adding information we obtain from third parties, which may be used for analytics, marketing and advertising;

• to research, design, develop, and communicate with you about new or existing features, products, services, merchandise and promotions, or, subject to any consents or authorisations that are required by applicable law, those of any Rugby Body, our members, affiliates and any of their related businesses and those of our third-party partners and associates;

• to recognise your devices and associate the information with your profile including, using data collected or received from affiliates, service providers, advertisers, and other third parties, such as your device information, to match advertising and cookie identifiers;

• to match your devices if you log into the RX Platform on multiple devices or web browsers or if your devices share similar attributes that support an inference that they are used by the same user or household;

• to identify you or your device or associated information with you, your device, or your profile whenever you visit a Rugby Body Website or Rugby Body App, even if you do so when logged out or without intentionally identifying yourself;

• to provide you with personalised user experiences including delivering advertising based on your activities and interests;

• to use information to match your interests across devices, as well as for analytics, ad serving or reporting, or to improve the services;

• to display certain content, such as content you upload and make available, comments, and game statistics and rankings;

• to understand how you use the RX Platform and associated services so we can improve them;

• to update and improve our customer databases;

• to process your entries into sweepstakes, contests or promotions to the extent we offer them;

• to provide services to organise, promote, develop, run, administer and market fixtures, programs, activities, tournaments, events, and competitions, such as game management, scoring, ticketing and payment services, mapping guidance, offers, and players on team sheets/rosters;

• to enhance the safety and security or performance of the RX Platform and associated services. This includes verifying your identity, preventing or detecting fraud or other unauthorised or illegal activities;

• to protect the safety and security of users of the RX Platform;

• to enforce this Privacy Policy and any other terms that you have agreed to, including to protect the rights, property or safety of us or any other person, or any intellectual property rights owned or controlled by us in connection with the RX Platform;

• for any purpose where you have given your consent (where legally required);

• to comply with applicable federal, state and other laws and regulations; and

• to monitor the communications made by users via the RX Platform, such as messaging, in order to protect our users and monitor the effectiveness of the RX Platform. You acknowledge that you have no expectation of privacy with respect to any such communications or postings, and you expressly consent to such monitoring.

3.3 The RX Platform allows you to connect with other Rugby Bodies, Supporters, Participants and other individuals and organisations to facilitate your engagement with Rugby. Your public-facing profile and information on the RX Platform, including your name, photo, and other information which you elect to make public, will be available publicly and to other users of the RX Platform and may be searchable by search engines which may display your information publicly. You may adjust your profile settings to entirely prevent the general public from viewing your profile, though it may remain visible to other users on the RX Platform for the purposes of administering and facilitating registration and competition manager (for example, access to your information will be required by a team manager selecting their team sheet/roster).

3.4 Please be aware that this Privacy Policy does not apply to the collection and use of your information by Rugby Bodies and other third parties that use the RX Platform and associated services. Rugby Xplorer encourages you to read the privacy policies and data collection and use practices of those organisations. Rugby Xplorer does not control and is not responsible for what third parties do in connection with how they handle your Personal Information, even in situations where Rugby Xplorer may have access to or store such information on behalf of that organisation. Please exercise caution and consult the privacy policies of any third-party organisation before sharing your Personal Information with them.

4. Disclosure of your information

4.1 We may disclose Personal Information that we collect or you provide as described in this Privacy Policy as follows:

• to anyone authorised under this Privacy Policy or pursuant to any other consent or authorisation you may provide. For example, this includes each of the Rugby Bodies you are registered or affiliated with and may also include other Rugby or sports governing bodies and competition administrators including World Rugby, the Australian Olympics Committee or Commonwealth Games Australia;

• to other users of the RX Platform. Your information, including both information you provide and information we have collected about you from other users, may be searchable by or made available to other users of the RX Platform. Once your information has been shared with another user of the RX Platform, that user may contact you and use and maintain copies of your information outside of the RX Platform. You may be able to control some elements of data sharing through your account settings.

