**1. The purpose and scope of this Privacy Notice** This Privacy Notice describes how Premier Rugby Limited (“**PREM Rugby**” or “**we**”) may process personal data of players, coaching and backroom staff and other individuals employed or engaged by PREM clubs for the operation of PREM Rugby’s competitions including to carry out PRL’s functions as set out in the PREM Regulations in force from time to time (the “**Regulations**”) (available at ). This Privacy Notice will apply to you if you are a player who has signed the standard form player contract (the “**Contract**”) with a club taking part in a PRL Competition (“**Club**”), if you are on loan at a Club, or play in a Club’s academy. It will also apply if you are a member of a Club’s coaching or backroom staff or otherwise employed or engaged by a Club. You may have certain rights in relation to personal data we hold about you, as further described in section 5 below. **2. What personal data do we collect?** We may collect or receive personal data relating to you or your Club’s participation in PREM Rugby’s competitions. The personal data we collect may include: · Biographical Data: including your name, date of birth, nationality, height, weight, RFU number, Club and contact details. This data is received from you, your Club, or our service providers; · Performance and Tracking Data: including appearances, minutes played, yellow and red cards, passes, tackles, carries, metres gained, position on the pitch, and other event and tracking data. This data is received from sports data and analytics providers engaged by Prem Rugby · Player Imagery: including photographs and video footage featuring you. This data is received from broadcasters, photographers, videographers and other service providers, and may be collected at matches, photo shoots or promotional events; · Medical Data: including concussion and head impact management data (including Head Injury Assessment (“**HIA**”) test results), cardiac screening data, injury surveillance data, and other results from testing from time to time including for Covid-19. This data is received from our medical, research, and other service providers and from your Club; and · Diversity Data: information regarding age, gender, racial or ethnic origin, religion, sexual orientation, disability and education as part of our monitoring and promotion of equality of opportunities in PRL’s competitions. The Diversity Data collected by PRL will also include Diversity Data relating to players, coaching and backroom staff and other individuals employed or engaged by Premiership Women’s Rugby clubs, but only where a Club has an affiliated Premiership Women’s Rugby club. Any Diversity Data collected will be anonymised and/or aggregated, so that individuals cannot be identified. We also collect personal data in order to carry out our regulatory functions under the Salary Cap Regulations, as described in the Salary Cap Privacy Notice (available at ). **3. How do we use this personal data, and what is our legal basis for this use?** We may use your personal data for the purposes set out in the table below. We have also set out our “legal basis” for each of these uses.

Use	Purpose	Legal basis for use
Operating PRL’s competitions	We use your personal data to facilitate your participation and your Club’s participation in PREM Rugby’s competitions, and to ensure that we can operate, administer and govern PREM Rugby’s competitions. For example, we use: · Biographical Data and Player Imagery to administer PREM Rugby’s competitions and to facilitate your participation in them; and · Performance and Tracking Data to operate PREM in a safe manner, including to ensure that Players are operating within designated matchday load allowances.	It is in our legitimate interests to operate, administer and govern PREM Rugby’s competitions, to protect the integrity of the competitions and the game, and to ensure PREM Rugby’s competitions operate in an effective, safe and lawful manner. Such use is also necessary for the performance of the Contract.
Operating PRL’s website, app, social media channels and creative assets	We use your personal data including your Biographical Data, Performance and Tracking Data and Player Imagery to operate PREM Rugby's website, app, social media channels, and create digital and physical creative assets. This includes the creation of statistics pages, graphics and analysis, fantasy rugby games, and other commercial or creative output from time to time.	It is in our legitimate interests to develop, promote and commercialise PREM Rugby’s competitions.
Regulating PRL’s competitions, and other processing in connection with legal claims, compliance and regulatory purposes	We use your personal data for our regulatory oversight pursuant to the Regulations, enforcing the measures we have put in place to protect the integrity of PREM Rugby’s competitions, and to bring or defend claims, or to respond to requests by government or law enforcement authorities.	It is in our legitimate interests to regulate PREM Rugby’s competitions to protect the integrity of the competitions and the game, and we will respond to requests by government or law enforcement authorities where required by law.

Special Category Data We may also use certain sensitive or “special category data” for the purposes set out in the table below. We have also set out our “legal basis” and applicable condition for processing each of these uses.

Use

Purpose

Legal basis for use

Processing Medical Data

We use your Medical Data to operate PREM Rugby’s competitions in a safe and lawful manner, and to assist us in performing our operational and regulatory functions.

It is in our legitimate interests to operate PREM Rugby’s competitions in a safe and lawful manner.

Where Medical Data constitutes special category data, we may process this where certain conditions are met, including where:

· it is necessary for reasons of substantial public interest (including to protect the integrity and standards of behaviour of PREM Rugby’s competitions; preventing or detecting unlawful acts)

· for reasons of public interest in the area of public health;

· it is necessary for the purposes of preventative or occupational medicine and the management of health care systems;

· it is necessary for the establishment, exercise or defence of legal claims;

· you have already made the information public; or

· we have your explicit consent.

