Privacy Policy

Last Updated: July 29,2024

1.0 Introduction

This outlines the data we collect, how we process it, and measures we take to help protect it.

ORRA Sports is committed to using all reason means at our disposal to protect your privacy and ensure that your experience interacting with our smartphone apps, web apps, website, and other services makes you feel welcome and valued as an individual subscriber (or potential subscriber).

This policy outlines how we collect and use your Personal Data and it should be read in conjunction with our contractual terms which are set out in:

We will be the Data Controller for any Personal Data gathered by our service. If you have any questions about this Privacy Policy or our approach to data protection, please submit your query as outlined at the end of this Privacy Policy.

2.0 Definitions

This section explains key definitions used throughout this Privacy Policy.

Data Controller

Individual or organization that gathers information about living individuals, determines what data should be gathered, and how it is used.

Data Processor

Holds Personal Data but does not exercise control over how it is used. It is necessary to use some third parties to deliver our Services. However, we keep the Personal Data that must be provided to them to a minimum. More details are provided below in the section on the third parties used.

Data Subject

Any living individual using our Services and about whom Personal Data is gathered, stored, and processed.

Personal Data

Any information that can be used to identify a person. Examples include name, email address, phone number, and photo.

Services

Websites, apps, software, or other technologies provided by ORRA Sports.

Subscribers

Individuals using any of the ORRA Sports Services.

"You" or "you"

You, the person whose Personal Data we capture, store, and process.

"We", "we", "Us", or "us"

ORRA Sports.

3.0 Data we Collect

The Personal Data we collect is essential to the operation of our Services.

We collect some or all the following Personal Data when you register and use our Services:

  • Name
  • Email address
  • Phone number (mobile/cell)
  • Date of Birth (to establish if you are a minor - certain protections are embedded in the Services to help protect minors from inappropriate interactions)
  • Gender (teams in some sports may be restricted to a specific gender)
  • Language preference for interacting with our Services
  • Country in which you are based (used in filters when selecting sports, leagues, clubs, and competitions)
  • Preferred timezone (ensures game times are displayed appropriately)
  • Device used to access the Services
  • IP address (essential for support and data security)
  • Team memberships
  • Game performance statistics
  • In-app communications
  • Team, club, or governing body roles
  • Interactions with sponsor or advertiser content (we provide sponsors and advertisers with aggregated data only that does not identify individuals)

We do not store credit or debit card details as any payments are processed on our behalf by a third party who is responsible for maintaining the security of these details. Please review their Privacy Policy before submitting your card details to pay for our Services.

4.0 Purposes for which we Collect Data

We minimize the information needed to operate our Services.

The Personal Data that we collect and/or process is essential to the provision of our Services and it is used in the following ways:

  • Your name is used to identify you to others using our Services such as club administrators and team coaches. To protect minors when information about a game such as scores are being reported publicly, a 'shortname' or 'nickname' is available that can be used in place of a player's name.
  • Your email address and phone number form part of our security protection. They are also essential to communications within the Services.
  • Date of Birth is used to minimize the risk of inappropriate interactions on the Services for minors and it is also used when allocating players to age restricted teams.
  • Gender is only used when gender-specific teams are being formed.
  • Selecting a language preference enables you to operate the Services in the language you have chosen.
  • Country and timezone details are used to filter information to make it more relevant for you and to reduce scrolling.
  • Device and IP address details form part of our security shield and are essential for investigating any system issues that occur.
  • If you are a member of a team, your coaches and club administrators will have access to your name, date of birth, and gender. They are not provided with access to your email address or phone number because all communication between coaches, administrators, and players is conducted through our Services.


Game performance statistics have been designed to be used in the following ways:

  • Coaches can use them during games to make tactical adjustments.
  • They are also designed to enable coaches adapt training sessions to maximize the needs of their players and their team.
  • Players can use the statistics gathered to help them improve their own game.
  • Public statistics such as scores and scorers may be broadcast to subscribers who use our Services to follow a team.

Sponsors are essential to the continued operation of our Services.

Only aggregated data (data that cannot identify individuals) is shared with our Sponsors. This includes the number of times a specific piece of visual content has been viewed and the number of clicks it has received. Clicking on a piece of visual content will direct you to a web page operated by a Sponsor that will be subject to their Privacy Policy.

Advertisers provide essential support to clubs.

Advertisers only have access to aggregated data (data that cannot identify individuals). This includes the number of time an advertisement has been viewed and clicked.

