Privacy Notice

Club players and staff

1. The purpose and scope of this Privacy Notice

This Privacy Notice describes how Premier Women’s Rugby Limited (“PWR” or “we”) may process personal data of players, coaching and backroom staff and other individuals employed or engaged by PWR clubs for the operation of PWR’s competitions including to carry out PWR’s functions as set out in the PWR Regulations in force from time to time (the “Regulations”) (available at https://www.englandrugby.com/run/rules-governance/rfu-rules-and-regulations/premiership-womens-rugby-league-cup-regulations).

This Privacy Notice will apply to you if you are a player who has signed the PWR Standard Player Contract (the “Contract”) or the PWR Volunteer Player Agreement (the “Agreement”) with a club taking part in a PWR Competition (“Club”), or if you are on loan at a Club. It will also apply if you are a member of a Club’s coaching or backroom staff or otherwise employed or engaged by a Club. You may have certain rights in relation to personal data we hold about you, as further described in section 5 below.

2. What personal data do we collect?

We may collect or receive personal data relating to you or your Club’s participation in PWR’s competitions.

The personal data we collect may include:

Biographical Data: including your name, date of birth, nationality, [,] RFU number, Club and contact details. This data is received from you, your Club, or our service providers;
Performance and Tracking Data: including appearances, minutes played, yellow and red cards, passes, tackles, carries, metres gained, position on the pitch, and other event and tracking data. This data is received from sports data and analytics providers engaged by PWR
Player Imagery: including photographs and video footage featuring you. This data is received from broadcasters, photographers, videographers and other service providers, and may be collected at matches, photo shoots or promotional events;
Medical Data: including concussion and head impact management data (including Head Injury Assessment (“HIA”) test results), injury surveillance data,and other results from testing from time to time. This data is received from our medical, research, and other service providers and from your Club; and
Diversity Data: information regarding age, gender, racial or ethnic origin, religion, sexual orientation, disability and education as part of our monitoring and promotion of equality of opportunities in PWR’s competitions. Any Diversity Data collected will be anonymised and/or aggregated, so that individuals cannot be identified. We also collect personal data in order to carry out our regulatory functions under the Remuneration Cap Regulations, as described in the Remuneration Cap Regulations Privacy Notice (available at www.thepwr.com/remuneration-cap-regulations-privacy-notice).

3. How do we use this personal data, and what is our legal basis for this use?

We may use your personal data for the purposes set out in the table below. We have also set out our “legal basis” for each of these uses.

Use	Purpose	Legal basis for use
Operating PWR’s competitions	We use your personal data to facilitate your participation and your Club’s participation in PWR’s competitions, and to ensure that we can operate, administer and govern PWR’s competitions. For example, we use: - Biographical Data and Player Imagery to administer PWR’s competitions and to facilitate your participation in them; and- Performance and Tracking Data to operate PWR in a safe manner, including to ensure that Players are operating within designated matchday load allowances.	It is in our legitimate interests to operate, administer and govern PWR’s competitions, to protect the integrity of the competitions and the game, and to ensure PWR’s competitions operate in an effective, safe and lawful manner.
Operating PWR’s website, app, social media channels and creative assets	We use your personal data including your Biographical Data, Performance and Tracking Data and Player Imagery to operate PWR's website, app, social media channels, and create digital and physical creative assets. This includes the creation of statistics pages, graphics and analysis, and other commercial or creative output from time to time.	It is in our legitimate interests to develop, promote and commercialise PWR’s competitions.
PWR commercial activities	We may use your Performance and Tracking Data, Player Imagery and limited other personal data promotional or commercial activities, statistical, analysis or betting purposes.	It is in our legitimate interests to develop, promote and commercialise PWR’s competitions.
Regulating PWR’s competitions, and other processing in connection with legal claims, compliance and regulatory purposes	We use your personal data for our regulatory oversight pursuant to the Regulations, enforcing the measures we have put in place to protect the integrity of PWR’s competitions, and to bring or defend claims, or to respond to requests by government or law enforcement authorities.	It is in our legitimate interests to regulate PWR’s competitions to protect the integrity of the competitions and the game, and we will respond to requests by government or law enforcement authorities where required by law. Processing may be necessary for compliance with legal obligations to which PWR is subject.

Special Category Data

We may also use certain sensitive or “special category data” for the purposes set out in the table below. We have also set out our “legal basis” and applicable condition for processing each of these uses.

