The nZone ("we" or "us") provides an Athlete Management System (AMS): a web platform and white-labelled mobile application that athlete management agencies use to manage their athletes and the people around them. For privacy questions, contact [email protected].
We handle two kinds of information:
If you are an athlete or related party whose information is on the platform, please contact the agency that manages you first. We will help them respond.
Website and enquiries: your name, work email, agency, role and any message you send us.
Client accounts: company name, the names, work email addresses and roles of users, login credentials (stored securely, never in plain text), and billing details.
Client Data, depending on how a Client uses the platform, may include:
Sensitive information: Client Data may include health or injury information, for example where a physiotherapist is involved. Clients must have a lawful basis, and the explicit consent of the person concerned where the law requires it, before adding this information.
Usage information: basic technical and log data, such as IP address, device and browser type, and when the platform is used, to keep it secure and working properly.
Location: we do not currently collect location data from your device. Locations in the platform, such as venues, hotels and flight details, are part of the schedule information entered by the Client. If we introduce features that use device location in future, we will update this policy and ask for permission in the app before using it.
Our own information is used to respond to enquiries, set up and run client accounts, bill for the service, provide support, keep the platform secure and meet legal obligations. We may send account users occasional service updates, and they can opt out at any time.
Client Data is used only to provide, maintain, secure and support the service for the Client. We do not sell Client Data, use it for advertising, or market to athletes or their related parties.
We share information only:
Our clients and service providers are located in several countries, including South Africa, the United Kingdom and the United States, so information may be stored or processed outside the country where it was collected. The platform is currently hosted in the United States (Amazon Web Services, Oregon). When we transfer information, we use providers and safeguards that give it an adequate level of protection, as required by applicable data protection law.
We keep Client Data for as long as the Client uses the service. When a Client leaves, it can ask for an export of its data within 30 days, after which we delete it from our live systems; backups are overwritten in the normal course. We keep account and billing records for as long as the law requires, and enquiries only as long as needed to respond and follow up.
We take reasonable technical and organisational measures to protect information, appropriate to the sensitivity of athlete data. These include encrypted connections (HTTPS), hosting on Amazon Web Services with data encrypted at rest, passwords that are salted and encrypted, server-side privacy rules and role-based access so users see only what their Client permits, restricted internal access, and regular backups.
No system is completely secure. Users must keep their login details confidential and tell us at [email protected] straight away if they suspect unauthorised access.
If we become aware of a security incident affecting Client Data, we will notify the affected Client without undue delay and help them meet their own obligations.
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict how it is used, and to complain to a regulator: in South Africa, the Information Regulator; in the United Kingdom, the Information Commissioner's Office. To exercise your rights, contact [email protected]. Requests about Client Data will be passed to the relevant agency.
The platform is intended for professional athletes aged 18 and over and agency staff. It is not designed for use by children. If a Client adds information about a child, such as a family member, it is responsible for having the consent of a parent or guardian where required.
We use essential cookies, which are needed to keep the website and platform working and secure, such as keeping you signed in. With your permission, our website also uses Google Analytics cookies to help us understand how visitors use the site, such as which pages are viewed, how visitors arrived and their approximate location. This information is reported to us in aggregate, may be processed by Google outside South Africa, and is not used by us for advertising. Google Analytics only runs if you click “Accept” on the cookie notice. You can change your choice at any time using the “Cookies” link at the bottom of the website, and you can also control cookies in your browser settings. We do not use advertising cookies.
We may update this policy from time to time. The latest version will always be on this page, and we will tell Clients about significant changes.
General enquiries: [email protected]. Privacy questions or concerns: [email protected]. Our Terms and Conditions explain how the service is provided.