UK hosting
The SailHQ app and database run in the UK. This location is the same for every region. The host is SiteGround.
A UK host does not prove legal compliance. Each club must check the privacy rules for its members and data.
Security for Irish clubs
SailHQ Security
SailHQ uses UK hosting, encrypted traffic, hashed passwords, access controls and automatic backups to protect club data.
Last updated 20 August 2026
HTTPS
Encrypted in transit
UK hosted
Primary app and database
Local privacy
EU GDPR and Irish data protection law
Backups
Regular and automatic
See how the platform protects data
Security starts with a small set of controls. Each one is easy to explain and check.
Encrypted traffic and hashed passwords
Production traffic uses HTTPS. Passwords are hashed. We do not store them as plain text. Secure sessions protect signed-in users.
Access based on club roles
Each club sets roles for admins, committees, race teams and members. Each role only sees the areas it needs.
Automatic backups
The host takes regular automatic backups. They can help recovery after faults, mistakes or data loss.
EU GDPR and Irish data protection law
Use SailHQ within your Irish GDPR process
Your club remains responsible for how member data is used. SailHQ provides privacy controls and records, but it does not replace the club's GDPR duties.
Meet GDPR duties in Ireland
Irish clubs are data controllers under GDPR when they decide how member data is used. The Data Protection Commission expects policies, rights procedures and secure devices.
Read official privacy guidanceWhat the club still controls
- Which member details it collects and why.
- Who can view, change, export or delete records.
- How long it keeps data after membership ends.
- How it handles requests, complaints and breach notices.
Member privacy
Limit who sees each detail
Club roles control member records. Profile settings add another layer for contact details.
Phone visible to committee
Email visible to other members
Address visible to admins
Date of birth visible to members
Example settings. Club permissions still set the final access level.
Respond to incidents in a fixed order
Clear facts help the club make the right local report.
- 1 Identify the issue and stop further loss.
- 2 Check which systems, clubs and records are affected.
- 3 Tell affected clubs without undue delay.
- 4 Give each club the facts needed for its local reporting decision.
- 5 Fix the cause and record the work completed.
Local notification rule
A club must notify the Data Protection Commission within 72 hours of becoming aware of a reportable personal data breach.
Read Data Protection Commission guidanceRead the policies
These documents explain how SailHQ handles data and service terms.
Checked country guidance
Keep Irish Sailing records ready for review.
Affiliation connects club governance, national prescriptions, recognised training and safeguarding support.
Keep Irish Sailing affiliation clear.
Irish Sailing is the national body and World Sailing authority. It helps member clubs with rules, training, safeguarding and governance.
What the club record should hold.
Record affiliation status, the club or training-centre relationship and the committee owner for national returns.
Open the official sourceMeet GDPR duties in Ireland.
Irish clubs are data controllers under GDPR when they decide how member data is used. The Data Protection Commission expects policies, rights procedures and secure devices.
What the club record should hold.
Record the lawful basis, retention rule, access owner and Data Protection Commission reporting contact.
Open the official sourceMeet Irish safeguarding duties.
Irish Sailing guidance follows Children First and Sport Ireland requirements. Clubs need a risk assessment, a Child Safeguarding Statement and working procedures.
What the club record should hold.
Track the safeguarding statement, risk review, children's officer, Garda vetting and required training.
Open the official sourceAsk a direct security question
Tell us which control, data flow or club process you need to check.