Use	Purpose	Legal basis for use
Processing Medical Data	We use your Medical Data to operate PWR’s competitions in a safe and lawful manner, and to assist us in performing our operational and regulatory functions.	It is in our legitimate interests to operate PWR’s competitions in a safe and lawful manner. Where Medical Data constitutes special category data, we may process this where certain conditions are met, including where: - it is necessary for reasons of substantial public interest (including to protect the integrity and standards of behaviour of PWR’s competitions; preventing or detecting unlawful acts)- for reasons of public interest in the area of public health;- it is necessary for the purposes of preventative or occupational medicine ;- it is necessary for the establishment, exercise or defence of legal claims;- you have already made the information public;- in rare cases, to protect you or a third party’s vital interests (i.e. your life) where you are physically or legally incapable of giving consent; or- we have your explicit consent.
	We may share your injury data with the RFU where we have received your explicit consent in connection with your participation in the Women’s Rugby Injury Surveillance Project (“WRISP”)	This data will be shared where we have your explicit consent
	We may share your injury data with certain institutions for research purposes	This data will be shared were we have your explicit consent.
Processing Diversity Data	We may use your Diversity Data to identify or review the equality of opportunity or treatment between participants in PWR’s competitions and within Clubs, in order to promote or maintain such equality, and inform and refine PWR's diversity and inclusion strategy. We will also use anonymised and/or aggregated Diversity Data to track demographic changes and trends within PWR’s competitions and within Clubs.	We may use Diversity Data where: - it is necessary for the substantial public interest in identifying or keeping under review the existence or absence of equality of opportunity;- we have obtained your explicit consent; or- you have already made the information public.

4. Do we share this personal data?

We may share selected necessary elements of your personal data with third parties in order to carry out our operational and regulatory role, including:

with third party service providers engaged by PWR, such as hosting providers and other technology providers, and professional advisors;
we may share Medical Data, such as:
sharing injury data with the RFU in connection with your participation in the Women’s Rugby Injury Surveillance Project (“WRISP”);
sharing HIA data with the RFU and Clubs you may represent; or
otherwise for certain research or other projects.
we may share your Biographical Data and Performance and Tracking Data with representatives of the RFU and the Rugby Players Association;
we may share Performance and Tracking Data, Player Imagery and limited other personal data with our commercial partners;
we may share anonymised and/or aggregated Diversity Data with the RFU; and
where it is required by law with law enforcement agencies, regulators, courts, other government authorities or other third parties where we believe necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party.

Our sports data and analytics providers and broadcasters may share Performance and Tracking Data and Player Imagery with Clubs, media outlets, betting companies, and other third party licensees for commercial, statistical, analysis or betting purposes.

Other than in limited cases, we do not transfer your personal data outside the United Kingdom. In the limited cases in which we may transfer your personal data outside the United Kingdom (including to our HIA data service provider, and our video analysis software provider), we will ensure we implement appropriate safeguards to such personal data in compliance with applicable data protection law, including by way of an international data transfer agreement or addendum in a form approved by the Information Commissioner’s Office (“ICO”). We can provide copies of these safeguards if applicable on request, at the details in the “Contact us” section below.

5. What are your rights in relation to your personal data?

You may have certain rights under data protection law in relation to personal data we hold about you:

You have the right to ask us for a copy of personal data we hold about you, and to correct your personal data.
You may also have a right to request that we delete or restrict processing of your personal data, and, or to object to our processing in certain circumstances.
We generally do not rely on your consent in order to process your personal data, but where we do we will inform you specifically. If we obtain this consent from you, you are permitted to withdraw your consent at any time.

Your rights are not absolute, and may be limited under data protection law, for example if you ask us to delete information which we require for the establishment, exercise or defence of legal claims, or which we are required to keep under applicable law.

To exercise your rights, you can contact us using the details in the “Contact us” section below.

6. How long do we keep this personal data?

We retain your personal data for as long as necessary to fulfil the purpose it was collected for, and for so long as we have a legal basis to do so.

We may also retain your personal data where we consider it reasonably necessary to investigate or defend against legal claims or potential future litigation.

To determine the appropriate retention period for personal data, we consider the applicable legal requirements, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of the personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means. Pursuant to our Retention and Minimisation Policy, we regularly review the length of time we keep personal data and delete anything no longer needed, or implement specific safeguards to protect stored personal data which does not need to be accessed regularly.

7. Contact us

For the purposes of this Privacy Notice the data controller is Premier Women’s Rugby Limited, whose offices are at Premier Women’s Rugby Limited, 25EP, 25 Eccleston Yards, London, England SW1W 9NF.

If you have questions or concerns regarding the way in which your personal data is used, please contact us at [email protected].

Details of our notification to the Information Commissioner's Office (ICO) may be found in the ICO’s Public Register of Data Controllers at www.ico.org.uk under registration number ZB700259.

You have the right to make a complaint to the ICO about our processing of your personal data.

8. Changes to this Privacy Notice

We may modify or update this Privacy Notice from time to time by posting the amended terms at www.thepwr.com.

Last updated: June 2026