Privacy & Data Policy

1. Information We Collect

To manage your club membership, facilitate administrative directories, and ensure your safety during events, we collect and store the following:

• Identity & Profile Data: Full name, date of birth, and mandatory physical address.
• Contact Data: Email address and mobile phone number.
• Safety & Medical Data: Emergency contact names/numbers, medical aid details, and CSA numbers.
• Financial Data: Secure payment tokens via PayFast or uploaded EFT proofs of payment.

2. How We Protect Your Data

All account passwords are cryptographically hashed using modern identity standards. We utilize SSL/TLS encryption for all data in transit. Furthermore, our system implements transient error resiliency and secure database instance management to ensure your records remain available and untampered.

3. Automated Data Retention & "The Purge"

In compliance with POPIA’s data minimization principle, CCL employs automated background services to manage data lifecycle:

• Unpaid Applications: Approved applications that remain unpaid for longer than 7 days are automatically revoked and deleted.
• Membership Expiry: Upon permanent membership expiration, your user profile, personal identifiers, and safety data are irreversibly hard-deleted from our systems to ensure your privacy.

4. Payment Processing

CCL does not directly store credit card numbers. Online payments are handled by our secure partner, PayFast. We only store encrypted tokens to manage your annual subscription renewals, which can be revoked via your Member Dashboard at any time.

5. Your Right to be Forgotten

You have the right to access, correct, or request the deletion of your data. Admins can generate directory reports in Excel format for club transparency, but only members with an "Active" status are included. If you leave the club, all personal records are wiped from our active database.