Your Data is Protected With Us
Security is built into every layer of Row HQ. We use strong encryption, independently hosted infrastructure, and privacy practices aligned with PIPEDA and the Canadian Privacy Commissioner's guidance to keep your club's data safe.
256-bit SSL
Encryption
Cloud Hosted
Data Centres
PIPEDA
Aligned
99.9%
Uptime
How We Protect Your Data
Security measures at every level of the platform
Strong Encryption
All data moves over TLS 1.3 and is stored with AES-256 encryption at rest - industry-standard cryptography.
- TLS 1.3 for all connections
- AES-256 database encryption
- Encrypted backups
UK-Based Cloud Hosting
Data is stored on cloud servers in a London data centre under UK GDPR. PIPEDA permits cross-border transfer when the receiving jurisdiction provides comparable protection, and the UK GDPR framework is generally treated as such by the Office of the Privacy Commissioner. Canadian clubs whose constitution or provincial rules require data to remain within Canada should raise it before signup - we do not operate a Canada-region tenancy today, but we can walk your committee through the standard cross-border safeguards.
- Enterprise cloud data centre in London
- UK GDPR jurisdiction, PIPEDA cross-border safeguards documented
- Sub-processor list available on request
Granular Access Controls
Role-based access ensures every user sees only the data their role requires. Club admins, coaches, and members each operate within defined permission boundaries.
- Role-based permissions
- Secure password hashing
- Session management
Automatic Backups
Your club's data is backed up daily to a separate backup volume, with point-in-time recovery at the database layer. Restoring from yesterday's snapshot is straightforward if a corrupted import or accidental deletion ever needs to be undone.
- Daily automated backups
- 30-day backup retention
- Point-in-time recovery
Canadian Privacy Compliance
Row HQ is built to comply with PIPEDA and applicable provincial privacy legislation. We give your club the tools to handle member data responsibly - including breach notification procedures under Canada's Breach of Security Safeguards Regulations, which require reporting eligible breaches to the Office of the Privacy Commissioner of Canada.
-
Member Data Rights
Members can access, correct, export, and request deletion of their personal information under PIPEDA's access and correction principles
-
Meaningful Consent
Clear, purpose-specific consent mechanisms for data collection and processing - no bundled or buried consents
-
Data Minimisation
We collect only the information necessary to run club operations, consistent with PIPEDA's limiting-collection principle
-
Privacy by Design
Privacy safeguards are built into every feature from the start, not added after the fact
Member Privacy Controls
Members control their own privacy settings
Our Policies
Full details of how we handle your data
Questions About Security?
Send us your questions about security or PIPEDA compliance and we will answer them directly