5.0 Processing your Personal Data

Personal Data is required to operate the Services.

When registering on the ORRA Sports service, we capture Personal Data and are the Data Controller for it. We are Data Processors for Personal Data recorded by clubs, coaches, associations, and other subscribers to ORRA Sports services.

5.1 Our use of your Personal Data

Any Personal Data entrusted to use will only be used in accordance with this Privacy Policy. If you do not wish us to continue using your Personal Data, you can request your account to be deactivated by getting in contact with us as specified below.

The legal basis on which we process your Personal Data includes:

  • Contractual necessity i.e., processing necessary for the performance of a contract with you.
  • Personalizing, improving, or operating our Services.
  • Fulfilling requests that you make.
  • Complying with legal obligations, resolving disputes, or enforcing agreements.
  • Protecting, investigating, and deterring fraudulent, harmful, unauthorized, or illegal activity.

4.2 Our role as a Data Processor

When Personal Data is created by subscribers to ORRA Sports services, they are Data Controllers and have responsibility for the information recorded and the purposes for which it is used.

If you wish them to stop using your Personal Data, you must contact them to request it to be removed.

6.0 Data Storage

Protecting storage of your Personal Data.

Personal Data is stored in secure data centers within the European Union (EU). Encryption is used when data is being transmitted to and from storage, and it is also encrypted 'at rest' (i.e., when it is stored).

Stored data is compartmentalized, and access to it is restricted, to reduce the risk and impact of any potential data breach.

The nature of global Internet-based services means that for operational reasons, it is necessary to transfer some data across geographic borders. However, should any transfer take place, it will be done for technical or financial reasons, and shall only be to countries with which there are reciprocal data protection policies in place with the EU.

For example, to sand and SMS message, we must provide a third-party with your phone number and message text, or to send an email, we must provide your email address and email content.

The third parties that we use are commonly available and we rely on their Privacy Policies to protect any Personal Data we route to them that is essential to their provision of services to us. We take reasonable measures to minimize the Personal Data used by them.

7.0 Push Notifications

Push notifications enable us to send operational messages to you even if you don't have one of our apps open on your phone.

'Lite' versions of apps do not include 'Push Notifications'.

However, they are essential for the 'Pro' and 'Elite' versions of the apps and as a result, it is not possible to opt out of Push Notifications in these versions of the apps.

Examples of how 'Push Notifications' are used include:

  • Providing game details to team members or their guardians (if they are under 18).
  • Confirming availability of players for games or training sessions.
  • Requesting attendance at games by physios, analysts, or other specialists.
  • Booking referees or other officials for games.
  • Providing game updates to subscribers who wish to receive them.

If you do not wish to receive Push Notifications, you will need to downgrade to a 'Lite' version of the app which will remove functionality that may be necessary depending on how you use the app.

8.0 Referrals

A referral provides contact details to us of someone who is interested in subscribing to our Services.

If you provide us with contact details for a friend, family member, colleague, or acquaintance, you represent that you have their permission to do so. We will send them a one-time email or text message inviting them to subscribe to one or more of our Services, and may maintain an activity log to show that a referral was received.

9.0 Accuracy of Personal Data

It is important that the Personal Data we hold is accurate.

You warrant that all information that any Personal Data you provide is accurate. Certain data is essential to the operation of the Services and must be supplied, but you have a choice over whether to provide any of the optional data.

You can sign-up and consent to receive marketing email or newsletter communications from us, but you can update your preferences by using the "Unsubscribe" link found in any such emails, or by contacting us as outlined below.

10.0 Data Subject Rights

You have rights in relation to your Personal Data.

You have certain rights with respect to your Personal Data as set out here. There may be some circumstances where we may not be able to fully comply with your requests, or we may ask that you provide us with additional information in relation to your request. For example, we may require additional Personal Data to confirm your identity. However, we will respond to any request that you make to let you know of our decision.

Please use the form below to raise any of the following requests:

  • Access - you can request a copy of your Personal Data which will be provided to you in a reasonable time frame in PDF or other readable format.
  • Correction - if you believe that any of your data is incorrect or incomplete, you may be able to update it through our Services, and if this is not available, you can request that we updated it.
  • Deletion - you can request that we delete some or all of your Personal Data. However if this was recorded by a club or association, you will need to contact them to remove it as they are the Data Controllers for it.
  • Objection - you can object to the collection or use of your Personal Data for specific purposes.
  • Cease Processing - you can direct us to stop processing your Personal Data. However, if we are processing Personal Data on behalf of a club or association, you will be obliged to contact them with your request.
  • Portability - you can request a copy of your Personal Data in machine-readable format (typically CSV, XML or JSON). You can also request that we transmit that data to another entity where it is technically feasible and financially affordable.

