Privacy & your data

How we collect, use, protect and keep your information.

Dudley Redhead United Football Club ("the club", "we") respects your privacy. This page explains what personal information this website handles and how we look after it. Player registration is taken by PlayFootball (Football Australia), not by this site — their privacy terms apply to registration data.

What we collect on this site

When	What	Why
You message us	Name, email, phone, your message	To reply to your enquiry. It is emailed to the committee and not stored on the website.
The committee gives you a members login	Email, name, a password (stored only as a salted hash)	To let volunteers/coaches see gated match-day info. There is no public sign-up.
Rosters & contacts	Volunteers' and committee names (and contact details)	To organise match day. Visible only to signed-in members.
You file an incident or safety report (members only)	What you write in the form — which may name people, including a child	To alert the committee to a match-day or safety incident. Emailed to the committee from our own server via Cloudflare Email Sending, and not stored on the website.
You sign in to the members area	Your email/IP and the action, in a short security log	To protect accounts and investigate misuse. Encrypted, and deleted after six months.
You help run match day as a Game Leader or Club Referee	A small private note of games you covered and confirmed	So the committee can share the roster out fairly and suggest reliable cover. It is committee-only — never shown to other members or the public, and never a rating anyone can see or “fail”. It fades over about two months.

How we protect it

The whole site is served over HTTPS only.
Member and roster information is encrypted where it is stored, and is only visible to people the committee has given a members login.
The members area requires two-step verification (an emailed code, or an authenticator app for committee) on every sign-in.
Children's information is treated as our most sensitive data: members-only, never published, and cleared each season.
Our match-day Game Leader & Club Referee helper keeps a small, private, committee-only note so games are shared out fairly. It is never shown to other children or the public and is never a score anyone can see or “fail”; one quiet weekend never counts against a child, and a parent can ask the committee to see it, or to clear a mistaken entry, at any time.
We keep only what we need, and we never sell or share your information for marketing.

How long we keep it

Contact messages & incident reports: not stored on the site (emailed to the committee; incident reports are then kept per our child-safe and record-keeping obligations).
Rosters: refreshed weekly and purged at season's end.
Member logins: kept while you're involved with the club; removed on request or when you leave.
Security log: encrypted and automatically deleted after six months.
Game Leader / Club Referee fair-share note: encrypted, fades over about two months, and is automatically cleared within six months. A parent can ask to see it or clear an entry at any time.

Third parties

Cloudflare hosts the site, provides bot protection, and (via Cloudflare Email Sending) delivers our members' sign-in codes and relays our contact-form and members' incident-report emails to the committee.
PlayFootball handles registration.
Our chat assistant (provided via NEAT Online) answers general questions; please don't share sensitive personal details in chat.
Our public Facebook/Instagram feeds are shown as published on those platforms.

Your choices

You can ask us what information we hold about you, correct it, or have it deleted. Email the committee at drufc1@gmail.com and we'll help. For anything involving a child, a parent or guardian should contact us.