TFA Privacy Policy

Touch Football Australia


  1. Introduction

This Privacy Policy covers Touch Football Australia Limited, the States and each of their affiliates, members, associates, related entities and subsidiaries (together, "we," "us," "our," and "TFA" ). For the avoidance of doubt, a reference in this Privacy Policy to TFA (including TFA doing or not doing an act) is a reference to, and is intended to also cover, the States. Please read this Privacy Policy carefully as it describes how we collect, use, disclose and otherwise handle your Personal Information.


TFA recognises the importance of your privacy and your right to control your Personal Information and is committed to complying with applicable privacy laws (including the Privacy Act).

TFA is always seeking to better understand how players, Touch Football Administrators, Affiliates, States and, most importantly, TFA fans interact, communicate and otherwise share Personal Information in order to continue to develop the game of Touch Football. TFA has invested heavily, in conjunction with the States, affiliates and selected third parties, to establish and administer a data storage architecture for processing your Personal Information (Touch Football Exchange).


  1. Anonymity and pseudonymity

We offer you the opportunity, wherever it is lawful and practicable, of not identifying yourself, or of using a pseudonym, when entering transactions, or otherwise dealing with, TFA in relation to a particular matter by contacting the TFA Privacy Officer (see clause 11).


  1. What kinds of personal information do we collect?

3.1 The types of Personal Information TFA may collect depends on the purposes for which it is collected but may include (without limitation):

(a) your name, gender, date of birth, occupation, residential address, email address, telephone number and other contact details;

(b) your favourite NRL Club and other information dealings with TFA, Affiliates, the States or selected ticketing companies such as memberships, subscriptions and attendance history at NRL Matches (whether you have used your membership to purchase tickets or as a casual ticket purchaser); and

(c) purchasing preferences and financial details.


3.2 TFA will not collect Sensitive Information about you unless:

(a) you have consented to the collection of such specific Sensitive Information;

(b) TFA is specifically permitted to do so under the TFA Rules, including for health, medical and anti-doping testing purposes and investigation of disputes (whatever the nature of the dispute);

(c) the collection is required or authorised by law; or

(d) the collection is otherwise permitted under applicable privacy laws (including the Privacy Act)

TFA will assume consent to the collection of all Sensitive Information that is provided to it for use in accordance with this Privacy Policy, unless told otherwise.

3.3 Website

In addition to Personal Information, we use cookies, web beacons and other technologies on our website and applications to collect information about your usage of our services (for instance, third party websites you visit to better understand your preferences and what types of products and services you may be interested in).  Cookies are small text files that help a website to remember the preferences of users to improve the experience of using that website. In some cases, the cookies that we use may collect some Personal Information. TFA will treat this information in the same way as other Personal Information we collect. You are free to disable cookies on your internet browser to prevent this information being collected; however, you will lose the benefit of the enhanced website experience that the use of cookies may offer.

When users visit the TFA website, our systems may record certain information about their use of the site, including the web pages visited and the time and date of their visit. TFA uses this information to help analyse and improve the performance of the TFA website.

Websites linked to the TFA website are not subject to TFA's privacy standards, policies or procedures. TFA cannot take any responsibility for the collection, use, disclosure or security of any Personal Information that you provide to a third party website.

3.4 Providing Information

Depending on the circumstances, some types of information will be required and others might be optional. If you do not provide some or all of the information requested, this may affect TFA's ability to communicate with you or provide the requested products or services.

By not providing requested information, you may jeopardise your ability to participate in programs or Competitions or apply for employment or volunteer positions with TFA. If it is impracticable for TFA to deal with you as a result of you not providing the requested information or consent, TFA may refuse to do so

  1. How do we collect your personal information?

4.1 Where it is reasonable and practicable to do so, TFA will collect your Personal Information from you. If you are a Minor, TFA may collect Personal Information about you from your parent or legal guardian.

4.2 In addition to collecting Personal Information directly from you, TFA may also collect Personal Information from:

(a) the Affiliates, the States and selected third parties (for instance, Ticketek and Ticketmaster) as part of the Touch Football Exchange; and

(b) a third party (such as a Touch Football Partner or other corporate partner of TFA or Affiliates, or information that is on public record or which is otherwise unsolicited).

4.3 Information may be collected when you:

(a) become a member of TFA or an Affiliate;

(b) subscribe to any publication of TFA, including electronic publications;

(c) provide details to TFA, consent form, survey, feedback form or incident report;

(d) enter Personal Information into, or agree to having your Personal Information entered into, one of TFA's online systems;

(e) access the TFA website;

(f) contact TFA via email, telephone or mail or engage with TFA via social media;

(g) participate in any program, activity, Competition or event run by TFA;

(h) purchase tickets to a TFA event from Ticketek, Ticketmaster or an authorised agent;

(i) purchase merchandise, products or services from TFA or an authorised agent or licensee;

(j) are elected or appointed to the Board or a committee of TFA;

(k) apply for employment or a volunteer position with TFA or an Affiliate member; and

(l) where TFA is required to do so by law (for education, child protection, work health and safety laws, charitable collections, medical treatment or other legislation in Australia).


