Trust Centre

Trust, Security & Privacy

This page is maintained by Crusaders Running Club to answer common questions about how our website handles your information. It is not an independent audit or certification — it describes the controls and practices currently in place on the site.

What data we collect

We collect information you submit through our forms:

  • Membership: name, contact details, ID/passport, ASA licence info, residential address, emergency contact, and shirt sizing.
  • Kit shop: name, contact details, and shirt selection.
  • Beer Mile entries: entrant details and, for junior races, the names and ages of dependents you enter.

We also collect anonymised website analytics (page visits, device type) when you opt in via the cookie banner.

How we use it

Your information is used to process membership applications, kit orders, and race entries, and to send confirmation emails to you and notifications to club admins. We do not sell your data and we do not share it with third parties except as needed to operate these services (see Subprocessors).

Email & unsubscribe

Operational emails (confirmations, admin notifications) include an unsubscribe link. Unsubscribe requests are honoured at /email/unsubscribe.

Storage & access

Submissions are stored in Lovable Cloud with row-level security enabled. Only authenticated club committee admins can view submission data through the admin area; the public website cannot read it.

Subprocessors

We rely on the following services to operate the website:

  • Lovable — website hosting and backend platform.
  • Google Analytics — anonymised website usage analytics (opt-in).
  • Cloudflare Turnstile — bot protection on forms.
  • Resend — transactional email delivery.
  • Elfsight — Instagram feed embed on the home page.

Cookies

We use strictly necessary cookies for site functionality, plus analytics cookies that are only set after you opt in via the cookie banner. You can change your choice at any time by clearing the banner preference in your browser.

Retention & deletion

Submission data is kept for club admin purposes. You can request deletion of your information at any time by emailing the address below — we will action it on request, subject to any record we are legally required to keep.

Security & privacy contact

For privacy requests, deletion requests, or to report a security concern with the website, contact crusadersrunning@gmail.com.

Shared responsibility

Our hosting platform (Lovable) provides platform-level controls such as HTTPS in transit, security headers, and row-level security for stored data. Crusaders Running Club is responsible for the content of this site, the questions we ask on our forms, and how committee admins handle member data once submitted.

For the formal PoPIA Privacy Policy and Terms & Conditions, see the links in the site footer.