Privacy Policy /

1. Introduction

In this Privacy Policy "we", "us", "our" and Eastern Suburbs District Rugby League Football Club Ltd means Sydney Roosters, its associates, related entities and subsidiaries. Please read this Privacy Policy carefully as it describes how we collect, use and handle your Personal Information.

Sydney Roosters recognises the importance of your privacy and your right to control your Personal Information and is committed to complying with applicable privacy laws (including the Privacy Act and GDPR). We will only request Personal Information that is reasonably necessary for us to perform our functions and activities as a Rugby League club. Please be aware, you are under no obligation to provide us with your Personal Information, but if you choose not to provide your Personal Information, you may not be able to take advantage of one or more of the features we offer. On request and wherever it is lawful and practicable, we will offer you the opportunity of not identifying yourself, or of using a pseudonym, when entering transactions, or otherwise dealing with, Sydney Roosters.

2. How we share your information as part of the Rugby League Exchange

Sydney Roosters is always seeking to better understand our player and fan preferences including by analysing your Personal Information to understand trends and interests. Sydney Roosters has, in conjunction with the National Rugby League, other clubs, Queensland Rugby League, New South Wales Rugby League, Country League of NSW and selected third parties, established a data storage architecture and data sharing platform for processing Personal Information with this aim (Rugby League Exchange).

The NRL will be responsible for the maintenance and administration of the Rugby League Exchange. Sydney Roosters will share your Personal Information with the NRL as part of the Rugby League Exchange in order to facilitate analysis of fan behaviour and preferences to improve fan support, fan offerings, provide more targeted content and products and any other purposes described in the NRL's Privacy Policy. We encourage you to read the NRL's Privacy Policy to understand how your Personal Information will be handled in relation to the Rugby League Exchange. The NRL's Privacy Policy is located at https://www.nrl.com/privacy-policy/.

3. What types of personal information may we collect?

The types of Personal Information Sydney Roosters may collect depends on the purposes for which such information is collected but may include (without limitation):

(a) your name, gender, date or birth, occupation, residential address, email address, telephone number and other contact details;

(b) memberships, subscriptions and attendance history at Sydney Roosters matches (whether you have used your membership to purchase tickets, or as a casual ticket purchaser);

(c) purchasing preferences and financial details which we collect when you buy tickets, purchase merchandise and/or as part of competitions and promotions; and

(d) devices used and user online journey when making Sydney Roosters related purchases.

Sydney Roosters will generally not collect Sensitive Information from you. However, where Sydney Roosters seeks to collect Sensitive Information from you, it will do so in accordance with applicable privacy laws (including the Privacy Act and GDPR), for instance by obtaining your express consent for such a collection.

In addition to Personal Information, we use cookies, web beacons and other technologies on our network to collect information about your usage (for instance, third party websites you visit to better understand your preferences and what types of products and services you may be interested in).

4. How do we collect your personal information?

Where it is reasonable and practicable to do so, Sydney Roosters will collect Personal Information directly from you (without limitation):

(a) when you order merchandise through our online store located at http://shop.roosters.com.au/;

In addition to collecting Personal Information directly from you, we may also collect Personal Information from:

(a)the NRL, QRL, NSWRL and selected third parties (for instance, Ticketek and Ticketmaster);

(b)Sydney Roosters Major Partner promotions and competitions (for instance, Steggles, Unibet and WorldFirst)

5. Why do we collect, use, hold and disclose your personal information?

Sydney Roosters collects, uses, discloses or holds Personal Information that is reasonably necessary for Sydney Roosters to perform one or more functions or activities as a club including (without limitation):

(a) organization, conduct and promotion of matches involving Sydney Roosters (for instance, providing you information about upcoming ticket offers and deals for the next home matches);

(b) promotion and sale of Sydney Roosters merchandise;

(c) direct marketing of Sydney Roosters products or services

We use, disclose or hold your Personal Information for the primary purpose for which it was collected, a related secondary purpose, or as otherwise required in accordance with applicable privacy laws (including the Privacy Act and GDPR) (for instance, we may be required to disclose your Personal Information to a law enforcement agency).

