Teddington RFC Ltd Privacy Policy October 2026
Summary of how Teddington RFC Ltd (hereafter referred to as ‘the Club’) and the Rugby Football Union (RFU) use your

• The Club uses personal data to manage and administer membership, participation in rugby and other Club activities, employment and volunteering, and to maintain appropriate contact with those involved. This includes the administration of health and safety, safeguarding, first aid and accident reporting, where relevant. The Club may also collect personal information relating to visitors, spectators, contractors and others attending its premises or activities.
• Some data is shared with the RFU, who use your data to regulate, develop and manage the game.
• Where the Club or the RFU rely on your consent, such as any consent the Club might seek for email marketing, you can withdraw this consent at any time.
• Data may also be processed by third-party service providers engaged by the Club to support its administration and activities. These include Pitchero, Meliora Medical Group Limited, which provides the Return2Play injury management system, and Google, which provides services used for accident, incident and first aid reporting. Such service providers are subject to applicable data protection requirements and contractual safeguards.
• Amongst the data the Club collects from you may be medical (including injury) information. The Club may collect and retain medical, disability and injury-related information where necessary to support safe participation in Club activities, provide or record first aid, investigate accidents, manage health and safety responsibilities or comply with legal obligations. Such information is treated as sensitive personal data and is accessible only to authorised persons with a legitimate need to access it. The legal basis for processing this information will depend on the circumstances and may include consent, compliance with legal obligations or the establishment, exercise or defence of legal claims, subject to the additional protections required by data protection law.
• Where you work in a particular role within the game, you may be required to undergo a Disclosure & Barring Service (DBS) check using the RFU’s eDBS system. The result of this check will be input into your Game Management Service (GMS) record.

Withdrawing consent or otherwise objecting to direct marketing
Wherever the Club relies on your consent, you will always be able to withdraw that consent, although the Club may have other legal grounds for processing your data for other purposes, such as those set out above and in the Data Policy. In some cases, the Club is able to send you direct marketing without your consent, where the Club relies on our legitimate interests. You have an absolute right to opt-out of direct marketing or profiling the Club might carry out for direct marketing, at any time. You can do this by contacting the Club using the details set out below in the ‘How do I get in touch with you or the RFU?’ section.

How do I get in touch with Teddington RFC Ltd or the RFU?
The Club hopes that this privacy policy satisfies any concerns you might have about the way the Club processes your data. If you have any ongoing concerns about how the Club processes your data, you can get in touch via the contacts page on Teddington RFC Ltd website or by writing to the Club Secretary, Teddington RFC, Teddington, TW11 0EA or by emailing GDPR@teddingtonrfc.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.

If you have any concerns about how the RFU process your data, you can get in touch at legal@rfu.com or by writing to The Data Protection Officer, Rugby Football Union, Twickenham Stadium, 200 Whitton Road, Twickenham, TW2 7BA.