RugbyPass Websites Privacy Statement

This Privacy Statement is effective from 3rd November 2025.

Contents

1. Introduction

This Privacy Statement has been developed to illustrate the commitment of RugbyPass Limited (“RugbyPass”) to the protection of the privacy and personal information of individuals who visit, interact with or avail of the services, features and products available via the RugbyPass websites and platforms.

RugbyPass Limited is part of the World Rugby group of companies, which includes World Rugby Events DAC, World Rugby Tournaments Limited, World Rugby Limited and World Rugby.

This Privacy Statement applies to your use of and access to the following RugbyPass websites and platforms:

www.rugbypass.com
www.rugby365.com
www.rugbydump.com
www.rugbyonslaught.com
www.rugbypass.tv
The RugbyPass App (available to download via Google Play Store and Apple App Store). See section further below entitled “The RugbyPass App” for additional information specific to the RugbyPass App.

The above websites and platforms shall be referred to collectively throughout this Privacy Statement as the “Websites”.

2. Application of this Privacy Statement

This Privacy Statement applies to the processing of personal information collected via or in relation to the Websites, including communications between the user/visitor and RugbyPass, email submissions, forms and enquiries, surveys, questionnaires, competitions, applications, customer service enquiries, telephone or postal communications and users or visitors receiving and using services, products and features made available via the Websites.

This Privacy Statement also applies to personal information about you which we may receive, from time to time, from third parties (e.g. where you have agreed to a third party sharing your personal information with RugbyPass for marketing purposes).

Please note that for any personal information collected or processed via cookies or other tracking technologies via the Websites, you are encouraged to consult the Cookies Policy for each Website that you are visiting, which will also be made available to you within each Website.
This Privacy Statement may be supplemented with additional information about the processing of your personal information for specific applications, features or services made available via the Websites. You are encouraged to also carefully review such additional information.

3. Purpose of this Privacy Statement

The purpose of this Privacy Statement is to provide individuals with a clear understanding of:

the types and categories of your personal information that we collect;
why we collect your personal information and where we collect it from;
how and why we use your personal information;
who we may share or disclose your personal information with and why;
how we protect your data protection rights;
how you can obtain further information on our use of your personal information;
other details relevant to how we give effect to the privacy of individuals.

4. Data Controller

When we refer to “us” or “we” or “our”, we are referring to RugbyPass Limited with registered office at 8-10 Pembroke Street Lower, Dublin 2, Ireland. RugbyPass Limited is the data controller for the personal information it processes via the Websites.

As mentioned in the “Introduction” section above, RugbyPass Limited is part of the World Rugby group of companies.

If you have any queries in relation to this Privacy Statement, or if you would like to contact RugbyPass in relation to your personal data rights, you can contact RugbyPass using the contact details contained in the section entitled “Contact Details” at the end of this Privacy Statement.

5.Fan Account

In order to access certain parts of the Websites, view certain video and audio content or avail of additional services, functionalities or features made available via the Websites, you may be required to register for and sign in to your World Rugby fan account. The World Rugby fan account enables individuals to interact across various World Rugby digital platforms, websites and mobile apps, including the Websites.

When creating your World Rugby fan account you will be presented with a separate World Rugby privacy statement, which describes how your data is collected and processed by World Rugby in relation to the creation and use of your World Rugby fan account.

From time to time, when you are signed in to your World Ruby fan account and visiting the Websites, we may use the personal information associated with your World Rugby fan account for various reasons, including to facilitate and fulfil services and products requested by you, facilitate entry into digital competitions and online games and conduct surveys and polls. We may also use such personal information from your World Rugby fan account to understand how fan account holders interact with the Websites (e.g. number of videos watched, content interactions, etc), engagement based on demographics, analyse account holder engagement and preferences in order to support Website activities and offerings and to enhance the overall success of the Websites. For more information on how we analyse user and visitor data related to the Websites, see section below entitled “Understanding User Behaviour and Improving Interactions”.

6. Types of Personal Information We Collect and How We Use It

While certain parts of the Websites (e.g. content, videos, games, competitions, etc) won’t be available to you if you haven’t signed in to your World Rugby fan account, you can generally visit and browse the Websites without having to submit any personal information.