6. Who do we discose your personal information to?

Sydney Roosters may provide your Personal Information to third parties as part of our functions and activities including (without limitation):

(a) Delivery, courier and postal organizations: we may disclose your Personal Information to delivery, courier and postal organizations in order to deliver merchandise you order;

(b) National Rugby League, other clubs, Queensland Rugby League, New South Wales Rugby League, Country League of NSW and selected third parties (for instance, Ticketek and Ticketmaster): we may disclose your Personal Information as part of the Rugby League Exchange. The NRL and selected third parties may send you information about products and services the NRL believes will be of interest to you. If you do not wish to receive information from the NRL or selected third parties, please opt out from such promotional and marketing information as part of the relevant organisation's preference centre or contact the NRL's Privacy Officer in accordance with the NRL Privacy Policy located at https://www.nrl.com/privacy-policy/;

(c) Law enforcement and emergency services agencies: we may disclose your Personal Information where required or authorized to do so by law, including in emergency situations and to assist law enforcement agencies with active investigations. We will always ensure that those to whom we disclose your Personal Information have the legal right to receive it.

(d) We may engage marketing providers, market research companies, promotions management and other data analytics companies to perform direct marketing on our behalf. You will always have the right to opt out of receiving promotional materials from us.

7. Transborder data flows

(a) Subject to clauses 7(b) and 7(c), the Sydney Roosters will not transfer your Personal Information to an overseas recipient unless it has first taken steps reasonable in the circumstances to ensure that the Personal Information that it transfers will not be held, used or disclosed by the recipient of the information inconsistently with, or otherwise in breach of, applicable privacy laws (including the Privacy Act and GDPR). For example, the Sydney Roosters may adopt appropriate contractual clauses with overseas recipients that ensure their compliance with applicable privacy laws (including the Privacy Act and GDPR.

(b) We may disclose your Personal Information to overseas recipients for things such as processing membership and hosting services, most likely in China, the United States and New Zealand, although countries where such recipients are located may vary.

(c) The Sydney Roosters may transfer Personal Information about you to someone who is in a foreign country if:

i. the Sydney Roosters reasonably believes that the recipient is subject to a law or binding scheme that has the effect of protecting the information in a way that is, overall, substantially similar to applicable privacy laws (including the Privacy Act and GDPR) and there are mechanisms available to you to enforce that protection or scheme; and

ii. you expressly consent to the transfer after the Sydney Roosters has informed you that the applicable privacy laws (including the Privacy Act and GDPR) will no longer apply if you provide your express consent.

8. How is your personal information secured?

We understand you have entrusted us with the protection of your Personal Information. As such, we take reasonable steps, with the assistance of the NRL, to protect your Personal Information from misuse, loss, unauthorized access, modification or disclosure. This includes engaging reputable third party service providers and ensuring that we engage (where possible and practical to do so) in best practice security systems and procedures.

9. Access to and correction of personal information

You can access or correct your Personal Information through:

(a) your NRL Account profile; or

(b) contacting our Privacy Officer at the 'Inquiries Procedure' set out below.

Please ensure that any written request for access or correction addressed to our Privacy Officer provides adequate detail that identifies what Personal Information you want access to or corrected. Where your request will incur costs, we may charge you a fee to cover those costs (for instance, reasonable staff costs in searching for, locating and retrieving the requested Personal Information). We will inform you of any such charges prior to your request being actioned.

In certain circumstances, we may refuse to provide you access to your Personal Information. Where we refuse you access, we will provide you with a written explanation as to the reasons for the rejection (for instance, we may refuse to disclose Personal Information to you where such access would have an unreasonable impact on the privacy of other individuals).

10. Notifiable data breaches scheme

In the event of any loss, or unauthorised access or disclosure of your Personal Information that is likely to result in serious harm to you, the Sydney Roosters, with the assistance of the NRL, will investigate and notify you and where applicable the relevant supervisory authority (e.g. the Australian Information Commissioner) within 72 hours of becoming aware of the loss, or unauthorised access or disclosure, in accordance with applicable privacy laws (including the Privacy Act and GDPR).

11. Inquires Procedure

All complaints and inquiries concerning your Personal Information, including in respect of alleged breaches of this Privacy Policy or the Privacy Act, should be directed to the Sydney

Roosters Privacy Officer:

The Sydney Roosters Privacy Officer
PO Box 693
Paddington NSW 2021
(02) 8063 3800

At all times, privacy inquiries and complaints will be treated seriously, dealt with promptly and confidentially.

11. Privacy Policy Updates

This Privacy Policy was last updated in July 2019. We may update this Privacy Policy from time to time. We will post the updated version of the Privacy Policy on our website but may not personally notify you. Please check periodically to see if our Privacy Policy has been updated. Capitalized terms in this Privacy Policy have the meaning given to such terms in the Sydney Roosters Privacy Policy or the Privacy Act.