Last updated: 10 June 2026
This privacy policy explains how the Aspley RLFC merchandise portal (“the portal”, “we”, “us”, “our”) handles your personal information. The portal is operated by Promo Gear on behalf of Aspley Rugby League Football Club, and lets supporters pre-order club merchandise. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Personal information we collect
We only collect the information we need to run the store and fulfil your order:
- Account details: your username, email address and password. Your password is stored in encrypted form and is never visible to us.
- Contact and order details: your first and last name, email address, phone number, and the items, sizes and quantities you order.
- Technical information: your IP address is recorded with each order, and our server keeps standard access logs, for security and fraud prevention.
We do not collect a delivery address (orders are collected through the club), and we do not run advertising or analytics tracking on the portal.
How we collect it
We collect most of this information directly from you when you register for an account and place an order. Technical information such as your IP address is collected automatically when you use the portal.
Why we collect and use it
We use your information only to create and manage your portal account, to process, fulfil and confirm your merchandise order, and to contact you about your order if we need to. We do not use your information for marketing, and we do not sell it.
Payments
Card payments are processed by Square. Your card details are entered directly into Square’s secure payment fields and are not stored on the portal – we never see or hold your full card number. Payments are settled into the Aspley RLFC Square account. Square handles your payment information under its own privacy policy.
Who we disclose it to
We may share your order and contact details with Aspley RLFC (the club the merchandise is for), with Promo Gear (which produces and fulfils the merchandise), and with Square (to process your payment). We do not disclose your personal information to any other third parties except where required or authorised by law.
Overseas disclosure
Square is based in the United States, so when you make a payment your information may be processed and stored overseas, including in the United States. By placing an order you consent to this disclosure. Aside from payment processing through Square, your information is stored on servers located in Australia.
Security and retention
We take reasonable steps to protect your personal information from misuse, loss and unauthorised access. We keep your account and order information for as long as needed to fulfil your order and to meet our record-keeping obligations, and then take reasonable steps to destroy or de-identify it.
Cookies
The portal uses essential cookies to keep you logged in and to remember the contents of your cart. These are necessary for the store to work. We do not use advertising or tracking cookies.
Accessing and correcting your information
You can ask to access the personal information we hold about you, or to have it corrected if it is inaccurate, by contacting us using the details below. We will respond within a reasonable time.
Complaints
If you believe we have mishandled your personal information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Contact us
For any privacy question, request or complaint, contact Aspley RLFC at info@aspleyrugbyleague.com.au.
Changes to this policy
We may update this policy from time to time. The current version will always be available on the portal, with the “last updated” date shown above.