Privacy

Draft website notice. The club must review and approve this notice and its retention/contact arrangements before launch.

Your information

DSA uses information you provide through enquiry and membership-interest forms to review and respond to your request. Form details are available only to authorised club staff.

Adult member accounts and private spaces

Portal accounts are invitation-only and are for adults aged 18 or over. Display names are visible to current teammates and conversation participants. The wider member directory is optional. Profile and cover photos are stored privately, with access based on the feature and your privacy choices.

Messages and attachments

Direct messages require the recipient’s acceptance. Team conversations are restricted to current members of the relevant season’s team. You can block a direct contact and report a message. Authorised moderators receive the reported message and its attachments, rather than general access to private conversations. Reported text evidence is retained for up to 90 days. Messaging is access-controlled; it is not described as end-to-end encrypted.

Payments and events

Stripe handles card details. DSA keeps member-linked payment references, amounts, fees where available, refunds and event registration records. Card numbers and CVC are not stored by this website. Finance and event records are visible only to the member concerned and appropriately authorised club staff.

Notification choices and the app

In-app notifications are private. Optional email, verified WhatsApp and browser alerts follow your settings and available provider connections. External alerts use a generic sign-in notice. You can withdraw optional channel consent. The installed app keeps public static resources for loading and a neutral offline page; private messages, payments and member pages are not cached for offline use.

Website analytics

Optional analytics is disabled until you agree. Reports record public page visits and selected interactions, without your form message, email address or authentication details. You can change your preference using Cookie preferences in the footer.

Third-party services

Supabase provides account, data and private file services. Cloudflare Turnstile protects public forms. When configured, Stripe processes payments, Resend delivers portal emails, Meta provides WhatsApp delivery, browser push providers carry encrypted notification payloads, and the club’s chosen file scanner checks document/video uploads. Photo albums, maps and match recordings may open third-party services with their own privacy terms.

Requests and retention

Contact feedback@dsasportsclub.ca with questions about your information. The club must set its retention periods, service-provider disclosures and rights process before collecting live submissions.