Privacy Policy

Last updated: See signature

This policy explains what personal data we process on the OURC website, and why.

What we collect

• Account and member profile details: name, email address, date of birth, college, degree, degree year, optional title/display name/middle name/phone number.
• Club activity records: shooting logs, scores, competition entries, equipment records, and notes submitted by members or Committee.
• Images and files: photos uploaded for shoots, equipment, committee profiles, and page content.
• Technical and security data: session state, request metadata, IP address, and user-agent information used for security and troubleshooting.

Cookies and local storage

• ourc_session (or secure-prefixed variant): keeps you signed in. It is HttpOnly, SameSite=Lax, and Secure when HTTPS is enforced. It lasts up to 4 weeks.
• ourc_gdpr_accepted: stores your cookie banner choice for 1 year.
• Browser local storage is used for non-essential UI preferences, such as collapsible section state.

Why we use this data

• To run login, member, and admin features.
• To operate Club administration workflows.
• To store and display club records and uploads.
• To protect the website and investigate faults or abuse.

Sharing

• We do not sell personal data.
• Login emails are sent through our email provider.
• Uploaded files are stored in our object storage provider.
• Data is shared with the Committee.

Retention

• Magic login links expire after 5 minutes.
• Session data is retained for up to 4 weeks.
• Cookie-consent data is retained for 1 year.
• Other club records are kept until updated or removed by the Committee.

Your choices

You can ask for access, correction, or deletion of your personal data by contacting the Club Secretary, or IT Officer.

Contact: secretary@ourc.org.uk, or see the committee page for the IT Officer.