Privacy Policy

J&J League Australia operates a Bachata Jack and Jill competition management platform. Our platform enables competitors to register for competitions, track their standings, and connect with the Australian dance community. Competition Owners use the platform to manage events, and Judges use it to submit scores.

If you have any questions about this Privacy Policy, please contact us at jjleagueaustralia.com.au/contact.

The type of information collected depends on how you use the platform:

• Directly from you when you register an account or update your profile
• When you enter a competition or submit a score
• When you contact us via the contact form or email
• Automatically through cookies and server logs when you use the platform
• From Competition Owners when they add guest competitor entries on your behalf

• To create and manage your account and verify your identity
• To process competition entries and calculate placement-based standings
• To display public results and leaderboards (top 5 per tier and role per competition)
• To notify you of competition updates, result corrections, or tier cancellations
• To administer the Competition Owner application and approval process
• To detect and prevent duplicate registrations or fraudulent entries
• To improve the platform through usage analytics
• To respond to enquiries submitted through our contact form
• To comply with legal obligations

We do not sell, rent, or trade your personal information to any third party.

We may disclose personal information to the following service providers who assist us in operating the platform:

• Supabase Inc. — database hosting, authentication, and storage (AWS infrastructure in Australia or Singapore)
• Vercel Inc. — web application hosting and delivery (global CDN)
• Resend Inc. — transactional email delivery

By using the platform, you consent to cross-border disclosure to these providers. We are not required to take reasonable steps under APP 8.1 where you have consented to the disclosure.

• Encryption in transit using TLS (HTTPS) on all platform pages
• Encryption at rest for database storage via Supabase
• Passwords and PINs stored as bcrypt hashes — never as plain text
• Role-based access control and Row-Level Security (RLS) policies on all data
• Supabase Auth for secure session management and token handling
• No storage of payment card information

In the event of a data breach likely to result in serious harm, we will notify affected individuals and the OAIC as required by the Notifiable Data Breaches (NDB) scheme.

• Account data: retained while active and for 12 months after deletion
• Competition entry and results history: retained indefinitely as part of the public historical record
• Raw judging scores: retained for 2 years after the competition date
• Contact form submissions: retained for 12 months
• Server and audit logs: retained for 90 days

• Essential cookies: Required for authentication and session management (cannot be disabled)
• Functional cookies: Remember your preferences (e.g. state filter, tier selection)
• Analytics: Aggregate, anonymised usage data to improve the platform

We do not use advertising or third-party tracking cookies.

We may send transactional emails related to your use of the platform. We do not send promotional emails without your explicit consent. If we introduce a newsletter, you will receive a clear opt-in and a simple unsubscribe link in every such email.

Under the Privacy Act 1988, you have the right to:

• Access: Personal information we hold about you. We will respond within 30 days.
• Correct: Inaccurate, out-of-date, or incomplete information. Most profile data can be corrected via account settings.
• Delete: Your account and personal information, subject to the retention requirements in Section 8. Published competition placements cannot be removed as they form part of the official record.
• Complain: To us about a breach of the APPs. If unresolved within 30 days, you may escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any right, contact us via the Contact page with subject “Privacy Request”. We will verify your identity before processing.

The platform is not directed to children under 15. We do not knowingly collect personal information from children under 15. If you believe we have inadvertently done so, contact us immediately.

We may update this policy from time to time. When we make a material change, we will update the “Last updated” date and, where appropriate, notify registered users by email. Continued use of the platform constitutes acceptance of the updated policy.