Your Data is Protected With Us
Security is built into every layer of Row HQ. We use strong encryption, independently hosted infrastructure, and privacy practices aligned with the NZ Privacy Act 2020 and the Office of the Privacy Commissioner's guidance to keep your club's data safe.
256-bit SSL
Encryption
Cloud Hosted
Data Centres
Privacy Act 2020
Aligned
99.9%
Uptime
How We Protect Your Data
Security measures at every level of the platform
Strong Encryption
All data moves over TLS 1.3 and is stored with AES-256 encryption at rest - industry-standard cryptography that meets IPP 5 (storage security) of the Privacy Act 2020.
- TLS 1.3 for all connections
- AES-256 database encryption
- Encrypted backups
UK-Based Cloud Hosting
Data is stored on cloud servers in a London data centre under UK GDPR. IPP 12 of the Privacy Act 2020 permits cross-border transfers where the overseas recipient provides comparable privacy safeguards - the UK GDPR framework satisfies this requirement. Our hosting provider operates purely as a data processor and does not use your data for its own purposes, meaning no "disclosure" under IPP 12 occurs. NZ clubs whose rules require data to remain onshore should raise this with us before signing up - we do not currently operate a New Zealand data centre, but we can walk your committee through the cross-border safeguard documentation.
- Enterprise cloud data centre in London
- UK GDPR jurisdiction, IPP 12 cross-border safeguards documented
- Sub-processor list available on request
Granular Access Controls
Role-based access ensures every user sees only the information their role requires. Club administrators, coaches, and members each operate within defined permission boundaries - important for clubs managing sensitive crew and attendance records.
- Role-based permissions
- Secure password hashing
- Session management
Automatic Backups
Your club's data is backed up daily to a separate backup volume, with point-in-time recovery at the database layer. If a corrupted import or accidental deletion needs to be undone, restoring from yesterday's snapshot is straightforward.
- Daily automated backups
- 30-day backup retention
- Point-in-time recovery
Privacy Act 2020 Alignment
Row HQ is designed from the ground up to align with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles (IPPs). We provide all the tools you need to manage member data responsibly, including breach-notification procedures consistent with the OPC's guidance on notifiable privacy breaches.
-
Information Subject Rights
Members can access, export, and request correction or deletion of their personal information
-
Consent Management
Clear consent mechanisms for data collection and communication preferences
-
Data Minimisation
We only collect and store information necessary for your club's operations
-
Privacy by Design
Privacy controls built into every feature, not retrofitted after the fact
Member Privacy Controls
Members control their own privacy settings
Our Policies
Full details of how we handle your data
Questions About Security?
We're happy to discuss our security practices in more detail