Privacy Policy

Last Updated: June 2026

We collect personal information from you, including information about your:

  • Name
  • Email address
  • Location (City and Country)
  • Optionally Anthropometrics: Height, Span and Reach.
  • Activity data you contribute, such as climbs, comments, or logs.

Why we collect it

We collect this personal information in order to:
  • Verify that user accounts are authentic.
  • Provide the core interactive functionality of this website (e.g., keeping track of your ascent history and community contributions).

Public vs. Private Information

To support our climbing community database, some information you provide is made visible to other visitors of the website, while other details remain strictly private.
  • What the other users can see: When you log a climb, add a comment, or contribute content, your public display name (username) and the details of that activity (such as the route name, date of ascent, and any comments) will be visible to other registered users. None of this is visible to non-authenticated users.
  • What remains strictly private: Your email address, account password, and account settings are completely hidden from public view and other users. This information is accessible only to authorised site administrators for system management and support purposes.

How we store and protect your data

We take data security seriously and follow industry best practices to safeguard your account details. This website runs on Drupal, which ensures that all user passwords are automatically protected using secure, one-way cryptographic hashing alongside unique individual salts. This means your raw password is never stored on our servers and cannot be read or reversed by anyone, including site administrators.
  • Secure Payments via Stripe: All financial transactions are securely handled directly by Stripe, our integrated, PCI-compliant third-party payment gateway. We do not collect, process, or store your credit card or bank details on our servers. Stripe protects your financial data using industry-leading encryption.
  • All associated data profiles and climb log entries are securely maintained within our isolated database architecture to prevent unauthorised access or disclosure. We will never sell, lease, or distribute your email address or personal history to third-party marketing entities.

Who we share your data with

We do not share your data with third parties.

Cookies and Tracking

This website uses essential cookies to manage your login sessions and remember your preferences. No invasive cross-site marketing trackers are utilised.

Your Rights under the New Zealand Privacy Act 2020

You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected or permanently deleted if you believe it is wrong. From your profile page you can download your own logs as a CSV.
If you would like to request a copy of your information, have it updated, or request that your account and associated logs be completely removed from our system, please contact us at admin@castlehillbasin.co.nz.