  1. Why do we collect, use, hold and disclose your personal information?

5.1 TFA generally only collects, uses, discloses or holds Personal Information that is reasonably necessary for TFA to perform one or more functions or activities in administering the game of Touch Football (the primary purpose), including:

(a) organisation, conduct and promotion of Competitions and Matches (including for the purpose of providing information and making ticket offers to you);

(b) direct communication with you by Touch Football Administrators;

(c) disclosure to Touch Football Partners, unless you have indicated that you do not want to receive any communication from Touch Football Partners;

(d) compliance with the TFA Rules, including the administration and development of Touch Football (if you are a Participant);

(e) serving content in accordance with your preferences and previous consumption;

(f) serving advertising that is suited to your age; and

(g) evaluating and servicing the TFA's relationships with its Touch Football Partners, including to tailor your experience interacting with our Touch Football Partners.

TFA may use health information to ensure that programs we operate are run safely and in accordance with any special health needs Participants may require. Health information may also be kept for insurance purposes. In addition, we may use de-identified health information and other Sensitive Information to carry out research, to prepare submissions to government, or to plan events and activities.

5.2 Wherever practicable, TFA will inform you more specifically of the primary purpose of a collection as part of its collection statement, which will be made available to you at the time of the collection.


5.3 When we collect your Personal Information, your Personal Information will only be used or disclosed for the primary purpose for which it was collected, a related secondary purpose, in accordance with any express consent you give TFA or as otherwise lawfully required (e.g. where your Personal Information is requested by a law enforcement agency).


Direct Marketing

5.4 TFA may use or disclose your Personal Information to a Touch Football Administrator for the secondary purpose of direct marketing communication, if:

(a) TFA collected the information from you;

(b) you would reasonably expect your Personal Information would be used or disclosed for direct marketing;

(c) TFA has provided a simple means by which you can request not to receive direct marketing; and

(d) you have not made a request not to receive direct marketing.


5.5 Where you would not reasonably expect your Personal Information to be used for direct marketing, or the information has been collected from a third party (for instance, from Affiliates as part of the Touch Football Exchange), TFA may use the information for the secondary purpose of direct marketing communication only where:

(a) you have expressly consented to the use or disclosure for direct marketing, or it is impracticable for TFA to seek your consent before that use;

(b) you have not made a request to the TFA not to receive direct marketing communication;

(c) in each direct marketing communication, the TFA always prominently displays a simple notice or actionable option that you may express a wish not to receive any further direct marketing communication; and

(d) each written direct marketing communication by the TFA with you sets out the TFA's contact details including business address, telephone and fax numbers and email address.


  1. Who do we disclose your personal information to?

6.1 Subject to compliance with applicable privacy laws (including the Privacy Act) and this Privacy Policy, TFA may also:

(a) disclose your Personal Information to its affiliates (including without limitation the States, a Competition Administrator and an Affiliate) to enable them to administer the game of Touch Football in their area and provide related activities and services; and

(b) unless you inform TFA otherwise, disclose your Personal Information to Affiliates, the States, Touch Football Partners and selected other partners as part of the Touch Football Exchange to enable such recipients to provide you with information, materials and promotional opportunities. This sharing of Personal Information via the Touch Football Exchange will assist TFA, Affiliates, the States, Touch Football Partners and selected other partners to more effectively administer promotional and information sharing activities.


6.2 TFA may disclose your Personal Information to its service providers such as ticketing agents, mail houses or other similar third party organisations for the purpose of implementing the primary purposes, including fulfilling ticket requests and communicating Touch Football related offers. For example, TFA uses third party credit card payment gateway services on its website and applications. If you pay for tickets or services through TFA's website and applications, TFA will be required to provide certain financial details to the third-party service provider to effect the transaction. TFA requires these third party organisations to keep your contact details and Personal Information confidential and only use them for the designated purpose.  TFA may also disclose your Personal Information to other service providers which assist TFA in the conduct of its operations, such as information services providers, information technology providers and other similar third party organisations.


  1. Data quality and security

7.1 TFA will take reasonable steps to:

(a) make sure that the Personal Information it collects, uses or discloses is accurate, complete and up-to-date; and

(b) protect the Personal Information it holds about you or that is within its direct control from misuse, interference and loss and from unauthorised access, modification or disclosure. Some of the security measures TFA uses include strict confidentiality requirements of our employees, volunteers, Affiliates and service providers, security measures for system access and security measures for our website.

