Surfing
Oceania.

Oceania Surfing Federation Inc. ("OSF") is the recognised continental governing body for competitive surfing across the Pacific and Oceania region, incorporated as an association in Queensland, Australia. We are committed to protecting the privacy of individuals who interact with our organisation, website, and member portal. This policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We collect personal information through the following channels:

• Member Portal accounts — name, email, password (hashed), federation, and role
• Athlete, coach & official registrations submitted by Member Federations — name, date of birth, nationality, contact details, role type, and (for under-18s) parental consent
• Email enquiries — name, email address, and message content
• Website technical data — IP address, browser type, and page navigation (for security and administration only)

We do not collect payment card information or government identification numbers without explicit consent and specific purpose.

Personal information is used to administer federation membership, manage athlete and official registrations, fulfil ISA reporting obligations, coordinate events and programs, respond to enquiries, and maintain the security of our systems. We do not use personal information for advertising or sell it to third parties.

We may disclose personal information to:

• International Surfing Association (ISA) — for competition qualification, anti-doping, and global reporting as required by our affiliation obligations
• Member Federations — administrators can access only their own nation's registered participants via the portal
• Supabase — our secure database host (US-based, AWS infrastructure) for member portal data
• Legal authorities — where required by law, court order, or to protect individual safety

All data is transmitted over encrypted HTTPS connections. Passwords are securely hashed and never stored in plain text. Access is role-restricted. Member portal accounts are retained for 7 years from last active use; athlete registrations for the duration of active registration plus 7 years; email correspondence for 3 years.

OSF does not collect personal information directly from persons under 18 without verifiable parental or guardian consent. Member Federations are responsible for obtaining consent via OSF's Athlete Registration Form (OPS-01) before submitting any under-18 participant data to the portal.

The OSF website uses only essential cookies (Supabase authentication session for logged-in portal users) and a functional Google Fonts delivery cookie. We do not use advertising, analytics, or tracking cookies.

You have the right to access, correct, or request deletion of your personal information. You may also object to certain processing or withdraw consent where processing is consent-based. To exercise your rights, contact our Privacy Officer below. Complaints may be lodged with the Office of the Australian Information Commissioner (OAIC).

This policy may be updated from time to time. Material changes will be notified to Member Federations by email and the version number and date will be updated above.

This is a proposed draft privacy policy for review and adoption by the OSF Executive Committee. It is recommended that this document be reviewed by a qualified legal practitioner before adoption to confirm compliance with all applicable privacy legislation relevant to OSF's operating jurisdictions.

Close