However, when visiting the Websites, we may collect certain automatically generated electronic network activity information, which may include:

Internet Protocol (IP) Address
Device type (laptop, mobile, etc)
Browser, operating system (OS), etc
App or platform ID
Unique user IDs

Such information will be collected via cookies or similar technologies as outlined in the Cookies Policy of the specific Website that you are visiting and which is made available to you via the relevant Website.

The following table outlines the categories and types of personal data we collect from you (or you provide) and process, the reasons/purposes for why we collect it, how we use it and our lawful basis for doing so.

Purpose/Use (1)
Interactions and engagement with the Websites. To enable users to participate in competitions, games, features and other services (score/match predictors, fantasy rugby games, etc.) made available on the Websites.

Personal Data Processed (1)
Users may be required to submit personal information, including first name, last name, address, location, age, together with any other information requested or submitted by a user as part of their participation in the relevant activity. If a user wins a competition, we may publish their personal details online, including on social media platforms.

Lawful Basis (1)
We have a legitimate interest in properly managing and administering user participation in the relevant competition, game or other service or function in which you participate. We may also be required to fulfil a contract created by a user upon entry into a particular feature or activity.

Purpose/Use (2)
Posted Content and User Comments

To allow users to interact with and comment on articles, videos, or other content or features, as well as enter forum discussions with other users, replying to or interacting with other comments.

Personal Data Processed (2)
If a user interacts with the commenting function, your user name, IP address, email address, unique user ID and posted content will be processed for the purposes of facilitating commenting and sharing of content in the public interactive forums on the Websites. The above information will be submitted and stored by our third party commenting software tool and provider, Hyvor.

Other Website users will be able to see a) any feedback or comments that a user submits and b) the username or initials (first and last name) of the user who submitted the feedback or comments.

Lawful Basis (2)
Use of the commenting function is voluntary. You will submit your information only where you have consented to do so.

We have a legitimate interest in providing the commenting, interactive and community areas a service to a user.

We also monitor to ensure that users of such features comply with the contractual Terms and Conditions of Use of the Websites.

Purpose / Use (3)
Correspondence and Enquiries Data

To answer your queries, complaints or other correspondence with you.

We will also send you service emails based on a contract you have entered into with us in relation to the provision of services or services or products via the Websites.

Personal Data Processed (3)
If you submit a query or provide us with feedback or sign up for a service or feature, any personal information you provide will be processed to provide support related to your query or requirement. This will include your contact details. Your interactions and engagement with us will be retained for evidentiary purposes.

Lawful Basis (3)
This is necessary in our legitimate interests in addressing any queries, questions and concerns that you may have and to ensure our users are satisfied with our services, features and products.
For service emails, our lawful basis will usually be to fulfil a contract that you have entered into with us.

Purpose / Use (4)
Cookies and Tracking Technology Data

The Websites use Cookies and other tracking technologies to track your activity across the Websites, gain information about your Website interactions, deliver personalised content, understand and action preferences, push notifications to users and serve you tailored advertisements, in accordance with the Cookies Policy.

Cookies are also used to monitor Website performance.

Personal Data Processed (4)
Via the use of Cookies, we or our third party advertising partners may collect:

Internet Protocol (IP) Address
Device type (laptop, mobile, etc)
Browser, operating system (OS), etc
App or platform ID
Unique tracking IDs
IDFA (Identifier for Advertisers)

Lawful Basis (4)
For cookies that require consent, our lawful basis for processing your data via the use of cookies will be your consent. For cookies that don’t require consent (i.e. strictly necessary cookies), it is in our legitimate interest to make available a service and platform that works and functions properly for users.
For more information, please consult the sections below entitled “Cookies and Tracking Technology”, “Understanding User Behaviour and Improving Interactions” and “Advertising”.

Purpose / Use (5)
Marketing Communications
We use your personal information to send you marketing information, newsletters and other communications that you have requested from us.

Personal Data Processed (5)
We will process personal information that you provide (contact details, first name, last name, email address, location, age, etc) in order to send you marketing information, content, news and promotions and offers. Where you have agreed to receive marketing communications from our partners, we will share the same personal information with such partners for that purpose.

Lawful Basis (5)
Our lawful basis for sending you direct marketing communications shall be your consent.
For further information on how your personal information is processed for direct marketing activities, please see Section below entitled “Marketing and Communications”.

