This Privacy Policy explains how TOJO FOOTBALL (ABN 82 327 955 407) ("Jugazo", "we", "us") collects, holds, uses, and discloses personal information through the Jugazo platform (the "Platform"), including information about children (Players) collected on their behalf by a Primary Guardian.
This Policy applies to all users of the Platform: Club Owners, Technical Directors, Coordinators, Coaches, Safeguarding Officers, Primary Guardians, Supporting Adults, and Players. It should be read together with the Jugazo Terms of Service.
Player accounts do not require an email address, phone number, or other independent contact channel. All Player account administration is performed by the Primary Guardian.
We collect personal information directly from adult users when they register, and from Primary Guardians when they create and manage a Player's account and content. Personal information may also be generated through ordinary use of the Platform — for example, a Coach logging a delivered session, or a Player's progress being recorded against an IDP goal by permitted staff.
We do not collect Player information directly from a Player without the involvement of their Primary Guardian, and we do not knowingly collect personal information from a child otherwise than through the account structure described in this Policy.
We collect and use personal information to:
We do not use Player information for advertising, and we do not sell personal information to third parties.
Because Players are children, Jugazo relies on the consent and instruction of the Primary Guardian — rather than the Player's own consent — as the basis for creating and managing a Player's account and information. By creating a Player account, a Primary Guardian confirms they have the authority to do so and consents on the Player's behalf to the collection and handling of the Player's information as described in this Policy.
Supporting Adults may access a Player's information only to the extent, and at the permission level, granted by the Primary Guardian. Coaches and Club staff access Player information only to the extent necessary for their coaching or administrative role.
A Primary Guardian also controls, through the Player's Privacy Settings, some of the ways a Player's information may be shown to other families on the same team — including whether the Player's goals in a shared match are shown by name (see Section 6.2). These settings default to the most private option, can be changed at any time, and each change is recorded in a history the Primary Guardian can view.
Within a Club, Player and family information is visible to Club staff only as their role requires it, according to the Platform's permissions model — for example, a Coach sees their own team's data; a Safeguarding Officer sees Club-wide safeguarding records. What other families on a team can see is described in Section 6.2. Cross-Club disclosure does not occur — a Player enrolled at more than one Club has each Club's data kept separate, other than shared core profile fields (name, username and display name).
Some features are designed to be seen by the families of a team, not only by Club staff — for example, event RSVPs, a starting lineup or match result that a Coach chooses to share, and a Player's "Get to Know Me" profile where the Primary Guardian has made it visible to the team. For match results, the following applies when a Coach shares a match with the team:
Club staff with a role on the team can always see a match's full record. A Coach can stop sharing a match at any time, and a Primary Guardian can change their child's setting at any time.
We disclose personal information to trusted service providers who help us operate the Platform, including cloud hosting and storage, under contractual obligations to protect that information and use it only for the purposes we specify.
We may disclose personal information where required by law, in connection with a reportable conduct or child safety obligation, or where we reasonably believe disclosure is necessary to prevent a serious threat to the life, health, or safety of any person, including a Player. We do not disclose personal information for direct marketing purposes to third parties.
Platform data is hosted in Australia, meaning personal information is stored within Australia. Some service providers we use for underlying infrastructure or support functions may be based overseas or may store limited data outside Australia — for example, backup or disaster-recovery infrastructure, or a support tool vendor.
We apply technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access, including access controls scoped to each user's role, encryption in transit and at rest, and row-level data isolation between Clubs. No system can be guaranteed completely secure, and we encourage users to protect their own login credentials.
Consistent with the Platform's safeguarding and audit design, chat messages and certain other records are retained on an immutable basis and are not deleted at a user's request, other than in exceptional circumstances required by law. Player-owned records (IDP history, points, badges) are retained for the life of the Player's account and are not deleted solely because a Club becomes suspended, ceases its subscription, or closes.
Where information is no longer required for the purpose it was collected, for safeguarding, or for legal or audit purposes, we will take reasonable steps to destroy or de-identify it, except where retention is otherwise required.
Adult users may request access to, or correction of, their own personal information at any time through their account settings or by contacting us. A Primary Guardian may request access to or correction of their Player's information on the Player's behalf. Where information forms part of the immutable audit trail (Section 9), correction may take the form of an appended note rather than alteration of the original record, to preserve its evidentiary integrity.
If you have a concern about how we have handled personal information, you may lodge a complaint with our Privacy Officer at admin@tojofootball.com. We will acknowledge your complaint and aim to resolve it within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
The Platform may use limited technical cookies or similar identifiers necessary for login sessions and security, and aggregated analytics to understand feature usage and improve the Platform. We do not use tracking for third-party advertising purposes.
We may update this Privacy Policy from time to time, including to reflect new features or legal requirements. Material changes will be notified through the Platform or by email before taking effect.
For privacy questions, access and correction requests, or complaints, contact our Privacy Officer at admin@tojofootball.com.