UK hosting
The SailHQ app and database run in the UK. This location is the same for every region. The host is SiteGround.
A UK host does not prove legal compliance. Each club must check the privacy rules for its members and data.
Security for Australian clubs
SailHQ Security
SailHQ uses UK hosting, encrypted traffic, hashed passwords, access controls and automatic backups to protect club data.
Last updated 20 August 2026
HTTPS
Encrypted in transit
UK hosted
Primary app and database
Local privacy
Privacy Act 1988 coverage
Backups
Regular and automatic
See how the platform protects data
Security starts with a small set of controls. Each one is easy to explain and check.
Encrypted traffic and hashed passwords
Production traffic uses HTTPS. Passwords are hashed. We do not store them as plain text. Secure sessions protect signed-in users.
Access based on club roles
Each club sets roles for admins, committees, race teams and members. Each role only sees the areas it needs.
Automatic backups
The host takes regular automatic backups. They can help recovery after faults, mistakes or data loss.
Privacy Act 1988 coverage
Check whether the Privacy Act covers your club
Privacy Act coverage depends on factors such as turnover and health information. Your club must confirm its position and follow the Notifiable Data Breaches scheme when it applies.
Check Privacy Act coverage
The Privacy Act 1988 covers clubs above the turnover threshold. Smaller clubs can also be covered when they provide health services or hold health information.
Read official privacy guidanceWhat the club still controls
- Which member details it collects and why.
- Who can view, change, export or delete records.
- How long it keeps data after membership ends.
- How it handles requests, complaints and breach notices.
Member privacy
Limit who sees each detail
Club roles control member records. Profile settings add another layer for contact details.
Phone visible to committee
Email visible to other members
Address visible to admins
Date of birth visible to members
Example settings. Club permissions still set the final access level.
Respond to incidents in a fixed order
Clear facts help the club make the right local report.
- 1 Identify the issue and stop further loss.
- 2 Check which systems, clubs and records are affected.
- 3 Tell affected clubs without undue delay.
- 4 Give each club the facts needed for its local reporting decision.
- 5 Fix the cause and record the work completed.
Local notification rule
A covered club must notify the OAIC and affected people when an eligible breach is likely to cause serious harm and remedial action has not removed that risk.
Read Office of the Australian Information Commissioner guidanceRead the policies
These documents explain how SailHQ handles data and service terms.
Checked country guidance
Join national sailing rules to local checks.
Australian prescriptions and Special Regulations sit beside integrity policies and state screening requirements.
Link the club to Australian Sailing.
Australian Sailing leads the sport nationwide. Affiliated clubs can use its club support, training and technical services.
What the club record should hold.
Put the annual affiliation return against its committee portfolio. Name the state association liaison and current affiliation status.
Open the official sourceCheck Privacy Act coverage.
The Privacy Act 1988 covers clubs above the turnover threshold. Smaller clubs can also be covered when they provide health services or hold health information.
What the club record should hold.
Record the coverage decision, privacy contact, data location and response plan for eligible breaches.
Open the official sourceApply the national integrity policies.
Australian Sailing publishes a Safeguarding Children and Young People Policy. Clubs must also check the screening rules in their state or territory.
What the club record should hold.
Separate the Working With Children screening evidence from the national integrity-policy acknowledgement. Give both an owner and review date.
Open the official sourceAsk a direct security question
Tell us which control, data flow or club process you need to check.