Purpose / Use (6)
Fraud Detection and Cyber Security
We may process personal information when implementing and monitoring our Website security practices.

Personal Data Processed (6)
We may need to process personal information you have provided or submitted in order to monitor, review and assess the Websites for data security, fraud and cybersecurity purposes.

Lawful Basis (6)
This is necessary in our legitimate interests in ensuring the Websites are run on an effective and secure basis and resolving any functional issues encountered with respect to the Websites.
We also have a legal obligation and legitimate interest in protecting your personal information and the Websites, against fraud, theft and breach.

Purpose / Use (7)
Surveys, Polls and Market Research
From time to time, we may invite you, via the Websites or via our marketing communications, to participate in surveys, polls or market research.

Personal Data Processed (7)
Any information that you agree to provide as part of your participation and responses, including name, email address, location, address, gender and personal preferences.

Lawful Basis (7)
Such surveys, polls or market research will usually be voluntary. As such, our lawful basis for processing the information you provide shall be your consent.

Purpose / Use (8)
Access / Attendance at events
RugbyPass (and/or its partners) may from time to time invite you to attend or participate at in-person or online events.

Personal Data Processed (8)
We will generally require your first name, last name, email address, dietary requirements, accessibility requirements and other such information specific to the event. We will process your information for the purposes of operational requirements, access information, seating, health and safety, fraud protection and other requirements related to the event.

Lawful Basis (8)
Attendance at such events will usually be voluntary. As such, our lawful basis for collecting and processing your personal information will be your consent. For certain processing, we have a legitimate interests in hosting a safe, secure and successful event.

Purpose / Use (9)
Advertising
We will display relevant advertisements (including banner ads and pre/mid/post roll ads on video) directly from RugbyPass and also from third party partners based on preferences and other information collected, primarily via the use of cookies but also via your fan account preferences.

We will also measure the performance of advertisements across the Websites via marketing software and tools.

Personal Data Processed (9)
Internet Protocol (IP) Address, Device type (laptop, mobile, etc), URLs of pages visited, browser, operating system (OS), App or platform ID, unique user IDs.

Lawful Basis (9)
For cookies that require consent, our lawful basis for processing your data via the use of cookies will be your consent.

Purpose / Use (10)
World Rugby Fan Account
To access certain parts or features of the Websites, you will need to sign in to your World Rugby fan account (registration for and use of which is subject to a separate privacy statement). See Section above entitled “Fan Account” for further information.

Personal Data Processed (10)
When using your fan account to access the Websites, we may receive certain of your fan account data and combine it with browsing and interaction data from a user’s activities on the Websites. For further information, see section entitled “World Rugby Fan Account” above in this Privacy Statement.

Lawful Basis (10)
You will have provided your information voluntarily to World Rugby when first creating your fan account and received the relevant fan account privacy statement.
For cookies that require consent, our lawful basis for processing your browsing and interaction data via the use of cookies will be your consent.

7. Disclosure and Sharing of your Personal Information

Third party suppliers, providers and data processors
We may need to share or provide access to your personal information with carefully selected third party suppliers, providers and processors in order to support with the operation of the Websites on our behalf and to provide users and visitors with the products, services, activities and functionalities made available via the Websites. This will include sharing with and processing by:

third party service or functionality providers acting on our behalf and instructions, including technical IT service providers to provide maintenance, administrative or technical support for the Websites and relevant systems, activities and platforms related to the Websites
Software publishers and hosts
IT platform development services and providers
Hosting services / hosting platforms
Customer relationship management platforms (CRM), cookies management platforms (CMP) and other such data management platforms
Communication and advertising services and applications (including service emails, marketing newsletters, push notifications, advertisement providers/exchanges)
Marketing and analytics providers and platforms for the purposes of providing support with data and performance analytics, marketing newsletters and communications, marketing integrations and advertising activities
Tracking, analytics and data measurement and visualisation software/platforms and providers.

We ensure that there are robust contracts in place with such providers and data processors and that the above service providers are not authorised to use or disclose personal information except as necessary to perform services on behalf of RugbyPass, to comply with legal requirements or otherwise in accordance with the lawful instructions of RugbyPass.

