Privacy Policy

Who we are

The Disabled Sailors Association (DSA) is a registered charity (No. 1028993) based at Port Solent Marina, Portsmouth. We operate this website at disabledsailing.org.

For data protection purposes, DSA is the data controller. If you have any questions about this policy, please contact us at office@disabledsailing.org.

What personal data we collect

We collect personal data only when you actively provide it to us:

• Contact form — first name, last name, email address, phone number (optional), and your message.
• Newsletter sign-up — name (optional) and email address.

We do not use tracking cookies, advertising pixels, or analytics scripts that collect data without your knowledge.

Why we collect it (legal basis)

• Legitimate interests (Article 6(1)(f) UK GDPR) — to respond to your enquiry and provide information about our sailing programme.
• Consent (Article 6(1)(a) UK GDPR) — when you sign up for our newsletter you are giving us permission to send you DSA news and updates. You can withdraw that consent at any time.

How we store your data

Your personal data is stored in Salesforce, a cloud-based CRM system. Salesforce is certified to ISO 27001 and is a signatory to the UK–US Data Bridge framework. Data submitted via our website forms is transmitted over TLS (HTTPS) and is never stored on our web server.

We use a dedicated, minimal-permission API account to connect our website to Salesforce. Staff access to CRM records is role-based and reviewed regularly.

How long we keep your data

We retain contact records for as long as you have an active relationship with DSA, and for up to three years after your last interaction. Newsletter subscribers are retained until they unsubscribe or request deletion. You can request deletion at any time (see Your rights below).

Who we share data with

We do not sell or rent your personal data. We share it only with:

• Salesforce, Inc. — our CRM provider, as described above.
• Kualo Ltd — our web hosting provider, who processes server access logs. Kualo is UK-based and GDPR-compliant.

We will not share your data with any other third party unless required to do so by law.

Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request that we delete your data ("right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Data portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — unsubscribe from the newsletter at any time by emailing us or using the unsubscribe link in any email we send.

To exercise any of these rights, email office@disabledsailing.org. We will respond within one calendar month.

Complaints

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. Continued use of this website constitutes acceptance of the current policy.