Last Updated: 7th May 2026
This Privacy Policy explains how Christchurch United Football Club Incorporated ("CUFC", "we", "us", or "our") collects, uses, and protects your information when you visit cicyouth.com (the "Website") or use the CIC Youth mobile application (the "App"), together the "Services".
The Services are operated for the Christchurch International Cup, a youth football tournament held annually in Christchurch, New Zealand.
We are committed to protecting your privacy and complying with the New Zealand Privacy Act 2020, the EU General Data Protection Regulation (GDPR) where it applies to overseas users, and the privacy requirements of the Apple App Store and Google Play Store.
We may also collect non-personal information about your interactions with our website, such as your IP address, browser type, and pages visited.
WHO WE ARE
Christchurch United Football Club Incorporated is a not-for-profit incorporated society registered in New Zealand and founded in 1970.
Registered office: Christchurch, New Zealand
Website: https://cufc.co.nz
Tournament site: https://cicyouth.com
Privacy contact email: privacy@cufc.co.nz
General contact email: contact@cufc.co.nz
WHAT INFORMATION WE COLLECT
a. Information you give us directly
If you create an account, register a team, or contact us through the Website or App, we may collect:
Name (first and last)
Email address
Phone number
Postal address
Date of birth (for tournament age-grade verification)
Team affiliation, role (player, coach, parent, fan)
Emergency contact details (where required for tournament
participation)Payment details (handled by our payment processors — see
Section 5)
b. Information about minors (under 16)
The Christchurch International Cup is a youth tournament, and many participants are under 16. Where a participant is under 16 we collect information only with the consent of a parent or legal guardian. Parents or guardians may review, correct, or request deletion of their child's information at any time by emailing privacy@cufc.co.nz.
c. Information we collect automatically
When you use the Website or App, we may automatically collect:
Device information: device type, operating system, device identifier, app version
Usage information: which screens you view, which features you use, how often, and for how long
Diagnostic information: crash reports, performance data, error logs
Network information: IP address, approximate location (city/region only — derived from IP, never precise GPS unless you grant explicit permission)
Cookies and similar technologies (Website only — see Section 9)
d. Information from third parties
If you sign in using a third-party service (such as Google
Sign-In), we receive limited profile information from that
service — typically your name, email address, and a unique
identifier — in accordance with the permissions you grant.
HOW WE USE YOUR INFORMATION
We use the information we collect to:
Operate the tournament: team registrations, fixtures, scheduling, results, communications with participants and
coachesProvide the App and Website: authentication, account management, displaying personalised tournament information
Improve our services: analyse usage to fix bugs, improve features, and prioritise development
Communicate with you: tournament updates, schedule changes, important announcements, replies to your enquiries
Process payments: for tournament entry fees, merchandise, or donations (where applicable)
Comply with legal obligations: including health and safety, child protection, financial reporting, and any lawful request from a regulator or court
We do not sell your personal information to anyone, and we do not use your information for third-party advertising or
cross-app tracking.
LEGAL BASIS FOR PROCESSING (FOR USERS IN THE EU/UK)
Where the GDPR applies, we rely on the following legal bases:
Contract — to deliver the tournament services you have signed up for
Legitimate interests — to operate, secure, and improve the Services
Consent — for optional communications (e.g. marketing) and for processing children's data (where the child is under 16)
Legal obligation — to meet record-keeping, financial, and child-safeguarding requirements
You may withdraw consent at any time by contacting
privacy@cufc.co.nz.
WHO WE SHARE YOUR INFORMATION WITH
We share information only with parties who help us operate the Services, and only to the extent necessary. These include:
Hosting and infrastructure: Fly.io (USA / international), Supabase (Australia, Sydney region), Cloudflare (international CDN)
Authentication and email: Google (for Google Sign-In, where used), Resend (transactional email)
Analytics and crash reporting: Expo (Expo Updates and diagnostics), Apple App Store Connect, Google Play Console
Payment processing: Stripe (where the App or Website processes payments)
Tournament partners: referees, venue operators, and Football NZ-affiliated bodies, where strictly necessary for tournament operations
We require all third parties to safeguard your information and to use it only for the purposes we have authorised. We may also disclose your information where required by law, to enforce our terms, or to protect the rights, property, or safety of CUFC, our users, or the public.