We seek to protect your Personal Information from any unauthorised loss, disclosure or access. However, if a serious data breach occurs, we must notify you as required under the Privacy Act regarding the circumstances of the breach, and must also advise the Office of the Australian Information Commissioner.


7.2 TFA will take reasonable steps to destroy or permanently de-identify Personal Information if it is no longer needed for any purpose for which the information may be used or disclosed (at your request or otherwise) or if you withdraw your consent, unless TFA is required by or under law, or a Court order, to retain such information. Where TFA is required to destroy or permanently de-identify your Personal Information, it will take reasonable steps to inform other parties using, holding or disclosing the same Personal Information (including any links to, copies of or replication of that Personal Information).

7.3 Information storage

(a) TFA stores information in different ways, including in paper and electronic form.

(b) Much of the information we collect from and about our members is added to TFA's online database. When your information is entered into TFA's database, the information may be combined or linked with other information held about you.

  1. Openness, access and correction

8.1 TFA strives to provide you with the greatest available control of the Personal Information which TFA collects from you or about you from the Affiliates, the States and other third parties. Accordingly, TFA is continually developing and enhancing the ways which you can access your Personal Information (for example, via your communications preferences centre).


8.2 The NRL will provide you with a variety of ways to access, review and manage your Personal Information. For example, you can opt out of and otherwise manage your communications preferences via links in emails and other communications we send to you from time to time. You will be responsible for ensuring your Personal Information remains accurate, complete and up to date.


8.3 Separate from the preference centre and upon your request, TFA will take reasonable steps to let you know, in general terms, what sort of Personal Information it holds, for what purposes, and how it collects, holds, uses and discloses that information. Where TFA has collected your Personal Information from your directly or with your consent, you have a right to receive (upon request) that Personal Information from TFA in a structured, commonly used, machine readable format and/or a right to instruct TFA to transmit that Personal Information to a third party (if technically feasible). In such circumstances, we will respond to your request for access within 14 days and endeavour to provide the requested information within 30 days. If you find that the Personal Information we hold about you is inaccurate, incomplete or out-of-date, please contact us immediately and we will see that it is corrected.


8.4 Before supplying any Personal Information to you or updating your Personal Information at your request, TFA must be reasonably satisfied as to your identity (for example, by asking to see your passport or driver's licence). TFA is not under any obligation to provide Personal Information to you where TFA is not required to do so under applicable privacy laws (including the Privacy Act).


8.5 If TFA refuses to provide you with access to Personal information it holds on you in the manner requested by you, TFA will either:

(a) take such steps (if any) as are reasonable in the circumstances to give access to the information in a way that meets the needs of the NRL and you; or

(b) provide you with a written notice that sets out:

(i) the reasons for the refusal except to the extent that, having regard to the grounds for the refusal, it would be unreasonable to do so; and

(ii) the mechanisms available to complain about the refusal.


8.6 If:

(a) TFA is satisfied that, having regard to a purpose for which the Personal Information is held, the information is inaccurate, out-of-date, incomplete or irrelevant or misleading; or

(b) you request TFA to correct your Personal Information,

TFA will take reasonable steps to correct the Personal Information to ensure that, having regard to the purpose for which it is held, it is accurate, up-to-date, complete, relevant and not misleading. The NRL will not charge you for making such a request or for correcting the information.


8.7 If TFA refuses to correct the Personal Information at your request, TFA will provide you with a written notice that sets out the same matters listed in clause 8.5(b).


  1. Transborder data flows

9.1 Subject to clauses 9.2 and 9.3, TFA will not transfer your Personal Information to an overseas recipient unless it has first taken steps reasonable in the circumstances to ensure that the Personal Information that it transfers will not be held, used or disclosed by the recipient of the information inconsistently with, or otherwise in breach of, applicable privacy laws (including the Privacy Act). For example, TFA may adopt appropriate contractual clauses with overseas recipients that ensure their compliance with applicable privacy laws (including the Privacy Act). This clause does not apply to the transfer of Personal Information in accordance with the TFA Rules, including to facilitate the registration of a Player by an international Touch Football association.


9.2 We may disclose your Personal Information to overseas recipients for things such as processing membership and hosting services, most likely in China, Singapore, the United States and New Zealand, although countries where such recipients are located may vary.


