How we look after your details

Who we are

The Birkenhead RSA

This website is run by the Birkenhead RSA, a community club at Recreation Drive, Birkenhead, Auckland, New Zealand. We handle personal information in line with the Privacy Act 2020. If anything on this page is unclear, ask the club manager: the contact details are at the bottom.

What we collect, and why

• Contact form. Your name, email address and message, so we can reply to you.
• Newsletter. Your email address, so we can send you club news. Every newsletter has an unsubscribe link, or you can email us to be removed.
• Online payments. Membership fees and donations paid through this site are taken by Stripe, on Stripe's own secure payment pages. Your card details go to Stripe and never reach the club or this website. Stripe tells us who paid, the email address used, the membership category or fund chosen, and the amount, so we can record the payment and set up or renew your membership.
• Membership applications. The details on the application form, such as your name, contact details, date of birth and, for Returned and Service members, your service history. We need these to confirm eligibility under RSA rules and to keep the member register the club must hold.
• Technical information. Like every website, ours records standard server logs: the address your device connects from, the browser it uses and the pages requested. We use these only to keep the site running and secure. This site does not use advertising or analytics cookies.

Who handles it for us

We use a small number of specialist providers to run the site. They handle your information only on our instructions:

• Stripe processes online payments.
• HubSpot stores contact form messages, newsletter sign-ups and the payment confirmations described above.
• Cloudflare hosts the website and protects it from automated abuse.

These providers store information on servers outside New Zealand, mainly in the United States. We choose providers with strong privacy and security commitments and take reasonable steps to make sure your information is protected to a standard comparable to New Zealand law. We do not sell personal information, and we do not share it with anyone else for their marketing. We will disclose information where the law requires it.

How long we keep it

We keep contact messages and newsletter details only while they are useful, and remove them when you ask. Membership and payment records are kept for as long as you are a member and then for the period the law requires, which is seven years for financial records.

Keeping it safe

The site is served over an encrypted connection, payments happen on Stripe's hosted pages rather than ours, and only the staff and officers who need your information to do their job can see it.

Your rights

You can ask to see the personal information we hold about you and ask us to correct it. Contact the club manager and we will respond within 20 working days, as the Privacy Act requires. If you are not happy with how we have handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this statement

If we change how we handle personal information, we will update this page and the date at the top.