Third Party Disclosures and Partners

Your personal information may also be shared with or disclosed by us to the following third party partners:

Platforms that provide certain functionalities, infrastructure and applications via the Websites who will receive and have access to your personal information as data controllers. For example, when using the commenting function made available via certain of the Websites, you may need to submit information (namely User ID, name, username and email address) to our third party commenting platform, Hyvor;
Where you have signed up for or subscribed to a product, feature, service or event via the Websites, we may need to share your personal information with the company, event or venue responsible for providing and fulfilling that product, service or event;
We may include social media platform plug-ins, including embedded videos and content, on the Websites which allow social media platforms (Facebook, Instagram, X, etc) to set cookies and other tracking technologies when you visit or use the Websites. Those social media platforms will be responsible, as independent controllers, for any of your data that they collect in this way;
We may also share your personal information with entities or associations within the World Rugby group of companies, who may support or provide services (including shared services) for the Websites, including operations, marketing, analytics, reporting, platform and IT/technical support in relation to the Websites. World Rugby entities may also host certain of the centralised IT systems (and the data within) used by the Websites. Such World Rugby entities include:
- World Rugby Events DAC
- World Rugby Tournaments Limited
- World Rugby Limited
- World Rugby
Commercial partners of RugbyPass and World Rugby from whom you have agreed (or otherwise consented) to directly receive marketing communications. In such circumstances, your personal information will be processed in accordance with the relevant commercial partner's privacy statement, which you are encouraged to consult;
Your personal information may also be shared with third party advertising companies and advertising vendors who serve or facilitate advertisements across the Websites. For further information, see the section entitled "Advertising" further below;
We may share certain de-identified personal information (email, age, location) with our partner advertising platforms (Meta, Google, etc) to support with targeted marketing and advertising to custom and lookalike audiences, including via social media accounts, other Websites and platforms. Such partner advertising platforms will not receive your identifiable information, but rather a representation of your information;
We may also share your personal information with relevant third parties:
- when required by law or in response to legal process;
- in response to a request from law enforcement relating to a criminal investigation;
- to protect our rights, privacy, safety or property, or that of the public;
- to analyse our data, conduct mobile analytics services or to maintain and improve our services (subject to confidentiality agreements as appropriate);
- to permit us to pursue available remedies or limit damage that we may sustain;
- if the rights or safety of another individual might be violated or in threat; and
- where you otherwise consent to us doing so.

8.Cookies and Tracking Technologies

The Websites use cookies and other tracking technologies.

Cookies are small text files placed on your computer or device when you are browsing the Website. Cookies enable us to understand how you interact with the Websites and also enable us to facilitate tailored advertising to you. Cookies also help us to ensure that we can provide you with the very best experience when you use the Websites and provide us with important information to enable us to make improvements, including in relation to fan experience, customer journey and performance, to the Websites.
You can accept, reject or manage cookies by clicking on the initial Cookies Pop-Up via the Websites you are visiting, or if already accepted or rejected by you, via the Cookies (or SDK) Preferences/Management Platform also available via the Websites.

For detailed information on the Cookies and tracking technologies that are used on each Website and the reasons for why they are used, we advise and encourage you to consult the Cookies Policy referenced below and which will also be available to you via each specific Website that you are visiting.

www.rugbypass.com - Cookies Policy
www.rugby365.com - Cookies Policy
www.rugbydump.com - Cookies Policy
www.rugbyonslaught.com - Cookies Policy
www.rugbypass.tv - Cookies Policy
The RugbyPass App (available to download via Google Play Store and Apple App Store). See section below entitled "The RugbyPass App" for additional information specific to the RugbyPass App - Cookies Policy. You will find the full list of SDKs in the consent management/preferences tool within the RugbyPass App.

9. Marketing and Communications

Direct Marketing from RugbyPass

In addition to any marketing communications or newsletters you may have subscribed to in relation to your World Rugby fan account, you may subscribe directly via some of the Websites to receive marketing communications from RugbyPass.

RugbyPass will ensure it has your consent before it sends general marketing information directly to you. We are interested in sending you marketing communications that are relevant to you, so, we may process your personal information so that we can send you tailored marketing communications aligned with your interests. This may include RugbyPass service/product related news items, general rugby news and content, announcements, information about upcoming events and rugby tournaments, offers and information about commercial partners. The lawful basis for sending such marketing information to you is your consent.

