Privacy Policy

What we collect

If you only browse the site:we receive standard web server logs - your IP address, the pages you request, the time of the request, and your browser's user-agent string. We use these to operate the service and protect it from abuse.

If you create an account: we store your first name, last name, email address, and an optional phone number. Your password is handled by our authentication provider and is stored only as a salted hash - we never see it in plain text.

If you register a club or list a tournament: we store the details you enter, including club name, location, optional logo, and the contact name, email, and phone you choose to publish. This information is intentionally public on the listing so bowlers can get in touch.

If you send an enquiry or use the contact form: we store your name, email, optional phone, and your message. The message is forwarded to the relevant organiser (or to us, for the contact form) so they can reply to you.

What’s public, what’s private

Club and tournament listings are public by design - that's the whole point of the directory. The contact details you publish on a listing will be visible to anyone who visits the page. Only publish details you're comfortable making public.

Your account details (name, email, phone) are not shown on the site. They're used to identify you when you log in and to contact you about your account or listings.

How we use your information

• To run the directory and let you manage your listings.
• To forward tournament enquiries and contact-form messages to the right person.
• To keep the site secure and prevent abuse.
• To send transactional emails relating to your account or your listings (for example, a password reset).

We do not sell, rent, or trade your personal information. We do not send marketing emails, and we do not use third-party advertising trackers.

Who we share information with (sub-processors)

We use a small number of trusted providers to run the service. They process your information only on our behalf:

• Supabase - database, authentication, and file storage (logos, images).
• Vercel - web hosting and request logs.
• Resend - delivery of enquiry and contact-form emails, and transactional emails.

Each of these providers may store data outside New Zealand. We choose providers that publish strong data-protection commitments, and we only share what they need to do their job.

Cookies and similar technology

We use a small number of cookies that are essential to the site: a session cookie so you can stay logged in, and a CSRF token to protect form submissions. We don't use third-party analytics cookies or advertising trackers.

Your rights

Under the New Zealand Privacy Act 2020 you have the right to:

• Access the personal information we hold about you.
• Correct it if anything is wrong.
• Ask us to delete it- including closing your account - at any time, for any reason. We'll action it promptly.

To exercise any of these rights, send us a message through the contact form from the email address on your account, or include enough detail that we can identify you. If you're unhappy with how we handle a request, you can complain to the Office of the Privacy Commissioner.

How long we keep your information

Account, club, and tournament records are kept while your account is active. When you close your account we delete your personal information and the listings you own, unless we need to keep something to meet a legal obligation. Enquiry and contact messages are kept for a short period so we can resolve disputes and prevent abuse, then deleted. Server logs are kept for a short operational window, typically no more than 30 days.

Security

We take reasonable steps to protect your information: encrypted connections, hashed passwords, access controls on our database, and reputable infrastructure providers. No online service can be perfectly secure, but if we ever became aware of a breach affecting you we'd tell you and notify the Privacy Commissioner as required.

Children

The site isn't aimed at children and we don't knowingly collect personal information from anyone under 16. If you believe we've collected information from a child, please get in touch and we'll remove it.

Changes to this policy

We may update this policy from time to time - for example if we add a feature or change a sub-processor. We'll update the "Last updated" date above and, for significant changes, let account holders know by email.

Get in touch

Any privacy question, correction, or deletion request: send us a message through the contact form and we'll come back to you.