Heathfield and Waldron Rugby Football Club ("the Club") looks after the personal information of our members, players, parents, volunteers and everyone we deal with, and we follow UK data protection law. This works alongside our Privacy Policy, which explains in more detail how we handle your information.

How we protect your information

- Only people who need to see information can see it.
- Our online accounts are protected with an extra layer of security (multi-factor login).
- Sensitive records — safeguarding, medical and DBS — are kept securely and seen by as few people as possible.
- Paper records are locked away and shredded when no longer needed.

The basics we stick to

We collect only what we need, keep it accurate, use it only for the reasons we've explained, and delete it securely once we no longer need it.

Who's responsible

Our Data Officer (dataofficer@hwrfc.org.uk) is the person to contact about anything to do with your information. Everyone with a Club role that involves personal information is expected to follow this policy.

Your rights

You can ask to see, correct or delete your information, or ask us to stop using it. Our Privacy Policy explains how — just contact the Data Officer.

If something goes wrong

If information is lost or shared by mistake, we act quickly to put it right and, where the law requires, we report it to the Information Commissioner's Office (ICO) and tell anyone affected.

Complaints

Please contact our Data Officer first. You can also complain to the ICO at [ico.org.uk](https://ico.org.uk) or on 0303 123 1113.