9.3 TFA may transfer Personal Information about you to someone who is in a foreign country if:

(a) TFA reasonably believes that the recipient is subject to a law or binding scheme that has the effect of protecting the information in a way that is, overall, substantially similar to applicable privacy laws (including the Privacy Act) and there are mechanisms available to you to enforce that protection or scheme; and

(b) you expressly consent to the transfer after TFA has informed you that the applicable privacy laws (including the Privacy Act) will no longer apply if you provide your express consent.


  1. Notifiable data breaches scheme

In the event of any loss, or unauthorised access or disclosure of your Personal Information that is likely to result in serious harm to you, TFA will investigate and notify you and where applicable the relevant supervisory authority (e.g. the Australian Information Commissioner) within 72 hours of becoming aware of the loss, or unauthorised access or disclosure, in accordance with applicable privacy laws (including the Privacy Act).


  1. Inquiries procedure

11.1 All complaints and inquiries concerning your Personal Information, including in respect of alleged breaches of this Privacy Policy or applicable privacy laws (including the Privacy Act), should be directed to the TFA Privacy Officer:

The Privacy Officer

Suite 1

18 Napier Close

Deakin ACT, Australia 2600

(02) 9359 8500


11.2 At all times, privacy complaints will be treated seriously, dealt with promptly and confidentially, and will not affect your existing obligations or commercial arrangements with TFA.


  1. Privacy Policy updates

This Privacy Policy was updated in April 2021. We may update this Privacy Policy from time to time, in which case we will post the updated version of the Privacy Policy on our website ( As such, please check back periodically to see if our Privacy Policy has been updated.


  1. Definitions

In this Policy:

Affiliate means any Affiliate registered with TFA or the States from time to time.

Competition means any competition, tournament or league registered or carried out by the TFA, the States or an Affiliate including the pre-season, season proper, finals series and any post season tournament or knockout cup competition and any other football competition or tournament.

Competition Administrator means the entity responsible for the conduct and staging of a Competition and includes (without limitation) TFA and the States (including the divisions and associations that make up the States).

Match means a game of Touch Football and includes any match staged, participated in, sanctioned by, or played under the auspices of TFA, the States or a Competition Administrator (including any match held as part of a Competition).

Match Official means any person in charge of safety or any other person appointed by TFA, the States or a Competition Administrator to assume responsibility in connection with a Match.

Minor means any person younger than 18 years of age.

NRL Account means a person's login credentials and personal account for accessing the NRL digital network, including the NRL website and application and fantasy/tipping websites and applications etc.

TFA Privacy Officer means the person appointed by TFA from time to time to deal with complaints and inquiries under this Privacy Policy.

TFA Rules means its constitution, rules, regulations, policies and procedures and any other ancillary document that governs TFA in administering the game of Touch Football, as promulgated and amended from time to time.

Official means:

(a) a Match Official or Team Official;

(b) an employee, consultant, officer or director of TFA, the States or a Competition Administrator; or

(c) a member of a council, committee, panel or body constituted by TFA, the States or a Competition Administrator.

Personal Information means any information or an opinion about an identified natural person, or a natural person who is reasonably identifiable whether the information or opinion is true or not and whether the information or opinion is recorded in a material form or not.

Participant means participants in the game of Touch Football including the players and Officials.

Player means any person who is, from time to time, registered to an Affiliate or is selected as a member of a Representative Team, whether that person is male or female, junior or senior or an amateur or professional.

Privacy Act means the Privacy Act 1988 (Cth).

Privacy Policy means this document as updated from time to time and made available on the TFA's website (

Representative Match means a team participating in a Representative Match.

Representative Team means any team selected to participate in a Representative Match.

Touch Football Administrators mean TFA, the States, a Competition Administrator or an Affiliate (as the case may be) with which the Participant has a direct relationship, including for the purposes of registration with the Affiliate and participation in a Competition.

Touch Football Exchange has the meaning given to that term in clause 1 of this Privacy Policy.

Touch Football Partners means any entity that has a commercial agreement or arrangement with TFA, the States, Competition Administrator or Affiliate (as the case may be) and which you may also have a direct relationship with (including by participation in a Competition).

Sensitive Information means information or an opinion about a natural person's racial or ethnic origin, political opinions. membership of political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record that is also Personal Information as well as health information, genetic information, biometric information for the purposes of verification/identification and biometric templates about a natural person.

States means New South Wales Touch Football, Queensland Touch Association, Touch Football ACT, Touch Football Northern Territory, Touch Football South Australia, Touch Football Tasmania, Touch Football Victoria and Touch Football Western Australia

Team Official means any personnel involved with the management, preparation or participation of an Affiliate's team (whether paid or unpaid), including the coaches, managers, medical staff (including team or match day doctor), physiotherapists, gear persons and other support staff.


Updated: 06 May 2021. 

Principal Partner

Major Partners

Official Partners

Government Partners