When RugbyPass sends communications to users that have consented to receive marketing communications, RugbyPass may track the click through and email open rates of such communications. This enables RugbyPass to understand the performance of its email marketing campaigns. You can opt-out of these activities at any time by unsubscribing to marketing communications (see below).

You may withdraw your consent to receiving marketing communications from RugbyPass at any time by emailing RugbyPass using the address contact details in the "Contact" section below or by clicking the "Unsubscribe" button at the bottom of each marketing communication.

Direct Marketing from Commercial Partners/Third Parties

You may also subscribe directly via the Websites to receive marketing communications from commercial partners of RugbyPass. Where you opt in via the Websites to receive marketing communications from a commercial partner, you are agreeing to RugbyPass sharing your personal data with the applicable commercial partner so they communicate directly with you. The partner will then receive and process your personal data in its capacity as an independent controller. You are encouraged to review the privacy statement of the relevant commercial partner to understand how they will use and process your personal data.

If you have opted in and consented to receive marketing communications from any third party organisations or commercial partners and you subsequently wish to unsubscribe from such communications, you will need to contact those third party organisations or commercial partners directly or use the "Unsubscribe" option available to you in their communications.

10.Understanding User Behaviour and Improving Interactions

RugbyPass may use personal information submitted by or collected from you in connection with the Websites in order to improve and personalise products and services and to enable the provision of an improved and more personalised user experience when engaging with the Websites. This may include showing you and sending you more relevant content, advertisements and marketing communications via the Websites and via third party websites.

We may send you focused and personalised marketing, promotional, advertising and information messages from time to time (provided that where consent is required, it has been obtained).

We analyse information and personal data from Website users to identify common characteristics, specific preferences and information that may be relevant to each user. We do this by assessing various types of information that we have obtained including Website behaviour, demographic information, geographical information, browsing history, age and particular user preferences. This helps us to provide you with focused and personalised communications, services and information which are likely to be most important to you.

We carry out research and analysis on your personal data, to determine the success of campaigns and communications, to better understand behaviour and responses and identify patterns and trends. This also helps inform our strategic and commercial approach and supports the overall success of the Websites. Understanding users, their interests and what they care about also helps us to offer an improved user experience.

Where you have submitted certain personal information (for example, subscribing to a product or service via the Websites), we profile users on the basis of various criteria including their interests, geographic location, purchases/subscriptions, Websites/App activity and socioeconomic and age groups.

Where certain conditions are met that enable and ensure compliance, we may share some hashed (de-identified) personal information (email, age and location) to our partner advertising platforms (e.g. Meta, Google, etc) for target marketing to custom and lookalike audiences. These platforms will not receive your identifiable information from us, instead they receive a representation of your information (e.g. a string of digits and characters). This ensures you are not directly identifiable. The above is based on RugbyPass' legitimate interest to develop and grow its business and inform its marketing strategy (you can opt out of this legitimate interest processing at any time - see further below in this section).

From time to time, we may use aggregated, anonymised lifestyle data obtained from third parties to supplement our user profiles. This information helps us to ensure communications are relevant and timely and to offer new products and services that may be of interest to users.

Cookies and Tracking Technologies

For more information Cookies and tracking, see links to the Website Cookies Policies in Section above entitled "Cookies and Tracking Technologies".

Where you have provided your consent (where consent is required), we will track certain of your activity on the Websites via the use of cookies and similar technologies in accordance with the Cookies Policy of the relevant Website. The Websites will provide you with an option to accept/consent or reject to the use of cookies via the Cookies Pop-Up and Cookies Preferences tool (which is made available via the Websites). The Websites use a technology platform called Bloomreach to collect and manage the data gathered via cookies in one place for its internal analysis and to help generate insights.

In particular, we will collect information about your interaction with the Websites, its pages, applications, services and functionalities. This may include information about your computer and, where available, your IP address, operating system, browser type and browsing history (i.e. URL visits, etc). We may perform statistical analysis of user behaviour and characteristics in order to measure interest in and use of the various areas of the Websites and to ascertain the number of users that have visited particular web pages. ("statistical data"). In performing statistical analysis, we will use Google Analytics (a web analytics service provided by Google) to capture and analyse Websites statistics. This will be conducted in accordance with this Privacy Statement and the applicable Cookies Policy (see Section 8 above).

We also use data provided by you during your interactions with the Websites to assess our user population, generate insights and improve users' interactions with the Website. This is done by aggregating your data with that of other users to generate insights that will enable us to improve our interactions with you as well as improve services, functionalities and products. The aggregation is not done on an individual basis or using information that can directly identify you, such as your name, but does use some demographic information (e.g. gender, age range, address) where such information has been provided by you. In general, we are relying on our legitimate interest to improve the Website, interactions, its services and the user experience when aggregating such data and generating insights.

You may object to our legitimate interest based processing at any time by emailing your objection to dataprotection@worldrugby.org or contacting RugbyPass using the address contact details in the "Contact Details" section below.

11.Advertising on the Websites

RugbyPass, our commercial partners and our advertising partners, engage in advertising and work with advertising companies to support with the serving of commercial advertisements across the Websites. This may include banner ads, pop-ups and pre/mid/post roll ads across articles, features, video content, audio content and generally on pages across the Websites.

Some advertisements may be served on a general basis and will be seen by all visitors to the Websites.

Some of the advertisements served on the Websites may be first-party advertisements - meaning that we have published the advertisements ourselves (using publication software tools) and we ourselves are collecting the analytics data arising from such first-part advertising.

Online retargeting also occurs on the Websites - a form of online advertising that enables RugbyPass and its advertising partners to show you advertising based on your browsing patterns and interactions on the Websites. To facilitate this, information collected from you via cookies and similar technology via the Websites will be received and used by us and/or our advertising partners for this purpose. This means that when you are on another website, you may be shown advertising based on your browsing patterns on the Websites. This happens where you have consented to the use of such cookies.

Some advertisements may be third party advertisements which are served by third party advertising partners and vendors. Some of these partners and vendors may be specialised advertising companies or platforms who provide and implement programmatic advertising services (on behalf of other vendors) that enable the purchase of advertising space on the Websites by way of automated ad auctions. For such third party advertisements, your information will be collected directly by third party advertiser cookies and received and used by such third party advertisers for the purposes of their advertising activities. These advertisements may be personalised to you based on your interests, internet browsing history and other information received by third party advertisers from a user's device and cookies. For further information regarding the use of Cookies on the Websites, please consult the Cookies Policy of the relevant Website you are visiting.

RugbyPass may also use advertising data to build our marketing strategy and use aggregated audience demographics as part of sales materials related to advertising sales across the Websites.

12. The RugbyPass App

The RugbyPass App is available to download via Google Play Store and Apple App Store.

In order to properly access the majority of the content, video and other services and functions made available via the RugbyPass App (and indeed, RugbyPass.TV), you will need to have first created and signed in to your World Rugby fan account.

When using the RugbyPass App, you may also be asked to confirm your preferences in relation to how you use the App. This may include your preference to receive certain types of content or your preference in receiving information that relates to your favourite rugby team. Your preferences data will be retained and stored so that the App can remember you each time you use the App and enables us to send you information or content aligned with your preferences.

From time to time the RugbyPass App may also give you the option to receive "Push Notifications" directly to your device. Push Notifications will also include information that is related to the preferences that you have selected via the App. Where Push Notifications are made available, you will have the option to switch on or off Push Notifications via either the RugbyPass App or via your own device.

13. Security and Protection of Your Personal Information

We will work to ensure that any personal information that you submit or is collected or processed by us is protected from the risks of unauthorized access or disclosure. We have put in place and will maintain appropriate technical and organizational measures, including in accordance with applicable data protection or data privacy laws, which include: system and security audits, encrypted data transmissions, frequent data back-ups, access and user control to prevent unauthorised persons from gaining data access, authorised permissions and control of separation of data.

14. International Transfers

From time to time, your personal information may be transferred, accessible or visible to individuals and/or entities located outside of the European Economic Union (EEA). Countries outside the EEA may not provide a level of legal protection for your information as strong as the level of protection provided in the EEA or your home country.

Where RugbyPass transfers your personal data to a recipient based outside of the EEA, we will put in place necessary data transfer arrangements (for example, a data transfer agreement) with the overseas recipient of the information, protecting the information, including in any appropriate standard form approved for this purpose by, for example, the European Commission. Please contact us if you would like to see a copy of any of these agreements.

