Federation review notice
Last updated
11 May 2026
Purpose and scope of this notice
This notice explains how platform data may be collected, used, stored, protected, and disclosed when public visitors, applicants, members, athletes, clubs, coaches, referees, officials, volunteers, stakeholders, and federation administrators use NMMAF digital services.
This is a federation-facing operational privacy notice for the current platform. Final legal wording, statutory references, and retention schedules should still be reviewed and formally approved by NMMAF leadership and legal advisers before public launch.
Who this notice applies to
It also applies to federation administrators and other authorised personnel who use the platform to review applications, manage events, process notifications, assess compliance records, verify documents, or carry out restricted operational duties on behalf of NMMAF.
Categories of information NMMAF may collect
Where a user applies for membership or event participation, the platform may also store role-specific details such as athlete data, club identity data, coach or referee information, promoter or stakeholder details, and records needed to confirm federation eligibility or operational status.
Certain workflows also generate internal references and operational records, including application reference codes, member codes, certificate records, directory slugs, notification events, audit logs, payment attempt records, webhook logs, and signed-download requests for protected files.
Restricted and sensitive information
NMMAF treats these categories as sensitive operational data. They are not intended for general public visibility and should only be accessed by authorised roles, through protected workflows, for legitimate federation safety, governance, or compliance purposes.
How NMMAF uses information
Information may also be used to review identity and eligibility, confirm role or organisation status, respond to contact requests, manage support issues, maintain accurate federation records, and operate public verification features that help third parties confirm whether a visible member or certificate record is genuine.
Restricted data may additionally be used to assess medical readiness, athlete eligibility, integrity concerns, suspension status, anti-doping issues, or safeguarding matters where NMMAF is required to make or support a federation decision.
Membership applications and member records
If an application is approved, NMMAF may create a permanent member record, generate a member code, issue an account setup invite, and link related operational records such as athlete, club, coach, referee, ranking, certificate, or eligibility records where appropriate.
Event registrations and payments
Where an event requires payment, the platform may store provider names, payment references, transaction identifiers, callback responses, webhook verification data, and admin reconciliation notes. NMMAF uses this information to confirm whether payment was successfully received, failed, waived, refunded, or still requires attention.
Payment providers should receive only the information required to process or verify a transaction. NMMAF should still maintain separate financial and accounting procedures where those are required outside the scope of this platform.
Public profiles, directories, and verification pages
Public profile visibility is not automatic for every field. NMMAF should use role-based public display settings and public-safe views so that only fields intended for public federation directories and verification pages are shown.
Public documents and verification pages are meant to support transparency and official confirmation, but they should not expose private contact details, medical records, integrity notes, private files, or internal admin comments.
Medical, eligibility, integrity, and anti-doping handling
Where public suspension summaries or public eligibility labels are shown, only limited public-safe information should be published. Detailed medical data, internal deliberations, safeguarding allegations, confidential evidence, and private notes should remain protected.
Who NMMAF may share information with
Information may also be shared internally with authorised federation officers, reviewers, event operations personnel, medical or integrity administrators, or designated decision-makers where access is necessary for legitimate federation duties.
If NMMAF is required to respond to a lawful request, regulatory process, safeguarding issue, disciplinary matter, or federation governance requirement, information may also need to be reviewed or disclosed in line with that obligation. Final disclosure policy should be confirmed by NMMAF and legal advisers.
Storage, security, and access control
NMMAF should still maintain internal operational controls for role assignment, account removal, password management, provider setup, backup planning, incident response, and review of who can access restricted workflows. No platform can promise absolute security, and operational discipline remains important.
Cookies, sessions, and technical data
Server logs, audit logs, rate-limit records, failed notification logs, and webhook processing records may also be generated to help detect misuse, support troubleshooting, and protect federation operations from abuse or unauthorised access.
Retention and operational record keeping
Some information may remain in federation records even after a public profile changes or a member stops using the platform, where retention is necessary to preserve historical record integrity, disciplinary history, verification history, or event administration records.
Your choices, corrections, and contact route
Questions about privacy, correction requests, public profile visibility, or federation data handling should be directed to NMMAF through the Secretary-General or the official privacy contact details published on this platform.
This notice is intended to explain current platform handling in practical terms. It should not be treated as a substitute for final legal review or for any separate federation policy that NMMAF may publish later.