• to service providers that assist us in the maintenance, improvement and optimisation of the RX Platform, such as service providers that help us run and maintain the technology and security infrastructure that support the RX Platform or that provide services such as email delivery, measurement, hosting, identity management or similar services;

• to our professional advisers such as accountants or lawyers;

• to fulfil the purpose for which you provide it. For example, if you sign up for certain services such as online education delivered via the RX Platform, we may share your information in order to provide those services;

• to third-party credit or payment card processors via an encrypted connection so that they can process any payments by you;

• to any third parties we believe necessary or appropriate to comply with applicable laws;

• to service providers that assist with ad serving, marketing, transaction, content or service fulfilment, research and analytics, database management, contest, sweepstakes and promotion administration, fraud prevention, and acquisition and conversion services, and social media partners;

• for any other purpose disclosed by us when you provide the information or with your consent;

• to the general public, subject to your RX Platform account profile privacy settings. For example, your name may appear on a team sheet/roster and your name/profile may be visible online to those who may or may not be users of the RX Platform;

• if we are under a duty to disclose or share your Personal Information in order to comply with applicable law or any legal obligation, or if we reasonably believe that such action is necessary to (a) comply with applicable law or any legal obligation or the reasonable requests of government, regulatory, law enforcement, or public authorities; (b) enforce our Terms of Service and other agreements or to protect the security or integrity of the RX Platform; (c) protect our legal rights, privacy or safety, and the rights, privacy and safety of any Rugby Body, our affiliates, our employees, agents, contractors, or others; (d) protect against fraud or other illegal activity or for risk management purposes; and/or (e) permit us to pursue available remedies, commence, participate in, or defend litigation, or limit the damages that we may sustain. This may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction;

• with respect to de-identified information, for any purpose without restriction;

• in the event of a sale, merger, consolidation, reorganisation, financing, change of control, acquisition or liquidation, we may transfer, sell or assign to third parties information concerning your relationship with us, including, without limitation, Personal Information that you provide and other information concerning your relationship with us;

• for any purpose related to our use of information as set out in Section 3. How we use your information.

5. Your choices about how we use and disclose your information

5.1 We are committed to providing you with choices regarding the Personal Information we may collect about you, or that you may provide to us. There are various actions you can take or mechanisms you can use to give you control over your information:

• Tracking Technologies and Advertising: you can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the RX Platform may then be inaccessible or may not function properly.

• Promotional Offers from us, our affiliates or third-party partners:if you do not wish to have your contact information used by us to send electronic communications to you from either Rugby Xplorer or a Rugby Body or their third-party partners or associates, you can unsubscribe by clicking the unsubscribe link found in the footer of emails or follow the instructions at the bottom of any text messages you receive. If you are not able to unsubscribe using this method, please contact us and we can handle your request. You can also always ask us not to process your Personal Information for marketing purposes by contacting us at the address inSection 12: Contact Information. We make commercially reasonable efforts to promptly process all unsubscribe requests. However, please note that we may ask you to provide additional information for identity verification purposes, or to verify that you are in possession of an applicable email account. In addition, you will not be able to unsubscribe from service-related communications that we may send you (e.g., account verification, payment confirmations, change or updates to features of the RX Platform, technical and security notices).

• Adjusting your profile settings/preferences on the RX Platform: subject to your profile and privacy settings within the RX Platform, any information that you make public may be searchable by other users of the RX Platform and may be accessible via API(s) and viewable on search engines. You may restrict certain public sharing by changing your profile privacy settings within your account on the RX Platform or by limiting the type of data you include in your RX Platform profile. Whilst certain information is not searchable or viewable to others, changing your privacy settings will not remove any of your information that was previously publicly available on the RX Platform. Please be aware that even if you remove your information that you posted to the RX Platform, copies of it that may have been saved by users or stored in cached and archived pages of the RX Platform by search engines or other third-party services may remain accessible. Please also note that Rugby Bodies, Participants (such as team managers, coaches and other users) may contact you through or outside of the RX Platform and Rugby Xplorer may not be able to control your preferences for those types of communications.

5.2 If you have any questions about modifying your RX Platform account information or changing your account or communication preferences, please also seeSection 8. How to access and control your personal information.

6. Information Security

6.1 Rugby Xplorer understands the importance of keeping your Personal Information safe and secure. We have implemented measures designed to reasonably secure your Personal Information from misuse, accidental loss, unauthorised access, use, alteration or disclosure and use commercially reasonable physical, administrative, and technological safeguards to preserve the integrity and security of all information collected via the RX Platform and associated services. These include:

• implementing strict confidentiality practices for employees, contractors and service providers;

• investing in security software to protect against the possibility of cyber-attack or other external threats;

• undertaking regular system penetration testing to ensure that your information hosted or stored on the RX Platform is protected. Unfortunately, however, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your Personal Information, we cannot guarantee the security of our systems or your data transmitted to the RX Platform; any transmission is at your own risk. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with applicable law and our internal processes;

• taking reasonable steps to delete or de-identify Personal Information if it is no longer needed for any legitimate purpose. This requirement does not apply where we are required by applicable law to retain the information.

