• Login
  • Currency
Search

Privacy Policy

Introduction

Rugby World Cup Limited (“World Rugby”) has engaged Legends Hospitality (UK) Limited (“Legends”) to provide its online shop. This privacy notice describes how Legends and World Rugby(“we”, “our” or “us”) collect, use, and share your Personal Data when you interact with or use shop2021.rugbyworldcup.com (the “Site”). We specify below (in the section headed “How do we use the information”) which of us is the data controller in which circumstances.

What information do we collect?

We gather various types of information, including information that identifies or may identify you as an individual (“Personal Data”) as explained in more detail below.

Information You Provide to Us:

From the Site:  We may collect any Personal Data that you choose to send to us or provide to us, for example, through an online form, or if you make a purchase from the Site. If you contact us through the Site, we will keep a record of our correspondence.

Information We Automatically Collect:

When you use the Site:When you visit the Site, we collect certain information related to your device, such as your device’s IP address, referring website, what pages your device visited, and the time that your device visited our Site.

For further information, please read the section below headed “Cookies and other Tracking Technologies”.

How do we use the information?

Description of how we use your personal data Legal basis for this use of your personal data Processing Parties and Roles
Sending, including by electronic means and after profiling, commercial communications concerning the Site and its Products and for subsequent statistical analysis.
  • With your consent; or 
  • Legitimate interest in promoting World Rugby’s Products and offerings
  • World Rugby as data controller
  • Legends as data processor 

To carry out loyalty actions, which including sending satisfaction surveys. 

 

  • Legitimate interest in ensuring business continuity and in maintaining a relationship with our customers and users that is as satisfactory as possible for them.  
  • World Rugby as data controller 
  • Legends as data processor 

Operate, maintain, monitor for errors or bugs on our site, and improve our Site and Products. 

  • Legitimate interest in providing and improving our Site and Products 
  • Performance of a contract; or 
  • With your consent 
  • World Rugby as data controller 
  • Legends as data controller 

Analysis of the usage and web traffic of the Site (for example, product preferences and purchasing behaviours). 

  • Legitimate interest in improving the Site, the user experience (including tailoring that experience) and the product and service offering (and to understand interest in additional customer services) and to tailor our communications. 
  • World Rugby as data controller 
  • Legends as data controller 

Monitoring and security purposes, for our own regulatory compliance and legal advice. 

 

  • Legitimate interest in defending our interests and rights. 
  • Legal obligation (audit, criminal compliance and data protection). 
  • World Rugby as data controller 
  • Legends as data controller 

The registration as a user on the Site, if you opt so, to remember your details for future transactions. 

  • Performance of a contract 
  • Legends as data controller 

The statistical analysis of transactions, complaints and claims, as part of a process of continuous improvement of our services. 

  • Legitimate interest in ensuring business continuity and in maintaining a relationship with our customers and users that is as satisfactory as possible for them. 
  • World Rugby as data controller 
  • Legends as data controller 

Accounting and tax management. 

  • Legal Obligation 
  • World Rugby as data controller 
  • Legends as data controller 

Communicate updates to you about Products you have ordered. 

  • Legitimate interest in marketing to you any updates to our Site or Products; or 
  • Performance of a contract 
  • Legends as data controller 

Send necessary information including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages 

  • Legitimate interest to manage our business including to maintain ongoing operations and to improve and strengthen our operations; or 
  • Performance of a contract 
  • Legends as data controller 

Protect, investigate, and deter against fraudulent, unauthorised, or illegal activity on our Site or with our Products. 

  • Legitimate interest to manage our business including to maintain ongoing operations and to improve and strengthen our operations; or 
  • Legal obligation 
  • Legends as data controller 

Deliver Products you request and/or purchase. 

  • Legitimate interest to respond to your requests and inquiries for ongoing business administration; or 
  • Performance of a contract 
  • Legends as data controller 

The management of the purchases: Handling the order placed, shipping of the order and managing the billing and debt collection. 

  • Performance of a contract 
  • Legends as data controller 

Customer service and management of communications necessary for the supply of Products ordered and requests made by customers and users. 

  • Legitimate interest in ensuring business continuity and in maintaining a relationship with our customers and users that is as satisfactory as possible for them; or 
  • Performance of a contract 
  • Legends as data controller 

The management of claims and requests for information made in relation to Products purchased on the Site. 

