Privacy policy

Last updated: 28 October 2026

This policy is for anyone who buys from Taranaki Rugby, holds a membership or ticket, signs up for news, uses our app or registers to play. It explains what personal information we collect, where it comes from, what we do with it and the choices you have. We follow the Privacy Act 2020.

The short version

• We collect what we need to run memberships, tickets, the shop, community rugby and our news.
• We only send you marketing if you've said yes, and every email has an unsubscribe link.
• We never sell your information.
• Some of it is held by trusted providers overseas, and Meta and Google use some of it for advertising.
• You can see and correct what we hold about you at any time. Just ask.

Who we are

Taranaki Rugby Football Union Incorporated ("Taranaki Rugby", "we", "us") runs the Yarrows Taranaki Bulls, Whio and community rugby in Taranaki, trfu.co.nz and our shop, the Taranaki Rugby app, and our member site at membership.trfu.co.nz. We are responsible for the personal information we collect, including when one of our providers holds it for us.

What we collect

From you

• Memberships and tickets: your name, email, phone and address, what you bought, your seats and price types, and your answers at checkout, like how you heard about us and whether you'd like news from us. For each seat we may ask for a date of birth and gender, which helps us check age based prices and understand who comes to our games.
• Shop orders: your name, contact details, delivery and billing address and what you bought.
• Sign ups on our website and app: your email, first name, and the teams, clubs, roles and interests you choose, like whether you play, coach or are a parent.
• Surveys and competitions: your answers and entry details.
• Messages: what you tell us when you contact us.

Card payments are handled by our payment providers. We never see or store your full card number. If you choose a payment plan, the provider keeps your payment method to take the scheduled payments.

From other people

• Seat holders: when someone buys a membership or ticket for you, they give us your name and sometimes your email. If you give us someone else's details, please make sure they're happy for you to, and point them to this policy.
• Parents and guardians give us the details of children they register or buy for.
• Rugby Xplorer: when you register to play, coach or referee, New Zealand Rugby's registration system shares your registration with us as your provincial union. That includes your name, contact details, club, team and age group.
• Our ticketing partner: Ticketek runs our member site and ticketing and passes us the details of your purchase.

Automatically

• When you use our website, member site or app, cookies and similar tools record the pages you view, your device and how you found us. See Cookies and advertising below.
• When you open or click our emails, Mailchimp records it, so we know what's useful.
• When you scan in at a game, the entry system records that your ticket was used.

How we use it

• To sell and deliver your membership, tickets and orders, and contact you about them: confirmations, seat details, game day changes and renewals.
• To run community rugby, including registrations, draws and competitions, together with New Zealand Rugby and the clubs.
• To send you news, offers and ticket alerts, if you've said yes.
• To make sure our offers fit: for example, not asking a current member to buy a membership, or sending a parent junior rugby news rather than corporate hospitality.
• To understand what's working and improve it, through analytics and surveys.
• To show relevant ads on Meta and Google, and measure how they perform.
• To keep our events safe and meet our legal obligations.

One customer record

We keep one record for each person in our customer system. It brings together your sign ups, shop orders, the membership or tickets you hold and the interests you've told us about, so we can look after you properly and don't send you things that don't fit. Information about your membership flows from our member site into this record automatically. We also compare our lists, using a scrambled version of each email address, to understand how many players and families are also members, buyers or fans. These comparisons give us totals for planning. They aren't used to make decisions about you.

Marketing and your choices

We only send marketing emails to people who have said yes. That might be a tick box when you buy, a sign up on our website or app, or the "My Provincial Union" option when you register on Rugby Xplorer.

If someone else bought a seat for you, we'll only contact you about that membership or ticket, unless you sign up yourself.

Every marketing email has an unsubscribe link, and you can also email us. Unsubscribing doesn't stop service messages about something you've bought, like your seat details or a game day change.

Who we share it with

We share personal information only where it's needed for the purposes above:

• Ticketek (TEG) and its platform provider vivenu, which run our member site and ticketing.
• Shopify, our shop and customer system.
• Mailchimp, which sends our emails.
• Vercel, which hosts the Taranaki Rugby app and the systems that connect our records.
• SurveyMonkey, for surveys.
• Google and Meta, for analytics and advertising. See below.
• New Zealand Rugby, Rugby Xplorer and your club, for registrations and community rugby.
• Stadium operators, where needed for entry and safety on game day.
• Our payment providers, to take payments.
• Professional advisers, and authorities where the law requires it.

We share your details with sponsors and partners only if you've clearly agreed. If you take up a partner's offer through one of our links, the partner handles your details under its own privacy policy. We never sell personal information.

Cookies and advertising

Our website, member site and app use cookies and similar tools, including Google Analytics through Google Tag Manager and the Meta pixel. They tell us how people use our sites and how our advertising performs. On the member site you can choose which cookies to allow in the cookie banner, and anywhere you can block or delete cookies in your browser settings.

When you buy, our member site may send Meta a scrambled (hashed) version of your contact details so Meta can match the purchase to an ad. We may also give Meta or Google a hashed list of emails to show relevant ads, or to avoid advertising something you already have. Meta and Google use this information under their own privacy policies, and may also use it for their own purposes. You can change your ad settings with Meta and Google directly.

Information held outside New Zealand

Most of our providers store information overseas, mainly in Australia, the United States, Canada and Europe. Where a provider only holds information for us, we choose providers with strong security and contracts that protect it.

Meta and Google use some information for their own purposes, as explained above, and the laws in their countries may not protect it in the same way as New Zealand's.

Children and young people

Many of our members and players are children. A parent or guardian gives us their details, and we use them only for the child's membership, tickets or rugby. Our marketing is for adults. If you're under 16, please ask a parent or guardian before signing up for news or creating an account.

Photos and filming at games

Our games and events are photographed and filmed by us, broadcasters and the media, and crowds may appear in what's published. If there's a photo of you that you'd like us to take down from our channels, let us know.

How long we keep it

• Memberships, tickets, orders and payments: seven years, because tax law requires it.
• Sign ups and marketing preferences: while you stay signed up. If you haven't bought from us, opened our emails or used the app for two years, we delete your sign up details.
• Rugby Xplorer registrations: only for the season we need them for. We delete downloaded registration reports once we've used them.
• Survey answers: three years, so we can compare one season with the next, then we delete them or remove anything that identifies you.
• Website and app analytics: up to 14 months.

Keeping it safe

We use providers with strong security, limit access to the people who need it, and never put full card details in our own systems. If a privacy breach happens that's likely to cause serious harm, we'll tell the people affected and the Privacy Commissioner, as the law requires.

Your rights

You can ask to see the personal information we hold about you, and ask us to correct it. It's free, and we'll reply within 20 working days. You can also ask us to delete your details, or stop using them for marketing, and we'll do that unless the law needs us to keep them.

If you're not happy with how we've handled your information, please talk to us first. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 909.

Changes

We'll update this policy when the way we handle information changes, and change the date at the top. If a change is significant, we'll tell you.

Contact us

Privacy Officer, Taranaki Rugby Football Union
Email: member@trfu.co.nz
Phone: 06 759 0167
Post: Sport Taranaki, Maratahu Street, Westown, New Plymouth 4310