6.2 Where we have given you (or where you have chosen) a password which enables you to access certain parts of the RX Platform, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

7. Transfer to other countries

7.1 The information we hold about you is primarily in electronic form and is held by us and our service providers in multiple systems including cloud based and third-party systems (which may involve the storage of data outside the jurisdiction in which you are located). We use a range of leading service providers, many of which operate in multiple jurisdictions (examples include Salesforce, Microsoft and Amazon Web Services). Some of the countries where your data may be stored include Australia, Ireland, the United States, New Zealand, and Singapore, and other countries from time to time. If you would like further information on our data holding arrangements, please contact the Rugby Xplorer Privacy Officer as outlined inSection 12. Contact Information.

7.2 In some cases, we may transfer your Personal Information to individuals or organisations that are based internationally (such as World Rugby) as a part of the administration of Rugby competitions, promotions, integrity matters, research or other projects. Please note that we may transfer information, including personal information, to a jurisdiction that does not have the same data protection laws as your jurisdiction, and you consent to the transfer of information to any jurisdiction in which Rugby Xplorer or its affiliates or service providers maintain facilities for any purpose related to our use of information as set out inSection 3. How we use your information andSection 4. Disclosure of your information. Whenever we transfer your Personal Information to individuals or organisations based internationally or with operations internationally, we will take reasonable steps to ensure that the recipient of the information upholds an equivalent standard of fair handling of information to ensure your privacy is protected. For example, we may require appropriate contractual clauses with third parties that ensure their compliance with applicable privacy laws.

8. How to access and control your personal information

8.1 You may request access to, and the correction of, the Personal Information we hold about you if it is not accurate or complete by contacting the Rugby Xplorer Privacy Officer as outlined in Section 12. Contact Information. We ask that you please provide adequate information to allow us to action your request (first name, surname, email address and a detailed description of your request) - however, we will ask you to provide additional information for identity verification purposes. Subject to any lawful grounds for denying your request, we will endeavour to action it in a timely manner. If your request is denied, we will provide you with the reasons for our decision, and the mechanism available to escalate any such decision.

8.2 You may also update your Personal Information by contacting your relevant Rugby Bodies or online by logging onto the RX Platform. For example, if you have a Rugby Xplorer™ account (a personal account for accessing the RX Platform), you can use your credentials to login and manage certain Personal Information at any time. It is your responsibility to ensure the Personal Information we hold about you remains accurate and up to date.

8.3 If you do not have a Rugby Xplorer™ account, you can still manage your preferences and opt out of communications by accessing links in electronic communications sent to you or otherwise by contacting the Rugby Xplorer Privacy Officer as outlined inSection 12. Contact Information.

8.4 You may also request the deletion of your Personal Information in some circumstances, such as when Rugby Xplorer no longer needs the information, your consent is withdrawn or you validly object to the processing of your information. In certain situations, however we need to retain your information to provide you with a product or service that you requested; perform a contract we entered into with you; maintain the functionality or security of the RX Platform and associated systems; comply with or exercise rights provided by applicable law; or use the information internally for any other purpose as set out inSection 3. How we use your information.

8.5 You may contact the Rugby Xplorer Privacy Officer as outlined in Section 12. Contact Information if you wish to deactivate or delete your Rugby Xplorer™ account. If you are entitled to deactivate or delete your account we will comply with your request as soon as practicable. Following such deactivation or deletion, Rugby Xplorer may retain your profile information for a commercially reasonable time for backup, archival, or audit purposes. However please note it is possible that we may not be able to deactivate or delete your content, certain residual information or your information may otherwise need to be maintained by Rugby Xplorer for valid reasons (such as, for example, record-keeping or compliance with legal obligations). Please be aware that we may not be able to delete any content you have shared with others on the RX Platform or with social media platform which you have linked to Rugby Xplorer™ account. Please also be aware that while we may be able to delete data that you provided to RX Platform about yourself or others, we may not be able to delete data about you that was provided by another user, such as a youth coach, college coach, or tournament director. By way of example, if a youth coach adds an athlete’s information to a team sheet/roster or a college coach adds a recruit to the college coach’s list, that information cannot be deleted by the athlete once it has been shared or entered by the coach.

8.6 You have the right to request the Personal Information held by Rugby Xplorer for the purpose of transferring it to a third party of your choice. If you request your information for this purpose, we will provide it to you or transfer it to the nominated third party in a commonly used, machine-readable format.

