Total Rugby Manager

Last updated: 18 June 2026. Total Rugby Manager ("the platform", "we", "us") is operated for New Zealand club rugby. This policy explains what personal information we collect, why, and how it's protected, in line with the New Zealand Privacy Act 2020. WHAT WE COLLECT - Club administrators and platform staff: name, email address, and login credentials (handled by our authentication provider, Supabase — we never see or store raw passwords). - Players: name, position, jersey number, team, and season statistics — all visible on public club pages. - Player personal details (date of birth, phone, email, emergency contact name/phone/relationship, and medical information including allergies, injuries, and health certificate dates): collected and entered by club administrators, not by players directly, and never shown on any public page. Only the player's own club administrators and platform admin staff can view this information. - Contact form submissions: name, email, and message content, used only to respond to your enquiry. WHY WE COLLECT IT We collect this information to operate the platform: running competitions and fixtures, displaying public club information, supporting club administration (squad selection, player welfare tracking), and responding to enquiries. We do not sell personal information to anyone, and we do not use it for advertising. WHO CAN SEE WHAT - The public can see: club details, fixtures, results, standings, player names, positions, and on-field statistics. - Club administrators can see: full details for players at their own club only — never another club's data. - Platform administrators can see what's needed to operate and support the platform across all clubs. - Medical and personal contact information is never visible publicly, regardless of role. VIDEO MATCH ANALYSIS When a club administrator submits a match video link for performance analysis, we may share a limited set of information with an authorised third-party video analysis service provider. This information is limited to: the fixture date, round, participating teams, and venue; the submitted video link; and for players included in the confirmed matchday squad, their first name, last name, jersey number, playing position, and captain or vice-captain status. We do not provide players' dates of birth, contact details, medical information, or profile photographs for video analysis purposes. The service provider may use the information only to analyse the submitted match and produce performance statistics. The resulting statistics are returned to the platform and may be made available to authorised coaches and club administrators within the relevant club. Aggregated on-field statistics may also be displayed on public club pages, consistent with the way season and match statistics are presented elsewhere on the platform. Before submitting a video for analysis, the club administrator must confirm that the club has the appropriate authority, permissions, and consents to provide the video and associated squad information for this purpose. WHERE YOUR DATA IS STORED Data is stored with Supabase (database and file storage) and the platform is hosted on Vercel. Transactional emails (e.g. contact form replies) are sent through Resend. These are our data processors — they store and transmit data on our behalf under their own security and privacy commitments, and we have not granted any of them rights to use your data beyond providing their service to us. SECURITY Access to player and personal data is controlled through row-level database security, so club administrators can only access their own club's records. All connections to the platform are encrypted (HTTPS). We do not store payment card details. YOUR RIGHTS Under the Privacy Act 2020, you have the right to ask what personal information we hold about you, to ask us to correct it if it's wrong, and to ask questions about how it's used. Club members should contact their club administrator first, since clubs manage their own player records; for anything else, contact us using the Contact Us form on this page. CHILDREN'S INFORMATION Club rugby includes junior and youth players. Where a player is a minor, their information is entered and managed by their club (typically with a parent or guardian's involvement in providing it to the club), not collected directly from the child by this platform. CHANGES TO THIS POLICY We may update this policy as the platform grows. Material changes will be reflected here with an updated date. CONTACT Questions about this policy or your data: use the Contact Us form on this page.

