Skip to main content

Dumfries RFC Privacy Statement

What we need

Dumfries Rugby Football Club (DRFC) will be a “controller” of the personal information that you provide to us unless otherwise stated.

When you register as a member of DRFC or renew your membership (including if you are registering or renewing on behalf of a child under the age of 18) we will ask you for the following personal information:-

Contact details – name, address, e mail address and date of birth;

Membership category – Playing member, non-playing member, youth member

Why we need your personal information - contractual purposes

We need to collect our members’ personal information so that we can manage your membership.  We will use our members’ personal information to:-

Provide you with core member services including SCRUMS, Insurance, Licensing and PVG checks.

Send you membership communications by email in relation to essential membership services, including but not limited to, membership renewals and information on membership benefits.

If you do not provide us with all of the personal information that we need to collect, then this may affect our ability to offer the above membership services and benefits.

Why we need your personal information - legitimate purposes

We also process our members’ personal information in pursuit of our legitimate interests to:-

Promote and encourage participation in DRFC by sending members’ communications and booking information for upcoming competitions and events.  Our competitions and events may be filmed or photographed and your personal information may also be used in images captured from our competitions and events, which we use for promotional, education and development purposes;

Provide competition in DRFC by accepting and managing entries for our competitions and checking your personal information to ensure that you are entered into the correct category;

Develop and maintain our members’ qualifications, including sending e mail communications to members to inform them of upcoming courses, renewal requirements and verify that they have completed any mandatory training and PVG/child protection requirements;

Respond to and communicate with members regarding any questions, comments, support needs or complaints, concerns or allegations in relation to DRFC.   We will use your personal information to investigate any complaint, suspend membership and take disciplinary action where appropriate.

Where we process your personal information in pursuit of our legitimate interests, you have the right to object to us using your personal information for the above purposes.  If you wish to object to any of the above processing, please email us at  If we agree and comply with your objection, this may affect our ability to undertake the tasks above for the benefit of you as a member.

Why we need your personal information - legal obligations

We are under a legal obligation to process certain personal information relating to our members for the purposes of complying with our obligations under the Protection of Vulnerable Groups (Scotland) Act 2007 to check that our coaches and volunteers are able to undertake regulated work with children and vulnerable adults.

Other uses of your personal information

We may ask you if we can process your personal information for additional purposes.  Where we do so, we will provide you with an additional privacy notice with information on how we will use your information for these additional purposes.

Who we share your personal information with

We may be required to share personal information with statutory or regulatory authorities and organisations to comply with statutory obligations.  Such organisations include the Health & Safety Executive, Disclosure Scotland, and Police Scotland for the purposes of safeguarding children.  We may also share personal information with our professional and legal advisors for the purposes of taking advice.  As an affiliated club of the SRU we are required to ensure that all of our members are members of the SRU as a condition of affiliation.  We will share your name and membership category with the SRU who will become a controller of your personal information when they receive it.  The SRU’s privacy notice explains how they use your personal information and can be accessed here  In the event that we do share personal information with external third parties, we will only share such personal information strictly required for the specific purposes and take reasonable steps to ensure that recipients shall only process the disclosed personal information in accordance with those purposes.

How we protect your personal information

Your personal information is stored on a personal electronic filing system and our server is based in the UK and is accessed by our volunteers for the purposes set out above.

How long do we keep your personal information

We will only keep your personal information for as long as necessary to provide you with membership services.  Unless you ask us not to, we will review and possibly delete your personal information where you have not renewed your membership with us for two seasons.

Your rights

You can exercise any of the following rights by writing to us at DRFC, Park Farm, Dumfries DG2 7LU:-

You have a right to request access to the personal information that we hold about you;

If you believe that any of your personal information is inaccurate or incomplete, you have a right to request that we correct or complete your personal information;

You have a right to request that we restrict the processing of your personal information for specific purposes;

If you wish us to delete your personal information you may request that we do so.

Any requests received by DRFC will be considered under applicable data protection legislation.  If you remain dissatisfied, you have a right to raise a complaint with the Information Commissioner’s Office at

Website Privacy Policy

Who we are

Our website address is:

What personal data we collect and why we collect it


If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

This website uses an online form to receive email enquiries. These details are not shared or sold to third parties for marketing purposes.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.


This site has Google Analytics tracking code in place which gathers data on website visitors to help improve performance. This data is aggregated and anonymised so that we can’t identify individuals.

Who we share your data with

For any user data or privacy questions please contact the Club Secretary:

How long we retain your data

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Your contact information

For any user data or privacy questions please contact the Club Secretary:

Additional information

For any user data or privacy questions please contact the Club Secretary:

The following sections may not always be relevant:

How we protect your data

What data breach procedures we have in place

What third parties we receive data from

What automated decision making and/or profiling we do with user data

Industry regulatory disclosure requirements