Processing Diversity Data

We may use your Diversity Data to identify or review the equality of opportunity or treatment between participants in PREM Rugby’s competitions and within Clubs, in order to promote or maintain such equality, and inform and refine PREM Rugby's diversity and inclusion strategy. We will also use anonymised and/or aggregated Diversity Data to track demographic changes and trends within PREM Rugby’s competitions and within Clubs.

We may use Diversity Data where:

· it is necessary for the substantial public interest in identifying or keeping under review the existence or absence of equality of opportunity;

· we have obtained your explicit consent; or

· you have already made the information public.

**4. Do we share this personal data?** We may share selected necessary elements of your personal data with third parties in order to carry out our operational and regulatory role, including: · with third party service providers engaged by PREM Rugby, such as hosting providers and other technology providers, and professional advisors; · we may share Medical Data where we have a lawful basis to do so, such as: o sharing cardiac screening data with our clinical governance advisors, Covid-19 testing results with Public Health England and the Professional Rugby Testing Oversight Group (which includes representatives from PREM Rugby and the Rugby Football Union (“**RFU**”), and an independent virologist) in order to manage Club and PREM Rugby responses to results; and o sharing injury data with the RFU where we have received your explicit consent in connection with your participation in the Professional Rugby Injury Surveillance Project (“PRISP”); and o sharing HIA data with the RFU and Clubs you may represent, where it is necessary for reasons of substantial public interest to maintain standards of integrity and behaviour of PREM Rugby’s competitions, or where we receive your explicit consent; or o otherwise for certain research or other projects where we have a lawful basis to do so, in particular where we receive your explicit consent. · we may share your Biographical Data and Performance and Tracking Data with the Professional Game Board (which incorporates representatives of the RFU, PREM Rugby, Rugby Players Association and Championship clubs) to the extent necessary to fulfil our regulatory obligations to monitor minutes played by Players; · we may share Performance and Tracking Data, Player Imagery and limited other personal data with our commercial partners for their own or our joint promotional or commercial activities; · we may share anonymised and/or aggregated Diversity Data with the RFU for the purposes of identifying or review the equality of opportunity or treatment between participants across rugby in England, in order to promote or maintain such equality, and inform and refine the RFU’s diversity and inclusion strategy; and · where it is required by law with law enforcement agencies, regulators, courts, other government authorities or other third parties where we believe necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party. Our sports data and analytics providers and broadcasters may share Performance and Tracking Data and Player Imagery with Clubs, media outlets, betting companies, and other third party licensees for commercial, statistical, analysis or betting purposes. Other than in limited cases, we do not transfer your personal data outside the United Kingdom. In the limited cases in which we may transfer your personal data outside the United Kingdom (including to our HIA data service provider, and our video analysis software provider), we will ensure we implement appropriate safeguards to such personal data in compliance with applicable data protection law, including by way of an international data transfer agreement in a form approved by the Information Commissioner’s Office (“**ICO**”). We can provide details of these safeguards if applicable on request, at the details in the “Contact us” section below. **5. What are your rights in relation to your personal data?** You may have certain rights under data protection law in relation to personal data we hold about you: · You have the right to ask us for a copy of personal data we hold about you, and to correct your personal data. · You may also have a right to request that we delete or restrict processing of your personal data, and to obtain your personal data in a structured, machine readable format, or to object to our processing in certain circumstances. · We generally do not rely on your consent in order to process your personal data, but where we do we will inform you specifically. If we obtain this consent from you, you are permitted to withdraw your consent at any time. Your rights are not absolute, and may be limited under data protection law, for example if you ask us to delete information which we have compelling legitimate interests in keeping, or which we are required to keep under applicable law. To exercise your rights, you can contact us using the details in the “Contact us” section below. **6. How long do we keep this personal data?** We retain your personal data for as long as necessary to fulfil the purpose it was collected for, and for so long as we have a legal basis to do so. For example, we will retain your Medical Data until such time as we have no need to review or assess the applicable data for the relevant purpose. We may also retain your personal data where we consider it reasonably necessary to investigate or defend against legal claims or potential future litigation. To determine the appropriate retention period for personal data, we consider the applicable legal requirements, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of the personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means. Pursuant to our Retention and Minimisation Policy, we regularly review the length of time we keep personal data and delete anything no longer needed, or implement specific safeguards to protect stored personal data which does not need to be accessed regularly. **7. Contact us** For the purposes of this Privacy Notice the data controller is Premier Rugby Limited, whose offices are at Premier Rugby Limited, Thomas House, 84 Eccleston Square, London, England, SW1V 1PX. If you have questions or concerns regarding the way in which your personal data is used, please contact us at [privacy@premiershiprugby.com](mailto:privacy@premiershiprugby.com). Details of our notification to the ICO may be found in the ICO’s Public Register of Data Controllers at [www.ico.org.uk](http://www.ico.org.uk) under registration number ZA394988. You may refer any complaints you may have to the ICO. **8. Changes to this Privacy Notice** We may modify or update this Privacy Notice from time to time by posting the amended terms athttps://www.premiershiprugby.com/premiership-rugby-player-and-participant-privacy-notice. If we make any revisions that materially change the ways in which we process your personal data, we will notify you of these changes before implementing them. *Last updated: 9 May 2025*