IN PLAIN WORDS
WHO HOLDS YOUR DATA
AllSport is run by Te Kura ō ngā Koha/Allsport Aotearoa, a charitable trust board incorporated under the Charitable Trusts Act 1957 and registered with Charities Services. We are based at 26 Carbine Place, Sockburn, Ōtautahi Christchurch.
This policy covers the AllSport website and app at allsport.nz. It is written to meet the New Zealand Privacy Act 2020. In this policy, “we” means the trust, and “kaiwhakawā” means the judges who run sessions and hold administrator accounts.
For anything about your privacy — a question, a correction, a copy of your information, or a deletion — email privacy@allsport.nz. We aim to reply within 5 working days, and the Privacy Act gives us 20 working days at the outside.
YOUR ACCOUNT
Collected when you register, or when you sign in with Google and finish your profile. Only your name, email, password, date of birth and username are required — everything else you can leave blank.
YOUR RESULTS
Collected every time you or a kaiwhakawā records a score during a session. This is the public part of AllSport — a leaderboard only works if the results are on it.
THE WELLBEING CHECK-IN
About once every three months we may show you a 10-question check-in on your dashboard. It uses the WHO-5 Wellbeing Index and two standard activity questions. Your answers say something about your health, so we treat them more carefully than anything else on this page.
It is voluntary. You can close it and nothing is saved. Skipping it has no effect on your scores, colours or standing. Kaiwhakawā can never read your individual answers — the report they see shows group averages only, and hides any group with fewer than three responses so no single person can be identified. We use those averages to show funders whether AllSport actually improves wellbeing.
KOHA, REFERRALS AND VOTES
We do not take payments through this website. There is no card processor and we never see or store card or bank details. Koha is given by bank transfer or in person, and a kaiwhakawā records the amount against your name by hand.
PLAYERS UNDER 17
Juniors are welcome at AllSport and a lot of our mahi is aimed at rangatahi. If a player is under 17, we also collect a parent or guardian's name, email address and phone number, so that we can reach someone responsible about a session, an injury or a concern. That is the only reason we hold it.
A parent or guardian can create and manage profiles for their tamariki from their own account. If you do that, you can see and change everything on your child's profile, including their wellbeing check-in answers.
Juniors are asked for a bodyweight, the same as everyone else, and the same as everyone else it is optional. It is asked on the day, on the scoring screen, only when that day includes a lift. A parent who holds the account sees and can change it. If it is left blank, the strength events count as not met and nothing else about the grade changes. Because every junior plays in one Juniors division, the answer given at registration is used privately to choose between the boys' and girls' standards from age 12 (under 12s share one list). It is never shown to anyone.
A junior's display name, age group, scores and placements appear on public leaderboards in the same way as any other player. If you would rather your child appeared under a username only, that is the default — you do not have to show a full name. Ask a kaiwhakawā if you want a junior removed from public leaderboards entirely.
IF YOU PLAYED WITHOUT AN ACCOUNT
You can play AllSport without ever making an account. When you do, a kaiwhakawā writes down the name you give them so your scores can be ranked against everyone else's that session. That name and those scores are visible on the session leaderboard, the same as any other player.
We hold nothing else about you — no email, no phone number, no date of birth. Give us a first name or a nickname if you would rather. If you want your name taken off a past session, email us and we will remove it.
SERVICES WE RELY ON
We are a small charity and we do not run our own servers. These are the only companies your information reaches, and each is used strictly to run AllSport. We do not use advertising networks, analytics services, social media pixels or data brokers — there are none on this site.
Because these companies are based overseas, your information is stored and processed outside New Zealand — our database sits in Sydney, Australia. We only use providers that are required to protect it to a standard comparable to the Privacy Act 2020.
We will also share information where we are legally required to, or where it is necessary to prevent a serious threat to someone's safety.
WHAT WE STORE ON YOUR DEVICE
We use one cookie, and it exists only to keep you signed in. We do not use tracking or advertising cookies, which is why you have never seen a cookie banner here. Everything else below is stored locally in your own browser and never sent to us.
WHAT WE KEEP
Your account and contact details — kept while your account is open. If you ask us to delete your account, or if you have not played for three years and do not respond when we check in, we delete them.
Your scores, placements and colours — kept indefinitely. Each year's colours stay on your record and a competition history is not much use with holes in it. If you delete your account, these stay as part of the session record but are separated from your name and contact details.
Your bodyweight — each entry is kept with the day it was recorded, so a past lift stays graded against what you weighed then, and all of them are deleted with your account. Grades already earned stay earned.
Wellbeing check-in answers — kept for as long as you have an account, and deleted with it. Once answers are rolled into a group average for a funder report, that average cannot be traced back to you.
Koha records — kept for seven years, because charity financial records have to be.
WHAT YOU CAN ASK FOR
The Privacy Act 2020 gives you these rights. We would honour them anyway — email privacy@allsport.nz and ask. There is no charge.
HOW WE PROTECT IT
Everything travels over an encrypted connection. Passwords are hashed by our authentication provider and are never visible to us. Our database uses row-level security so that records such as your wellbeing answers, koha and referrals can only be read by the accounts entitled to see them. Administrator access is limited to kaiwhakawā, and today that is a single person.
No system is perfect. If we ever have a privacy breach that could cause you serious harm, we will tell you and notify the Office of the Privacy Commissioner, as the Privacy Act requires.
IF THIS CHANGES
We update this page when what we do changes. The date at the top always tells you when it was last reviewed. If we start collecting something meaningfully new, or use what we already hold for a new purpose, we will tell players directly rather than quietly editing this page.
Not satisfied with how we handle it? The Office of the Privacy Commissioner can investigate. Visit privacy.org.nz or call 0800 803 909.