11.0 Data Retention

Duration of data storage.

Data is only retained for as long as necessary to provide our Services or where we are legally obliged to retain it.

12.0 Passive Collection

Data we may collect and use that is not provided by you or our subscribers.

We and our third party service providers may automatically collect some information about you when you use our Services. This may include details such as:

  • IP address (Internet Protocol Address).
  • Browser.
  • Internet Service Provider (ISP).
  • Referring or exit pages.
  • Type of device, device identifier, and operating system.

13.0 Sharing your Personal Data

We are committed to protecting your Personal Data.

We do not sell or rent your Personal Data to third parties. We do aggregate data and make it available to sponsors and advertisers, but this does not contain data that could identify any individual.

In response to legal obligations, court orders, or similar legal process, we may be required to disclose Personal Data to law enforcement, government, or other third parties. In so far as it is legally possible, we will restrict the amount of Personal Data disclosed to the minimum required to meet our legal obligations

Where we are legally permitted to do so, we will inform you of the request for access to your Personal Data, and the data that we were obliged to provide.

14.0 Assignment

What happens if we change ownership?

If we, or substantially all of our assets are acquired, or if we go out of business, or enter bankruptcy, our Services and data would become the property of a third party. You acknowledge that such transfers may occur, and that the third party may continue to use your Personal Data in accordance with this Privacy Policy.

15.0 Security of your Personal Data

Your responsibility as well as ours.

We each bear responsibility for protecting your Personal Data.

15.1 Our Commitment

We are committed to protecting the Personal Data that you share with us, and we use all reasonable means at our disposal to do so. We use a combination of industry-standard security technologies, procedures, and organization measures to help protect your Personal Data from unauthorized access, use or disclosure.

15.2 Your Responsibilities

We recommend that you take every precaution in protecting your Personal Data when accessing the Internet from any of your devices. For example, passwords should be complex, using a combination of letters, numbers, and other permitted characters, and make sure you use a secure browser.

16.0 Data Breach

While we take reasonable precautions, a data breach is always a possibility no matter how secure a system is.

In the event of a breach of data security in systems under our control that leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to your Personal Data, we will notify you promptly and without undue delay. We will take all reasonable steps to minimize harm, and secure your Personal Data. Notifications may be issued through any of the communication channels that we have on file for you.

We will also comply with our legal obligations to notify the appropriate authorities in the event of a data breach.

17.0 Linked Websites and Third-Party Services

We use third parties to deliver our Services.

Our website(s) and Services may provide links to other third-party websites which are outside our control and are not covered by this Privacy Policy.

We encourage you to review the privacy policies posted on these sites.

18.0 Communication

Communication is an essential element to our Services.

The following communication channels are used by our Services:

  • Email.
  • SMS (text messaging).
  • Push notifications (facilitates communication when an app is closed on your device).

18.1 Service Announcements

These are used to inform you about changes to the Services, or to provide information about issues that have occurred. You may not opt out of these communications as they are essential to the operation of our Services. They may be delivered through any combination of email, SMS, or push notifications.

18.2 Coaches to Players

Team coaches may use the Services to communicate with players through in-app messages and players will be alerted to these communications through push notifications. However, to minimize the number of notifications received, and to protect the integrity of the Services, all communications are undertaken using pre-defined templates.

From a child welfare perspective, this is particularly important when messages are being transmitted by coaches to players under the age of 18. Any communications through the Services between a coach and a player will be copied to the legal guardian of the player.

18.3 Opting Out

It is not possible to opt out of receiving communications in any of our apps. If you do not wish to receive communications through these apps, you should uninstall them.

If we introduce a newsletter or a similar marketing communication, it will be possible to unsubscribe from it.

19.0 Changes to this Privacy Policy

The one constant in life is change and if our Privacy Policy changes, we will inform you.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know by email and/or a notification through our Service prior to the change becoming effective and will update the date at the top of this page. Changes to this Privacy Policy become effective when they are posted on this page.

You are advised to review this Privacy Policy periodically for changes.

20.0 List of Third Parties

We cannot deliver our Services without the use of third parties.

A full list of the third parties we use to deliver our services is contained in the Privacy Policy Appendix.


Got a query or a request related to our Privacy Policy?

Drop us a quick note and we will be glad to help.