The only exceptions to the above are where personal information is transferred to another jurisdiction which has already been determined by the original jurisdiction to provide an adequate level of protection or where the transfer is legally justified on another basis. For example purposes only, if RugbyPass intends to transfer data outside of the EEA and to a country for which an adequacy decision has not been granted by the European Commission, RugbyPass will ensure to put in place standard contractual clauses (SCCs) in accordance with applicable requirements provided for by the European Commission.

15.How Long Do We Retain Your Personal Information?

The period of time during which we retain your personal information will differ depending on the type of information and the reason why it was originally collected or submitted. We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for or for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we take into account the following criteria and considerations:

the amount, nature, and sensitivity of the personal data;
the services you have requested (e.g. purchase/subscription of a product or service);
the potential risk of harm from unauthorised use or disclosure of your personal data;
the purposes for which we process your personal data and whether we can achieve those purposes through other means;
any requests for deletion or part deletion of your data;
our contractual obligations and rights in relation to the personal data involved; and
applicable legal requirements (including prescribed retention periods and statutes of limitations).

In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

16.Right to Withdraw Consent and Performing Contracts

In various circumstances indicated above in this Privacy Statement, we will process your personal data for the purposes of performing a contract with you (e.g. you accessing features on one of the Websites or systems or your subscription to certain services or products via the Websites). In such circumstances, our ability to perform such contracts is dependent on your providing such personal data. Failure on your part to provide the personal data that we have requested in these circumstances, or if you seek to delete or remove such relevant personal data, may result in the contract being rendered impossible (with the potential consequences, for example, that you will not be able to access a system, service or functionality or receive or use a service or product that you have requested).

If you have given us your consent to process your personal information for a specific reason, you have the right to withdraw your consent at any time. If you do withdraw your consent, it does not mean that any processing, with your consent, of your personal data up to that point is unlawful.

Again, in some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

From time to time, we may need to maintain and use information about you in certain circumstances, including to fulfil certain services and/or products that you have previously requested or purchased from us.

17.Your Data Subject Rights

In addition to your right to withdraw consent referenced in the above section entitled "Right to Withdraw Consent and Performing Contracts", you may also have the following rights:

the right to receive a copy of and/or access, correct, and/or modify the personal data that we hold about you, together with other information about our processing of that personal data (i.e. you have a right to be informed about our processing of your personal data);
the right to request that any inaccurate data that is held about you is corrected or rectified, or if we have incomplete information you may request that we update the information so that it is complete and accurate;
the right to request that we erase your personal data or restrict the processing of your personal data;
the right to request that we no longer process your personal data for particular purposes;
the right to object to our use or processing of your personal data or the way in which we process it;
the right to data portability;
Right not to be subject to automated decision-making or profiling; You have a right not to be subject to a decision based solely on automated processing or profiling, where such decisions would have a legal effect or significant impact on you. Where we (or one of our third-party processors) use profiling, which produces legal effects for you or otherwise significantly affects you, you will have the right to object to such processing.

Your ability to exercise any of the above rights may be restricted or subject to specific conditions depending on certain circumstances.

If you have any questions about this Privacy Statement, the practices of the Websites or your dealings with the Websites, you can contact us at the contact details set out below.

18.Contact Details

Our Data Protection Officer is Liam McKenna. If you have any queries in relation to this Privacy Statement, or if you would like to contact RugbyPass in relation to your rights, you can write to us at Data Protection Officer, 8 - 10 Lower Pembroke Street, Dublin 2. You can also contact the Data Protection Officer via email at dataprotection@worldrugby.org.

19. Complaints

If you are not happy with the way that RugbyPass has used your information or addressed your rights, you have the right to make a complaint to the Irish Data Protection Commission as the RugbyPass lead data protection supervisory authority by using the following link: https://forms.dataprotection.ie/contact.

20.Updates to this Privacy Statement

We reserve the right to change and/or update this Privacy Statement at any time without issuing direct notice to you. In such circumstances, we will publish the amended or updated Privacy Statement on the Websites. We may also notify relevant data subjects of any material changes that may impact them where we believe it is appropriate to do so. Previous versions of the Privacy Statement can be obtained by contacting RugbyPass using the details in the "Contact Details" section above.

We encourage you to check this Privacy Statement regularly in order to review the most updated version of this Privacy Statement.