Privacy Policy

SARLSA Data Privacy and Access Policy

1. Purpose

This policy outlines SARLSA’s commitment to safeguarding the personal information of all members, in compliance with South Africa’s Protection of Personal Information Act (POPIA).

2. Types of Data Collected

Full name, ID/passport number, date of birth, contact information, club affiliation, certifications, medical/injury data, disciplinary records.

3. Use of Data

Used for event registration, development tracking, communication, safeguarding, and reporting.

4. Access Control

Different access levels are enforced for members, club officials, and SARLSA executives.

5. Data Security

Data is stored securely with role-based login and recommended multi-factor authentication.

6. Consent and Member Rights

Members must consent to data use and have rights to access, correct, or delete their data.

7. Retention and Deletion

Data retained 5–7 years depending on type, and securely deleted thereafter.

8. Breach Notification

Breaches reported within 72 hours to affected parties and regulators.