Last updated: 18 June 2026. By using Total Rugby Manager, you agree to these terms. WHO CAN USE THE PLATFORM The public pages (fixtures, results, standings, club pages) are open to anyone. Club admin accounts are provided to club officials who register their club or are added by an existing club admin. Platform admin access is restricted to authorised staff only. ACCEPTABLE USE You agree not to: use the platform to harass or defame any person or club; attempt to access another club's administrative data; upload content you don't have the right to use (e.g. copyrighted images); use automated tools to scrape or overload the platform; or attempt to bypass authentication or security controls. CLUB ADMINISTRATOR RESPONSIBILITIES If you register or administer a club on the platform, you're responsible for: the accuracy of information you enter about your club and players; keeping your login credentials secure; and obtaining appropriate consent from players (or their parent/guardian, for minors) before entering their personal or medical information. CONTENT YOU SUBMIT Club logos, photos, and sponsor images you upload remain your property, but you grant us a licence to display them on the platform for as long as your club's page is active. You're responsible for ensuring you have the right to upload any image or content. NO WARRANTY The platform is provided "as is." We work to keep fixture data, results, and standings accurate, but we don't guarantee the platform will be error-free or available at all times. Competition results entered into the platform are not an official competition record unless your union or governing body says otherwise. LIMITATION OF LIABILITY To the extent permitted by New Zealand law, we are not liable for indirect or consequential losses arising from use of the platform, including loss of data, lost matches due to scheduling errors, or downtime. ACCOUNT SUSPENSION We may suspend or remove an account that breaches these terms, including for repeated entry of false results, harassment of other users, or attempts to access data outside your club's scope. CHANGES We may update these terms as the platform evolves. Continued use of the platform after a change means you accept the updated terms. SUBSCRIPTIONS AND BILLING Where club subscription billing is offered, subscriptions may be cancelled with 30 days' written notice. Cancellation takes effect at the end of the notice period. Billing features may be introduced or changed over time; when active, details will be shown on your club's billing page in the admin dashboard. GOVERNING LAW These terms are governed by the laws of New Zealand. CONTACT Questions about these terms: use the Contact Us form on this page.

Last updated: 18 June 2026. HOW LONG WE KEEP DATA - Public competition data (fixtures, results, standings, season history): retained indefinitely as historic competition records, similar to how a union would keep historic results. - Active player records: retained while a player is active at a club. When a club administrator marks a player inactive or deletes a player record, personal and medical fields are removed; season statistics already attributed to past competitions remain as historic records (consistent with how the public Points Leaders and Club Legends pages work), but are not linked back to personal contact or medical information once a player record is deleted. - Club admin accounts: retained while the club is active on the platform. If a club deactivates or a person leaves a club admin role, their account access is removed by the platform administrator on request. - Contact form submissions: retained for as long as needed to resolve the enquiry, and periodically reviewed for deletion of resolved, non-essential submissions. DELETION REQUESTS A club can request deletion of a specific player's personal and medical data at any time by contacting the player's club administrator, who can remove it directly from the admin dashboard. For anything that can't be resolved at the club level, contact us directly using the Contact Us form on this page and we will action the request within a reasonable timeframe, consistent with our obligations under the Privacy Act 2020. BACKUPS Routine database backups may retain deleted data for a limited recovery window after deletion before being permanently purged, in line with our hosting provider's (Supabase) backup retention schedule. CONTACT Data retention or deletion requests: use the Contact Us form on this page.

Last updated: 18 June 2026. WHAT WE USE COOKIES FOR Total Rugby Manager uses a single category of cookie: authentication session cookies, set when a club administrator or platform administrator logs in. These cookies keep you logged in as you move between admin pages and are set and read by our authentication provider, Supabase, via secure, encrypted, HTTP-only cookies. WHAT WE DON'T USE We do not use advertising cookies, third-party tracking cookies, or analytics cookies that build a profile of your browsing activity. Public pages (fixtures, results, club pages) can be browsed without any cookie being set at all, since they don't require a login. YOUR CHOICES Because our only cookies are functional login-session cookies, blocking them will simply prevent you from staying logged in to an admin account — public pages are unaffected either way. Most browsers let you view and delete cookies through their settings if you'd like to do so. CHANGES If this changes in future (for example, if we add analytics), this policy will be updated and, where required by law, we will ask for your consent first. CONTACT Questions about cookies: use the Contact Us form on this page.