Privacy Policy — Wallasey Coastal Rowing Club

Who We Are

Wallasey Coastal Rowing Club ("the Club", "we", "us") is a community sports club based at Wallasey Beach, Merseyside. The Club's named Data Controller is Peter Johnson, contactable at [email protected].

This policy explains what personal data we collect via this website and our members portal, why we collect it, how it is stored, and what your rights are under the UK General Data Protection Regulation (UK GDPR).

Data We Collect on This Website

When you submit one of the forms on this website — Register Your Interest, Contact, or Sponsorship Enquiry — we collect the information you provide, which may include your name, email address, and message. This data is:

Sent to the club by email for the sole purpose of responding to your enquiry
Not stored in a database or shared with any third party
Used only to respond to your specific enquiry

This website uses essential security cookies only. We do not use tracking, advertising, or analytics cookies.

Data We Collect via the Members Portal

Members who register for the Wallasey CRC Members Portal provide additional personal information to enable safe participation in rowing sessions. This includes:

Name and email address — for account login and club communications
Phone number — for contact in connection with sessions
Emergency contact details — to contact a nominated person in an emergency on the water
Health and medical information — to ensure member safety during sessions (special category data, collected with explicit consent)
Session attendance records — for safety, insurance and legal purposes

Full details of how members portal data is handled are available in the Members Portal Privacy Policy.

Session Attendance Records

Important: Wallasey CRC retains session attendance records — comprising member names and session dates — for 5 years after membership ends. This is a legitimate safety and legal requirement for a water-based activity. All other personal data is deleted immediately upon removal from membership. This practice is documented in our privacy policy and disclosed to members at the point of consent.

How We Store Your Data

Member data is stored in a secure database hosted on UK-based servers. This website and the members portal are served over HTTPS. Passwords are stored as one-way cryptographic hashes and cannot be read by anyone.

We do not share personal data with third parties, advertisers, or external organisations. Your data is used solely for the purposes described in this policy.

Your Rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct any inaccurate data we hold
Erasure — request deletion of your personal data (subject to the session attendance retention policy above)
Withdraw consent — withdraw your consent to data processing at any time
Complain — lodge a complaint with the Information Commissioner's Office at ico.org.uk

To exercise any of these rights, contact the Data Controller: [email protected]

Policy Updates

This policy was last updated in April 2026. The Data Controller is Peter Johnson, Wallasey Coastal Rowing Club, Wallasey Beach, Merseyside. Contact: [email protected]