Privacy Policy.

OEL runs online indoor-rowing events — the first being The 500m — for athletes in Aotearoa New Zealand and the wider Oceania region. We are based in New Zealand and handle personal information in line with the New Zealand Privacy Act 2020. This policy explains what we collect, why, who we share it with, and your choices. Questions? Email oceaniaergleague@gmail.com.

What we collect

• Account: your email address, and — if you sign in with Google — your name and profile photo from your Google account.
• Profile & eligibility: full name, date of birth (to place you in the correct age division), gender (race category), and gym / club / school affiliation.
• Registration & payment: your chosen division, any promo code, and payment status. Card payments are handled entirely by Stripe — we never see or store your card details. We retain the payment amount and Stripe reference IDs.
• Results: your 500m time, the date/time of the row, a photo of the monitor, optional notes, and — where required for verification — the name and email of your witness.
• Communications: whether you've opted in to event news.
• Technical: standard server logs and an essential sign-in cookie. If privacy-friendly analytics are enabled, they record aggregate page views only and do not identify you.

How we use it

• To create your account and run your registration and entry.
• To place you in the correct division and verify your results.
• To publish verified results on the leaderboard (see below).
• To process your entry fee via Stripe.
• To email you about your entry and results, and — only if you opt in — about future events.

What's shown publicly

Only your name, gym / club / school affiliation, division, and verified time appear on the public leaderboard. Your date of birth, email address, and any witness details are never shown publicly.

Who we share it with

We use a small set of trusted service providers ("processors") to run the event. Your information may be stored or processed by them on servers outside New Zealand (including Australia and the United States):

• Supabase — database, authentication, and file storage.
• Stripe — payment processing.
• Resend — transactional and sign-in email delivery.
• Netlify — website hosting.
• Google — only if you choose "Sign in with Google".

We do not sell your personal information. We only disclose it where required by law.

Retention

We keep your information for as long as needed to run the event and meet legal and accounting obligations, after which we delete or anonymise it. You can ask us to delete your account and personal information sooner (see below); some records tied to completed payments may be retained where the law requires.

Your rights

You can ask to access, correct, or delete your personal information at any time by emailing oceaniaergleague@gmail.com. You can also withdraw marketing consent at any time — race-related emails will still be sent while you're entered.

Children

Our Junior division is open to athletes aged 13–18. Athletes under 13 may only be registered by a parent or guardian acting on their behalf. If you believe we hold information about a child without appropriate consent, contact us and we'll remove it.

Security

We take reasonable steps to protect your information, including encrypted connections and access controls, and we rely on Stripe's PCI-compliant systems for payments. No online service can be guaranteed completely secure.

Changes

We may update this policy from time to time. We'll update the date at the top, and for material changes affecting registered athletes we'll notify you by email.

Contact

Privacy questions or requests: oceaniaergleague@gmail.com. See also our Terms of Service.