Privacy summary

Key privacy points: The Club collects personal information only when needed, uses it for lawful Club purposes, protects it with reasonable safeguards, and provides a clear contact point for privacy questions and requests.

Privacy point What this means
Collection The Club collects personal information only where it is needed for Club services, membership, safety, legal compliance and operations.
Use Personal information is used for lawful Club purposes, including communications, services, records, events, security and administration.
Protection The Club takes reasonable steps to protect personal information from misuse, loss and unauthorised access, modification or disclosure.
Disclosure Information is disclosed only where needed for Club operations, with consent, or where required or authorised by law.
Requests Members, guests and visitors can contact the Club to ask privacy questions, request access to or correction of their personal information, update marketing preferences or raise a complaint.

This summary helps members, guests and visitors quickly understand how the Club handles personal information before reading the full Privacy Policy.
Nambucca Leagues and Sports Club respects your privacy. The Club’s approach is outlined below:
• The Club collects personal information only where needed to provide Club services, manage membership, support safety and security, meet legal obligations, communicate with members and guests, and improve Club operations.
• This may include membership details, visitor records, bookings, event information, CCTV footage, gaming and loyalty records, employment information, and communications with the Club.
• The Club takes reasonable steps to protect personal information from misuse, loss, unauthorised access, modification or disclosure.
• The Club only discloses personal information where needed for Club operations, with consent, or where required or authorised by law.
• You can ask to access or correct your personal information, update marketing preferences, or raise a privacy question or complaint by contacting the Club.

Privacy questions or requests: please email
manager@nambuccaleaguesandsportsclub.com.au
For full details, please read the complete Privacy Policy below.

Together, this summary and the full Privacy Policy explain the Club’s commitment to handling personal information responsibly, transparently and in accordance with applicable privacy requirements.

Privacy FAQ

Why does the Club collect personal information?
The Club collects personal information to provide services, manage membership, support safety and security, meet legal obligations, communicate with members and guests, and improve Club operations.

What types of information may be collected?
This may include membership details, visitor records, bookings, event information, CCTV footage, gaming and loyalty records, employment information, and communications with the Club.

How does the Club protect personal information?
The Club takes reasonable steps to protect personal information from misuse, loss, unauthorised access, modification or disclosure.

How can I access, correct or ask about my information?
You can email manager@nambuccaleaguesandsportsclub.com.au to ask a privacy question, request access to your personal information, ask for a correction, update marketing preferences or raise a privacy complaint.

Can I opt out of marketing communications?
Yes. You can opt out by using any unsubscribe option provided or by contacting the Club.

Does the Club use CCTV?
Yes. The Club may use CCTV and other security systems in and around its premises for safety, security, incident management, regulatory compliance and asset protection.

Will my personal information be shared with others?
The Club only discloses personal information where reasonably necessary for Club operations, where consent has been given, or where required or authorised by law.

What happens if there is a data breach?
If the Club becomes aware of a data breach involving personal information, it will take reasonable steps to respond promptly, assess the risk, take remedial action where possible and notify affected individuals or regulators where required by law.

Does the Club collect information through its website?
The Club or its service providers may collect information such as device details, browser type, pages visited, access times, referral information, cookies and similar analytics data to operate, secure and improve digital services.

How will I know if the Privacy Policy changes?
The Club may update the Privacy Policy from time to time. The current version will be made available at the Club and, where applicable, on the Club’s website.

Privacy Policy

Nambucca Leagues and Sports Club

Effective date: 24th July 2026
Last reviewed: 24th July 2026

Legal compliance disclaimer: This Privacy Policy is general information only and is not legal advice. The Club should review it against its actual operations and obtain legal advice where required to confirm compliance with applicable privacy, club, liquor, gaming, surveillance, employment, marketing, record-keeping and data breach obligations.

1. Purpose and commitment

Nambucca Leagues and Sports Club is committed to protecting the privacy of members, guests, visitors, employees, contractors, volunteers, sporting participants and other people who interact with the Club. This Privacy Policy explains how the Club collects, holds, uses, discloses and protects personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and applicable NSW club, liquor, gaming, workplace and record-keeping obligations.

2. Scope

This policy applies to personal information collected by the Club through its premises, membership processes, sporting and community activities, food and beverage services, gaming and loyalty systems, events, promotions, website, social media, telephone, email, forms, supplier dealings, employment processes and any other Club operations.

3. What personal information we collect

All donations made through our website are voluntary and non-refundable unless required by law. Donations are used to support the mission and programs of Nambucca Leagues and Sports Club.

