Privacy Notice
Last updated 24 Oct 2026
Oldham Juniors is a volunteer-run under-10 rugby team in Singapore. This notice explains how we handle personal data in the team app at https://oldhamjuniors.duckdns.org. It is written in plain English for Singapore's Personal Data Protection Act 2012 (PDPA).
Who to contact
Dexter Tan, the team manager, is our Data Protection Officer. Email oldhamjuniors2016@gmail.com for any privacy question, access request, or correction.
What we collect
- Parent and guardian names, email addresses, and phone numbers.
- Players' names, dates of birth, emergency contact names and phone numbers, and medical or allergy notes.
- Availability replies for fixtures, including any short comment with a reply.
- Login details (your email and a hashed password) and audit logs of sign-ins and of changes made in the app.
If you send a problem report, we also keep what you wrote, the page you were on, your name, email, and role, and any screenshot you chose to attach.
Why we use it
We use this data only to run the team:
- Team admin, including the squad list and who is linked to which child.
- Fixtures, including dates, kick-off times, venues, and who can play.
- Safety and emergencies, so coaches can see medical notes and who to call.
- Contacting parents about the team, including invites and fixture updates.
We do not sell personal data. We do not use it for marketing.
Consent and withdrawal
A parent or guardian provides their own details and their child's details when the child joins the team. Setting a password on an invite means you agree to this notice and to our Terms of Use.
You can withdraw consent by emailing the Data Protection Officer. We will then stop using the data and delete it within a reasonable time, unless the law requires us to keep something. If you withdraw consent, we may not be able to keep your login or your child's place on the squad list.
Children's data
Players are children. We do not ask a child to create an account. A parent or guardian provides the child's data and decides the availability replies.
Who can see it
- Parents see their own child in full. On the squad list and on fixture lists they see only the names of other players.
- Managers and coaches see the full details they need to run the team and to deal with safety and emergencies.
- The admin sees those same full details, and also club settings, invites, and problem reports.
Transfers outside Singapore
The team is in Singapore. The app is hosted on Google Cloud in us-west1, in the United States. Email is sent through Gmail. Those are the only transfers of personal data outside Singapore. We rely on those providers' safeguards so the data has protection comparable to the PDPA. We do not send the data anywhere else.
How long we keep it
When a player leaves the team, we delete that player's record, and the parent details that are only needed for that player, within a reasonable time. Backup copies are rolled off as older backups are replaced. Login and audit logs are kept only as long as we need them to keep the app secure.
How we protect it
The live site uses HTTPS. Passwords are stored as hashes, not as plain text. What you can open depends on your role. We keep backups of the database.
Access and correction
You can ask to see the personal data we hold about you and your child, and you can ask us to correct anything that is wrong. Email the Data Protection Officer. We will respond within a reasonable time. You can also correct phone numbers, medical notes, and availability yourself in the app when your role allows it.
Data breaches
If a breach is likely to cause significant harm, or affects a significant number of people, we will notify the Personal Data Protection Commission and the people affected, as the PDPA requires. We will also tell you what happened and what you can do.
Changes to this notice
We may update this notice. The date at the top will change. The current version is always on this page.