  • Legitimate interest in ensuring business continuity and in maintaining a relationship with our customers and users that is as satisfactory as possible for them. 
  • Legends as data controller 

How do we share and disclose information to third parties? 

We share and disclose information (including Personal Data) about our customers in the following limited circumstances:

 

Vendors, consultants and other service providers:

We may share your information with third party vendors, consultants and other service providers who we employ to perform tasks on our behalf. These types of companies include (for example):

 

  • Website hosting providers. 
  • Email communication delivery providers. 
  • Order fulfilment and delivery providers. 
  • Customer service software providers. 
  • Payment processors. 
  • Analytics and marketing service provider to improve quality of communication with customers. 
  • Successor providers of the World Rugby online store. 

If we receive your Personal Data in the United States and subsequently transfer that information to a third party agent or service provider for processing, we remain responsible for ensuring that such third party agent or service provider processes your Personal Data to the standard required by the applicable privacy laws, including the GDPR (see the sections below headed “Additional Information for Users in the European Economic Area (“EEA”) or in the United Kingdom (“UK”)” and “International Data Transfers”).

 

Our Group Companies:

We may also share your Personal Data with our parent companies, subsidiaries and/or affiliates for purposes consistent with this Privacy Notice.

Protection of Us and Others: We reserve the right to access, read, preserve, and disclose any information as necessary to comply with law or court order; enforce or apply our agreements with you and other agreements; or protect the rights, property, or safety of us, our employees, our users, or others.

Disclosures for Tax, Legal, National Security or Law Enforcement:

Under certain circumstances, we may be required to disclose your Personal Data to tax authorities and in response to valid requests by public authorities, judges, courts, tribunals including to meet national security or law enforcement requirements.

Security

We use appropriate technical, organisational and administrative security measures to protect any information we hold in our records from loss, misuse, and unauthorised access, disclosure, alteration and destruction.

Unfortunately, no company or service can guarantee complete security. Unauthorised entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time. Among other practices, your account is protected by a password for your privacy and security. You must prevent unauthorised access to your account and Personal Data by selecting and protecting your password appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account.

Cookies and Other Tracking Technologies 

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first party cookies. We may also use third party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts, as well as to understand your browsing of the Site (for example, which page you visit or how long you stay on each page).

More specifically, we use cookies and other tracking technologies for the following purposes:

  • Assisting you in navigation;
  • Assisting in registration to our events, login, and your ability to provide feedback;
  • Analysing your use of our Site;
  • Assisting with our promotional and marketing efforts (including behavioural advertising).

 

Our Site is scanned with our cookie scanning tool regularly to maintain a list as accurate as possible. We classify cookies in the following categories:

  • Strictly Necessary Cookies
  • Performance Cookies
  • Functional Cookies
  • Targeting Cookies

 

Our Cookie Consent Preference Centre can be utilised to customise your cookie preferences. The tool will record when you have consented to our cookie notice and will ask for consent once every six months. The tool specifically controls the cookies set by using this Site.  Strictly necessary cookies cannot be disabled, nor can the tool be used to block cookies on third party Sites linked from our Site.

 

Please consult the Cookie Notice for more information about the type of cookies and tracking technologies that we use on the Site and why, and how to accept and reject them.

 

Data Retention 

We will only retain your Personal Data for as long as is reasonably necessary for the purposes for which it was collected and in line with our respective data retention policies. 

Your Privacy Rights 

You may exercise the following rights:

  • the right of access to your Personal Data to know what data is being processed and what processing operations are being carried out on that data. 
  • the right to rectification of inaccurate data. 
  • the right to the deletion of your Personal Data, where possible. 
  • the right to request the limitation of the processing of your Personal Data when the accuracy, legality or necessity of the data processing is doubtful, in which case we may store your data properly blocked for the exercise or defence of claims. 
  • the right to object to the processing of your Personal Data, where the legal basis for us to process your Personal Data is legitimate interest. We will stop processing your data unless we have a compelling legitimate interest to do so or the continued processing is necessary for the defence of claims. 
  • the right to data portability when the legal basis that allows us to process your data is the existence of a contractual relationship or your consent. 
  • the right to withdraw your consent, where the legal basis allowing us to process your data is your consent. 

 

What choices do I have?

You can always opt not to disclose information to us, but keep in mind some information may be needed to register with us or to take advantage of some of our features.