• identity and contact details, including name, address, date of birth, telephone number, email address, occupation, signature and proof-of-age or identification details;
• membership information, including membership number, membership category, renewal history, nominations, photographs for membership cards, preferences and participation in Club activities;
• visitor entry information, including sign-in records, guest registers, identification scans or sighting records where required or permitted by law;
• transaction and service information, including purchases, bookings, event registrations, prize claims, loyalty program activity, account enquiries and payment-related records;
• gaming-related information, including information generated by use of membership cards in gaming or loyalty systems, player activity statements, responsible gambling interactions, exclusions, bans or regulatory records where applicable;
• security and safety information, including CCTV footage, incident reports, injury reports and records relating to safety, security, disciplinary matters or suspected unlawful activity;
• sporting and community participation information, including team, competition, volunteer, health or emergency contact information where reasonably necessary for participation or safety;
• employment, contractor and volunteer information, including applications, qualifications, training, rosters, payroll or onboarding information; and
• communications with the Club, including enquiries,

4. Sensitive information

The Club will only collect sensitive information where it is reasonably necessary for Club activities, where the individual has consented, or where collection is required or authorised by law. Sensitive information may include health information, disability or access requirements, biometric information if any facial recognition or similar technology is used, responsible gambling or self-exclusion information, and information connected with safety, disciplinary or legal matters.

5. How we collect personal information

The Club generally collects personal information directly from individuals when they apply for or renew membership, enter the premises, use Club facilities or services, make a booking, participate in sporting or community activities, use a membership card, enter a promotion, communicate with the Club, complete forms, apply for employment or provide information online. The Club may also collect information from authorised representatives, sporting bodies, service providers, regulators, law enforcement agencies, other clubs, responsible gambling services, publicly available sources and technology systems used on Club premises.

6. Why we collect, use and hold personal information

• assessing, processing and managing membership applications, renewals and member records;
• providing Club facilities, services, events, competitions, sporting programs, promotions and community activities;
• administering loyalty programs, rewards, prize draws and member communications;
• meeting legal and regulatory obligations, including obligations relating to registered clubs, liquor, gaming, taxation, employment, work health and safety, anti-money laundering and counter-terrorism financing;
• maintaining safety and security for members, guests, visitors, staff and property;
• investigating incidents, complaints, suspected unlawful activity, breaches of Club rules or disciplinary matters;
• responding to enquiries, requests, complaints and feedback;
• improving Club operations, customer service, risk management, planning and reporting;
• conducting direct marketing where permitted, including notices about events, promotions, services, facilities and community activities; and
• recruiting, employing, managing and paying staff, contractors and volunteers.

7. CCTV, surveillance and venue security

The Club may use CCTV and other security systems in and around its premises for safety, security, incident management, regulatory compliance, asset protection and investigation purposes. Signage may be displayed where surveillance is in use. CCTV footage may be reviewed by authorised personnel and may be disclosed to law enforcement, regulators, insurers, legal advisers or other parties where required or permitted by law.

8. Direct marketing and communications

The Club may use personal information to send members and guests information about Club news, services, events, promotions, competitions, dining, entertainment, sporting activities and community initiatives. Marketing may be sent by post, email, SMS, telephone or other permitted channels. Individuals may opt out of marketing communications by using any unsubscribe option provided or by contacting the Club. The Club may still send important administrative, membership, safety or legal notices where required.

9. Disclosure of personal information

The Club may disclose personal information to third parties where reasonably necessary for Club operations, where the individual has consented, or where required or authorised by law. This may include disclosure to technology providers, payment processors, mailing houses, marketing providers, loyalty and gaming system providers, security providers, insurers, auditors, professional advisers, sporting associations, event organisers, contractors, regulators, law enforcement agencies, Liquor & Gaming NSW, the Independent Liquor & Gaming Authority, AUSTRAC, courts, tribunals and other clubs or responsible gambling services where relevant to exclusions, bans, safety, integrity or legal compliance.

10. Overseas disclosure

The Club will take reasonable steps to use Australian-based service providers where practical. Some technology, cloud, software, booking, marketing or payment service providers may store or access information from outside Australia. Where overseas disclosure is likely, the Club will take reasonable steps to ensure appropriate privacy and security protections apply, unless an exception under privacy law applies.

11. Security and retention

The Club takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Security measures may include access controls, secure storage, staff training, password protections, system monitoring, confidentiality obligations, physical security and document management practices. Personal information will be retained for as long as reasonably required for the purposes for which it was collected, to comply with legal obligations, to resolve disputes, to maintain business records or for legitimate Club purposes. When information is no longer required, the Club will take reasonable steps to destroy or de-identify it.

