Privacy
This is about The Crest itself — the account you use to run your club's website.
What happens to the personal data on your club's site is a separate question, because there the club is in charge and The Crest only acts on its instructions. That is set out in the data processing agreement, and each club publishes its own privacy notice on its own site.
The controller for everything on this page is Imperial Resources Limited, of 25 The Willows, Castlemagner, Mallow, Co. Cork. Write to privacy@thecrest.ie.
What is held about you
Your account. Your name, your email address, a hashed password, your role at the club, and — if you have set up two-factor authentication — the secret that makes it work. Held so you can sign in, and because a club's admin has to know who did what.
Lawful basis: performance of a contract.
Your club's subscription. The club's name, billing address, and the payment records. Card details are handled by Stripe and never reach The Crest.
Lawful basis: contract, and a legal obligation to keep tax records.
What you did in the admin. An audit log of administrative actions — who changed a price, who deleted a booking, who accessed what. Kept for twelve months.
Lawful basis: legitimate interests — a shared admin area is not safe without a record of who did what in it.
Support. If you email or we help you with something, the correspondence.
Lawful basis: legitimate interests in supporting our own customers.
Support access to your admin area
The Crest staff can, where it is needed to fix something, enter a club's admin area as if they were a member of the committee.
Every occasion on which that happens is logged, permanently, and the club can see the log. It is not done casually and it is never done to browse.
Who else sees it
The sub-processors — hosting, email, payments — and nobody else. Nothing is sold, and no data is used to train anything.
How long
- Account — until you leave the club or the club leaves The Crest, then thirty days.
- Audit log — twelve months.
- Billing records — as long as tax law requires.
- Support correspondence — two years.
Your rights
Access, correction, erasure, restriction, objection and portability, as under the GDPR. Ask at privacy@thecrest.ie; you will get an answer within a month and it costs nothing.
You can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — dataprotection.ie.
Cookies
This site sets a session cookie and a security token, and nothing else. There is more on the cookies page.
Version v1.