9. Third-party Platforms

Rugby Xplorer may integrate with or contains links to other third-party sites and services. We are not responsible for the practices employed by third party websites or services embedded in, linked to, or linked from the Service and your interactions with any third-party website or service are subject to that third party’s own rules and policies. In addition, you agree that we are not responsible for and do not have any control over any third parties that you authorise to access your information, including the organisations you interact with on the RX Platform.

10. Children’s Privacy; Minors; Schools

10.1 The RX Platform is directed to persons over the age of 13. We do not knowingly permit anyone under the age of 13 to submit data to us nor collect or solicit any information from anyone under the age of 13. This means that we will only accept primary user registrations via the RX Platform from persons over the age of 13. In the event that we learn that we have collected personal information or accepted a primary user registration directly from a person under age 13, we will promptly delete that information and/or account. If you believe that we collected any information from a person under the age of 13 directly please contact the Rugby Xplorer Privacy Officer.

10.2 We also recommend that if you over the age of 13 and under the age of 18, you ask your parent or guardian for permission before sending any of your information to us or anyone else over the Internet. Minors under 18 years old, or their parents or guardians, may request the removal of information that they posted to the RX Platform by contacting the Rugby Xplorer Privacy Officer. Upon such request, Rugby Xplorer will anonymise, or remove any content posted by a minor, unless required by applicable law to retain such content or information. Schools and other organisations that are covered by state student privacy laws will be able to control the collection and processing of student data when they utilise the RX Platform.

11. California Residents – Legal Disclosures and Privacy Rights

11.1 This section of our Privacy Policy comes with a disclaimer that the California Consumer Privacy Act (CCPA) is not intended to apply to non-for-profit organisations, but that it could have application in some circumstances. This section is therefore voluntarily included in this Privacy Policy exclusively as an accommodation to Supporters and Participants in California and is not intended to apply to individuals who are not California residents. However, the inclusion of this section in this Privacy Policy should not be taken as an admission that the CCPA applies to us and the RX Platform.

11.2 Exercising your rights: if you are a California resident, there are some additional rights that may be available to you under the CCPA. This policy explains the tools that we have made available to you to exercise your rights under the CCPA, such as the right to deletion and the right to request access to the categories of information we have collected about you. For more information on how to exercise your rights please refer toSection 5. Your choices about how we use and disclose your informationandSection 8. How to access and control your personal information. we encourage you to manage your information, and to make use of the privacy controls we have included in connection with the RX Platform. You will not be discriminated against for exercising any of your privacy rights under the CCPA. In order to protect your information from unauthorised access or deletion, we may require you to provide additional information for verification. If we cannot verify your identity, we will not provide or delete your information.

11.3 Sharing your personal information: we don't sell your personal information. We do share your information with others including as described in Section 4. Disclosure of your information. We may also in the future display advertising that we think might be relevant to you. We've provided more information about how you can manage your advertising, and other preferences, within this Privacy Policy.

11.4 Processing your information: this Privacy Policy describes the categories of personal information we may collect, the sources of that information, and our deletion and retention policies. We have also included information about how we may process your information, such as to protect against illegal activities, and for the development of new products, features, and technologies - these may be considered for “business purposes” under the CCPA. If you have questions about the categories of information we may collect about you, please refer toSection 2. Information we collect about you and how we collect it. For more information about our processing activities, please refer to Section 3. How we use your information. If you have any questions or would like to exercise your rights under the CCPA, please contact the Rugby Xplorer Privacy Officer as outlined inSection 12. Contact Information below.

12. Contact Information

If you would like to access the personal information that Rugby Xplorer holds about you, if you have any questions or issues with this Privacy Policy, or if you wish to make a complaint, please contact:

Rugby Xplorer
Privacy Protection Officer
PO BOX 800, Surry Hills, NSW, 2010, Australia

E: support@xplorer.rugby

T: +61 (0)2 8005 5555

To download a copy of this policy, please click here

We will use reasonable endeavours to respond to your inquiry in a timely manner and will inform you of the next steps that we or you may take with respect to it.

13. Policy Updates

We may modify or update this Privacy Policy from time to time to reflect the changes in our business and practices and to ensure compliance with applicable law, in which case we will post the updated Policy on the RX Platform. Please check back periodically for such updates. If we make material changes to this Privacy Policy, we will update the date that appears at the top of this Privacy Policy and may notify you directly in certain circumstances.