Privacy Policy

J&J League Australia operates a partner-dance Jack and Jill competition management platform (covering dance styles such as West Coast Swing, Bachata, Salsa, Kizomba and Zouk, with more added over time). Our platform enables competitors to register for competitions, track their standings, and connect with the Australian dance community. Competition Owners use the platform to manage events, and Judges use it to submit scores.

If you have any questions about this Privacy Policy, please contact us at jjleague.com.au/contact.

The type of information collected depends on how you use the platform:

• Directly from you when you register an account or update your profile
• When you enter a competition or submit a score
• When you contact us via the contact form or email
• Automatically through cookies and server logs when you use the platform
• From Competition Owners when they add or import competitor entries (including any email or mobile number) on your behalf

• To create and manage your account and verify your identity
• To process competition entries and calculate placement-based standings
• To display public results and leaderboards (the top 5 per tier and role appear in the public season standings; each competition's results page shows its published placements)
• To notify you of competition updates, result corrections, or tier cancellations
• To administer the Competition Owner application and approval process
• To detect and prevent duplicate registrations or fraudulent entries
• To improve the platform through usage analytics
• To respond to enquiries submitted through our contact form
• To comply with legal obligations

We do not sell, rent, or trade your personal information to any third party.

We may disclose personal information to the following service providers who assist us in operating the platform:

• Supabase Inc. — database hosting, authentication, and storage (AWS infrastructure in Australia or Singapore)
• Vercel Inc. — web application hosting and delivery (global CDN)
• Resend Inc. — transactional email delivery

By using the platform, you consent to cross-border disclosure to these providers. We are not required to take reasonable steps under APP 8.1 where you have consented to the disclosure.

• Encryption in transit using TLS (HTTPS) on all platform pages
• Encryption at rest for database storage via Supabase
• Account passwords stored as one-way bcrypt hashes — never as plain text
• Judge and console PINs are short numeric access codes, protected by Row-Level Security and kept private to the Competition Owner and Platform Admins
• Role-based access control and Row-Level Security (RLS) policies on all data
• Supabase Auth for secure session management and token handling
• No storage of payment card information

In the event of a data breach likely to result in serious harm, we will notify affected individuals and the OAIC as required by the Notifiable Data Breaches (NDB) scheme.

• Account data: retained while active and for 12 months after deletion
• Competition entries and published placements: retained indefinitely as part of the public historical record
• Raw judging scores: retained for 2 years after the competition date
• Contact form submissions: retained for 12 months
• Server and audit logs: retained for 90 days

• Essential cookies: Required for authentication and session management (cannot be disabled)
• Functional cookies: Remember your preferences (e.g. state filter, tier selection)
• Analytics: Aggregate, anonymised usage data to improve the platform

We do not use advertising or third-party tracking cookies.

We may send transactional emails related to your use of the platform. We do not send promotional emails without your explicit consent. If we introduce a newsletter, you will receive a clear opt-in and a simple unsubscribe link in every such email.

Under the Privacy Act 1988, you have the right to:

• Access: Personal information we hold about you. We will respond within 30 days.
• Correct: Inaccurate, out-of-date, or incomplete information. Most profile data can be corrected via account settings.
• Delete: Your account and personal information, subject to the retention requirements in Section 8. Published competition placements cannot be removed as they form part of the official record.
• Complain: To us about a breach of the APPs. If unresolved within 30 days, you may escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any right, contact us via the Contact page with subject “Privacy Request”. We will verify your identity before processing.

The platform is not directed to children under 15. We do not knowingly collect personal information from children under 15. If you believe we have inadvertently done so, contact us immediately.

We may update this policy from time to time. When we make a material change, we will update the “Last updated” date and, where appropriate, notify registered users by email. Continued use of the platform constitutes acceptance of the updated policy.