Everyone should be conscious that any Personal Identifiable Information (PII) collected for inclusion in a team’s WhatsApp chat (e.g. your name, your child’s name, contact number) is voluntary and intended solely for BRFC communications within that team.

Transmission of your PII and player data to England RFU's GMS platform is mandated as part of the registration process (covered in the next chapter).

If adults choose to exchange contact information with others in the team, this is outside BRFC’s responsibility.

We aim to qualify people for authenticity. This means that if you’ve contacted BRFC via a known point of contact—whether through our website, a recommendation, or public listing—we accept your details as genuine, and your intent to have your player join the club as valid.

There may be grey areas regarding shared PII within trusted networks (family, close friends, or referrals). Such sharing is typical within those cohorts and may overlap with club communications.

Data Protection Principles

We strictly comply with DPA 2018 rules. All those handling personal data must follow these principles:

Used fairly, lawfully, and transparently.
Used for specified, explicit purposes.
Used in ways that are adequate, relevant, and limited to what is necessary.
Accurate and, where needed, kept up to date.
Kept no longer than necessary.
Handled securely—protected against unlawful processing, access, loss, destruction, or damage.

There is no requirement for BRFC to collect or record information relating to special characteristics, including:

Race
Ethnic background
Political opinions
Religious beliefs
Trade union membership
Genetics
Biometrics (used for identification)
Health
Sex life or orientation

Your Rights

Under the DPA 2018, you have the right to:

Be informed about how your data is used
Access personal data
Have inaccurate data corrected
Request data erasure
Restrict or object to how your data is processed
Request data portability to use your data across services

Summary

It is always the intention of BRFC’s designated data controllers to ensure your PII is managed responsibly and deleted in accordance with the DPA 2018 once it is no longer necessary for club operations.