How we use your information:​

This privacy notice tells you what to expect when Rugby Black List collects personal information. It applies to information we collect about:

Visitors to our website

Complainants and other individuals in relation to a data protection or freedom of information complaint or enquiry;

Job applicants and our current and former employees.


At RugbyBlack List we will only process personal data where we have a lawful reason to do so and we rely upon:

Legitimate Interest – This means that we have a legitimate business interest to process your data, we have carried out an assessment including what you would reasonably expect. Should you not wish for us to process your data this way we can be contacted to notify us of your objection.

Consent – This means that you have informed us that you agree for us to process your personal data i.e. by opting in when the data was collected. Please note that you can change your mind at any time by contacting us. See all our contact details below.

Contract – This means that in order to perform a contract between us and you, we need to process your personal data e.g. employment.

Legal Obligation – This means that to enable us to comply with the law we need to process your personal data.

If you would like more information, you can read more about the lawful grounds for processing personal data on the ICO’s website.

Visitors to our websites:​

When someone visits we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to record the number of visitors to the various parts of the site amongst other data. This information is processed in a way that does not personally identify anyone. We do not make and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do need to collect personally identifiable information through our website, we will communicate this up front. We will make it clear when we collect personal information and will explain what we intend to do with it.

Use of cookies by Rugby Black List:

On our website we have in place a mechanism that enables you to control your use of cookies, allowing you to set your consent preference.

A cookie is a small piece of code that is sent to your browser from a web server and stored on your computer’s hard drive with the browser data. A cookie can’t read data off your hard disk or read cookie files created by other sites. Cookies do not damage your system. Cookies are used to identify which areas of websites you have visited or customised so that, the next time you visit those pages, they are more readily accessible. You can choose whether to accept cookies by changing the settings of your browser or our cookies banner.

You can reset your browser to refuse all cookies or allow your browser to show you when a cookie is being sent. If you choose not to accept these cookies, your experience at our site and other Web sites may be diminished. Some features may not work as intended.

For example we, like many other companies, use Google Analytics to help us monitor our website traffic. We also use third party cookies to help us with market research, revenue tracking and improving site functionality.

Search engine:​

Our website search logs search queries and results anonymously to help us improve our website and search functionality. No user-specific data is collected by either MI Media or any third party.

Security and performance:​

RBL use third party services to help maintain the security and performance of our website. To deliver this service it processes the IP addresses of visitors to the Rugby Black List website to establish traffic origin to guard against DDS attacks and similar strategies.

People who contact us via social media:​

If you send us a private or direct message via social media the message will be stored by us for three months. It will not be shared with any other organisations.

People who email us:​

We use Transport Layer Security (TLS) to encrypt and protect email traffic in line with government protocol. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.

We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

People who make a complaint to us:​

When we receive a complaint from a person we make up a file containing the details of the complaint. This normally contains the identity of the complainant and any other individuals involved in the complaint.  We will only use the personal information we collect to process the complaint and to check on the level of service we provide.

We usually have to disclose the complainant’s identity to whoever the complaint is about. This is inevitable where, for example, the accuracy of a person’s record is in dispute. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis.

We will keep personal information contained in complaint files in line with our retention policy. This means that information relating to a complaint will be retained for two years from closure. It will be retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle.

Similarly, where enquiries are submitted to us we will only use the information supplied to us to deal with the enquiry and any subsequent issues and to check on the level of service we provide.

When we take enforcement action against someone, we may publish the identity of the defendant in our Annual Report or elsewhere. If possible, we do not identify any complainants unless the details have already been made public.

Those who use Rugby Black List services:​

We need to hold the details of the people and companies who have requested the service in order to provide it. However, we only use these details to provide the service the person has requested and for other closely related purposes depending on the service requested.

Your rights:​

Under the Data Protection Act 2018, you have rights as an individual which you can exercise in relation to the information we hold about you.

You can read more about these rights here:


You have various data subject rights including:

The right to be informed – you have the right to know what personal data M.i Media is collecting about you and how we are collecting it.

Right of access- you have the right to know whether we are processing your personal data, and what we are processing. We will respond within 28 days of receiving your request.

Right to rectification – you have the right to have any incorrect personal data corrected or completed if it is incomplete. We will respond within 28 days of receiving your request.

Right to erasure – this right, often referred to as the right to be forgotten, allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will respond within 28 days of receiving your request.

Right to restrict processing – you have the right to ask us to restrict processing of your data. We will respond within 28 days of receiving your request.

Right to object – you have the right to object to our processing of your personal data based on

(i) legitimate interests, or for the performance of a task in the public interests/exercise of official authority (including profiling);

(ii) direct marketing (including profiling); and

(iii) for purposes of scientific/historical research and statistics.

Transfer of your Information:

If data is transferred out of the European Economic Area (EEA) RBL ensures that data security is upheld in accordance with the EEA Standard.

Complaints or queries:​

RBL tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of RBL’s collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.

If you want to make a complaint about the way we have processed your personal information, you can contact Sagan Daniels at  Alternatively, you have the right to complain via the Information Commissioners Office (ICO).

Access to personal information:​

Rugby Black List tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ under the Data Protection Act 2018. If we do hold information about you we will:

Give you a description of it;

Tell you why we are holding it;

Tell you who it could be disclosed to; and

Let you have a copy of the information in an intelligible form.

To make a request to Rugby Black List for any personal information we may hold you need to put the request in writing to:

If we do hold information about you, you can ask us to correct any mistakes by contacting us at:

Disclosure of personal information:

In many circumstances we will not disclose personal data without consent. However, when we investigate a complaint, for example, we will need to share personal information with the organisation concerned and with other relevant bodies.

You can also get further information on:

Agreements we have with other organisations for sharing information;

Circumstances where we can pass on personal data without consent for example, to prevent and detect crime and to produce anonymised statistics.

Our instructions to staff on how to collect, use and delete personal data; and

How we check that the information we hold is accurate and up to date.

Links to other websites​:

This privacy notice does not cover the links within this site that link to other websites. We encourage you to read the privacy statements on the other websites you visit.

Changes to this privacy notice:

We keep our privacy notice under regular review. This privacy notice was last updated in December 2019.

How to contact us:​

If you want to request information about our privacy policy you can email us at: