UK hosting
The SailHQ app and database run in the UK. This location is the same for every region. The host is SiteGround.
A UK host does not prove legal compliance. Each club must check the privacy rules for its members and data.
Security for New Zealand clubs
SailHQ Security
SailHQ uses UK hosting, encrypted traffic, hashed passwords, access controls and automatic backups to protect club data.
Last updated 20 August 2026
HTTPS
Encrypted in transit
UK hosted
Primary app and database
Local privacy
Privacy Act 2020
Backups
Regular and automatic
See how the platform protects data
Security starts with a small set of controls. Each one is easy to explain and check.
Encrypted traffic and hashed passwords
Production traffic uses HTTPS. Passwords are hashed. We do not store them as plain text. Secure sessions protect signed-in users.
Access based on club roles
Each club sets roles for admins, committees, race teams and members. Each role only sees the areas it needs.
Automatic backups
The host takes regular automatic backups. They can help recovery after faults, mistakes or data loss.
Privacy Act 2020
Build the Privacy Act into club admin
New Zealand clubs that hold personal information must follow the privacy principles and appoint a privacy officer. SailHQ supports that work without replacing it.
Follow the Privacy Act 2020
The Privacy Act applies to clubs and societies that hold personal information. A club must appoint a privacy officer and follow 13 privacy principles.
Read official privacy guidanceWhat the club still controls
- Which member details it collects and why.
- Who can view, change, export or delete records.
- How long it keeps data after membership ends.
- How it handles requests, complaints and breach notices.
Member privacy
Limit who sees each detail
Club roles control member records. Profile settings add another layer for contact details.
Phone visible to committee
Email visible to other members
Address visible to admins
Date of birth visible to members
Example settings. Club permissions still set the final access level.
Respond to incidents in a fixed order
Clear facts help the club make the right local report.
- 1 Identify the issue and stop further loss.
- 2 Check which systems, clubs and records are affected.
- 3 Tell affected clubs without undue delay.
- 4 Give each club the facts needed for its local reporting decision.
- 5 Fix the cause and record the work completed.
Local notification rule
A club must notify the Privacy Commissioner and affected people as soon as practicable when a breach has caused, or is likely to cause, serious harm.
Read Office of the Privacy Commissioner guidanceRead the policies
These documents explain how SailHQ handles data and service terms.
Checked country guidance
Make affiliation part of the club record.
Yachting New Zealand links racing rules, safety regulations, training and the annual member return.
Keep Yachting New Zealand affiliation current.
Yachting New Zealand represents affiliated yacht and boating clubs. A club must be affiliated if it wants to run racing under the Racing Rules of Sailing.
What the club record should hold.
Assign the annual member return and levy calculation to a named officer. Preserve the affiliation contact used when national support is requested.
Open the official sourceFollow the Privacy Act 2020.
The Privacy Act applies to clubs and societies that hold personal information. A club must appoint a privacy officer and follow 13 privacy principles.
What the club record should hold.
Record the privacy officer, purpose, access rule and serious-harm assessment route for club data.
Open the official sourceRecord child safeguarding work.
Yachting New Zealand supports club leaders with child safeguarding practices and training. Its coaching recognition pathway includes a Child Safeguarding module.
What the club record should hold.
Track the club policy, safeguarding contact, coach module status and route for reporting concerns.
Open the official sourceAsk a direct security question
Tell us which control, data flow or club process you need to check.