1) Where can I find a copy of your Data Protection Policy?
When logged in to ClubSpark, when you scroll to the bottom of the page a copy of our Terms & Conditions and our Privacy Policy.
You can also contact support@clubspark.com who will be able to provide you with the correct copy for your Governing Body.
2) Does ClubSpark hold an ISO27001 Accreditation? or any other Data Protection Certificates?
We do not have ISO27001 Accreditation but our hosting partner, Microsoft Azure, does (see below).
We are registered as a data controller with the Information Commissioner's Office (ICO). Our latest registration certificate is available upon request at support@clubspark.com
3) Where are your IT services/data bases hosted and who has access to them?
Our infrastructure is hosted in Microsoft Azure. It runs in geographically dispersed data-centres that comply with key industry standards, including ISO/IEC 27001:2005. They are managed, monitored, and administered by Microsoft operations staff.
More information on Windows Azure security can be found here - https://azure.microsoft.com/en-gb/support/trust-center/
4) Do you keep my financial information?
We don't store financial information as this is held by our payment gateway provider Stripe (stripe.com).
We encrypt passwords, and the website is only accessible via SSL (secure sockets layer).
5) What information or data is held?
In terms of personal information, from user registration we store: name, gender, date of birth, address, email address, postcode.
The venue or user can add the following information in the user's venue profile: address, work number, phone number, emergency phone number.
Additionally, the venue can also add the following information in the user's venue profile: occupation, medical information.
6) Where is it held?
It is held in the Microsoft Azure West Europe data-centre.
7) In what form is it held?
It is stored in a modern relational database. Clearly, we would not want to go into too much detail in this area as it would represent a security risk in itself but if you have specific questions we may be able to answer them at support@clubspark.com
8) Do you pass on any personal data to any 3rd parties to perform the above? And if so is there a way to opt-out as I'm sure there will be members in the club that do not want to be contacted by 3rd parties selling their products
We do not pass on any personal data to any 3rd parties. However, please contact your Governing Body to confirm with them about passing personal data to 3rd parties.
If you would like any further information on ClubSpark's data protection and privacy policy, please feel free to contact our support team at support@clubspark.com where a member of the team will be able to assist you further.
You can also contact your Governing Body, who will also be able to provide you with further information.