INTERNATIONAL DATA TRANSFERS
Some of our service providers store data outside New Zealand (typically Australia, the United States, or the European Union). When we transfer your information internationally, we take steps to ensure it receives the same level of protection as required under New Zealand law, including using providers with recognised privacy frameworks and contractual safeguards.
HOW LONG WE KEEP YOUR INFORMATION
We keep your information only for as long as necessary for the purposes described in this policy, including:
Tournament records: up to 7 years after the tournament, for safeguarding, insurance, and accounting purposes
Account information: for as long as your account is active, plus 12 months after closure
Diagnostic and analytics data: typically 12–24 months
Legal records: as required by New Zealand law (typically 7 years for financial records)
When information is no longer needed, we securely delete or anonymise it.
HOW WE PROTECT YOUR INFORMATION
We use industry-standard security measures including:
Encrypted connections (HTTPS / TLS) for all data in transit
Encrypted storage at rest, managed by our hosting providers
Access controls limiting staff access to personal data
Regular security reviews and software updates
No system is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. If a data breach occurs that is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner in line with the New Zealand Privacy Act 2020.
COOKIES AND TRACKING TECHNOLOGIES (WEBSITE)
The Website uses cookies and similar technologies to:
Keep you logged in across pages
Remember your preferences
Measure how the Website is used
You can disable cookies in your browser settings, but parts of the Website may not work correctly if you do. The App does not use advertising cookies, third-party advertising SDKs, or cross-app tracking. Apple's App Tracking Transparency framework is not engaged because we do not track you across other apps or websites.
MOBILE APP PERMISSIONS
The App may ask for the following permissions on your device. Each is optional and you can decline or revoke at any time in your device settings:
Notifications: to alert you about fixture changes, scores,
and tournament announcementsCamera / Photo library: if you upload a profile photo or
team photoLocation: only if you use venue-finding features
(city/region only — never continuous tracking)
We do not access your contacts, microphone, calendar, health data, or any other sensitive permission.
YOUR RIGHTS
You have the right to:
Access the personal information we hold about you
Correct information that is inaccurate or incomplete
Delete your information ("right to erasure" / "right to be forgotten") subject to our legal obligations to retain certain records
Restrict or object to certain processing
Withdraw consent at any time
Data portability — receive a copy of your information in a structured format
Lodge a complaint with the New Zealand Office of the Privacy Commissioner (privacy.org.nz) or, for EU/UK users, your local data protection authority
To exercise any of these rights, email privacy@cufc.co.nz. We will respond within 20 working days as required under New Zealand law.
CHILDREN'S PRIVACY
The Christchurch International Cup is a youth tournament and we take child safety seriously. We collect information about children only with parent or guardian consent, only what is necessary for tournament operations, and we never use it for marketing or third-party purposes.
Parents and guardians may at any time:
Review the personal information we hold about their child
Request that we correct or delete that information
Withdraw consent for the child's continued use of the App or Website
Email privacy@cufc.co.nz for any of these requests.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of the page. If the changes are significant we will notify users through the App, email, or a banner on the Website. Continued use of the Services after we publish a change means you accept the updated policy.
CONTACT US
If you have any questions, concerns, or requests about this Privacy Policy or your information, please contact:
Privacy Officer
Christchurch United Football Club Incorporated
Email: privacy@cufc.co.nz
General enquiries: info@cufc.co.nz
Website: https://cufc.co.nz
If you are not satisfied with our response, you may complain to the New Zealand Office of the Privacy Commissioner at privacy.org.nz or by phone on 0800 803 909.