12. Data breach response

If the Club becomes aware of, or reasonably suspects, a data breach involving personal information, it will take reasonable steps to respond promptly and appropriately. This may include containing the incident, assessing what information may be affected, determining whether serious harm is likely, taking remedial action where possible, documenting the response, and notifying affected individuals and the Office of the Australian Information Commissioner where required under the Notifiable Data Breaches scheme. The Club will also review the incident and consider whether changes are required to reduce the risk of a similar incident occurring again.

13. Employee privacy

The Club collects and handles personal information about job applicants, employees, former employees, contractors and volunteers for employment, engagement, payroll, rostering, training, work health and safety, performance management, disciplinary, taxation, superannuation, insurance, legal and compliance purposes. Employee records may include contact details, emergency contacts, tax file number information, bank account details, superannuation details, qualifications, licences, training records, rosters, leave records, payroll records, performance and conduct records, workplace incident records and termination records. The Club will take reasonable steps to protect employee information and restrict access to authorised personnel who need the information for legitimate Club purposes.

Some employee records of current and former employees may be exempt from certain obligations under the Privacy Act 1988 (Cth) where the handling is directly related to the employment relationship and the employee record. This exemption does not generally apply to unsuccessful job applicants, contractors or volunteers, and does not permit the Club to use or disclose employee information for purposes unrelated to employment unless otherwise permitted by law. The Club will also comply with applicable workplace laws, including requirements to create, keep and provide access to employment records where required.

14. Member privacy

The Club collects and handles member information for membership administration, member identification, member communications, loyalty and rewards administration, voting or governance processes where applicable, access to Club facilities, participation in Club activities, regulatory compliance, responsible gambling obligations, safety and security, complaint handling and enforcement of Club rules or by-laws. Member information may include membership application details, renewal history, membership category, membership number, member photograph, contact preferences, participation in Club activities, prize or promotion records, loyalty activity, gaming-related records where applicable, incident or disciplinary records, and communications with the Club.
The Club will use member information only for lawful Club purposes and will restrict access to authorised personnel who need the information to perform their duties. Members are encouraged to keep their contact details up to date and may request access to, or correction of, their personal information by contacting the Club. The Club will not sell member information and will only disclose member information where reasonably necessary for Club operations, where the member has consented, or where required or authorised by law.

15. Member data rights

Members have rights in relation to the personal information the Club holds about them. Subject to legal and regulatory requirements, members may request access to their personal information, ask the Club to correct information that is inaccurate, incomplete or out of date, withdraw or change marketing preferences, ask questions about how their information is handled, and make a privacy complaint. Members may also ask whether particular information is required for membership, venue entry, gaming, loyalty, safety, governance or legal compliance purposes.
Requests should be made to the Club’s privacy contact by email. The Club may need to verify the member’s identity before responding and may refuse, limit or defer a request where permitted by law, including where giving access would affect another person’s privacy, prejudice an investigation, breach legal obligations, compromise security, reveal commercially sensitive information or be otherwise unlawful. The Club will handle member requests within a reasonable time and will explain its response where appropriate.

16. Accuracy, access and correction

The Club aims to keep personal information accurate, complete and up to date. Individuals may request access to personal information held about them or ask for it to be corrected by contacting the Club. The Club may need to verify identity before responding. Access may be refused or limited in circumstances permitted by law, including where access would affect the privacy of others, prejudice an investigation, reveal commercially sensitive information, or be unlawful.

17. Anonymity and pseudonymity

Where lawful and practical, individuals may deal with the Club anonymously or by using a pseudonym. However, this may not be possible where the Club is required to verify identity, process membership, comply with entry requirements, provide particular services, administer gaming or loyalty systems, meet legal obligations or respond properly to a request.

18. Website, cookies and digital services

When individuals use the Club’s website, online forms, social media pages or digital services, the Club or its service providers may collect information such as device information, browser type, pages visited, time of access, referral information, cookies and similar analytics data. This information may be used to operate, secure, improve and measure the Club’s digital services and communications.

19. Complaints and enquiries

If you have a question, request or complaint about how the Club handles personal information, please contact the Club in writing. The Club will consider the matter and respond within a reasonable time. If you are not satisfied with the Club’s response, you may be able to contact the Office of the Australian Information Commissioner.

Privacy contact:
Nambucca Leagues and Sports Club

Email: manager@nambuccaleaguesandsportsclub.com.au

20. Changes to this policy

The Club may update this Privacy Policy from time to time to reflect changes in law, technology, Club operations or privacy practices. The current version will be made available at the Club and, where applicable, on the Club’s website.