 

Cookies

You can accept or reject cookies for our Site through our Cookie Preference Centre, accessible by clicking the “cookie settings” button in the Cookie Notice or here:


You can also do so by adjusting your web browser controls. Please consult the Cookie Notice for more information about our use of cookies on the Site and how to accept and reject them.

 

Marketing Communications

You can opt-out of receiving certain promotional or marketing communications from us at any time, by using the unsubscribe link in the emails communications we send.

How Can I Exercise My Privacy Rights? 

If you would like to access, review, update, rectify, and delete any Personal Data we hold about you, or exercise any other data subject right available to you under the General Data Protection Regulation (GDPR), you can email us using the contact details set out in the section headed “Contact Us” below. Our privacy team will examine your request and respond to you as quickly as possible.


Please note that we may still use any aggregated and de-identified Personal Data that does not identify any individual, and may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

 

You can also lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe that data protection legislation has been infringed in the processing of your Personal Data. The ICO can be contacted at https://ico.org.uk/global/contact-us/.

International Data Transfers 

Personal Data you submit on the Site may be sent to the United States and processed by us there or in other countries, on our service providers’ cloud servers. We will always protect your information in accordance with this Privacy Notice wherever it is processed. 

 

Information for users in the European Economic Area (“EEA”) or in the United Kingdom (“UK”)

We may transfer Personal Data from the EEA or the UK to the United States, including Personal Data we receive from individuals residing in the EEA or the UK who visit our Site or otherwise interact with us. Please note that for individuals located in the EEA or the UK, the term Personal Data used in this notice is equivalent to the term “personal data” under applicable European and UK data protection laws.

When we engage in such transfers of Personal Data, it relies on i) Adequacy Decisions as adopted by European Commission on the basis of Article 45 of Regulation (EU) 2016/679 (GDPR), or ii) Standard Contractual Clauses issued by the European Commission. We also continually monitor the circumstances surrounding such transfers in order to ensure that these maintain, in practice, a level of protection that is essentially equivalent to the one guaranteed by the GDPR.

 

California and Delaware “Do Not Track” Disclosures 

California and Delaware law require us to indicate whether we honour “Do Not Track” settings in your browser concerning targeted advertising. We adhere to the standards set out in this Privacy Notice and do respond to Do Not Track browser requests.

Children 

We do not knowingly collect or solicit Personal Data from anyone under the age of 16. If you are under 16, please do not attempt to use the Site or send any Personal Data about yourself to us. If we learn that we have collected Personal Data from a child under age 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us Personal Data, please contact us using the contact details set out in the section headed “Contact Us” below .

Linked Websites 

For your convenience, hyperlinks may be posted on the Site that link to other websites (the “Linked Sites”). We are not responsible for, and this Privacy Notice does not apply to, the privacy practices of any Linked Sites or of any companies that we do not own or control. Linked Sites may collect information in addition to that which we collect on the Site. We do not endorse any of these Linked Sites, the services or products described or offered on such Linked Sites, or any of the content contained on the Linked Sites. We encourage you to seek out and read the privacy notice of each Linked Site that you visit to understand how the information that is collected about you is used and protected.

Changes to the Privacy Notice

We’re constantly trying to improve our Site, so we may need to change this Privacy Notice from time to time as well. We will alert you to material changes by, for example, placing a notice on our Site and/or by sending you an email (if you have registered your e-mail details with us) when we are required to do so by applicable law. You can see when this Privacy Notice was last updated by checking the date at the bottom of this page. You are responsible for periodically reviewing this Privacy Notice.

Contact Us 

Rugby World Cup Limited

World Rugby House8-10 Pembroke Street Lower Dublin 2

Ireland

Email (general online store enquires): cs@shop2021.rugbyworldcup.com 

Email (data privacy inquiries): dataprotection@worldrugby.org  

 

Rubgy World Cup is a company incorporated in COUNTRY under number NUMBER. Rubgy World Cup is a registered Data Controller with the COUNTRY Information Commissioner's Office (ICO), number NUMBER.

Legends Hospitality (UK) Limited

85 Great Portland Street

First Floor

Great Portland Street

London

W1W 7LT

United Kingdom 

Email (general online store enquires): cs@shop2021.rugbyworldcup.com

Email (data privacy enquiries): rwc_dataprivacy@legends.net

Legends Hospitality (UK) Limited is a company incorporated in England and Wales under number 08426292.

Updates 

This Privacy Notice was last updated 2nd September 2021.

Search our store