Privacy Policy
Placeholder
Replace this page with your own privacy policy before collecting real sign-ups. When you change it, bump its version in src/lib/consent.ts so new consent records reference the new text.
It should cover:
- Who the data controller is (each choir, and you as the platform provider) and how to contact them
- What personal data is collected: name, email, phone, voice section, emergency contact's name and phone, attendance records, consent records (online or from signed paper forms)
- Why it's processed and the lawful basis for each purpose (e.g. contract, consent)
- Who it's shared with, including processors such as Supabase and your hosting provider
- Any transfers outside the EEA/UK and the safeguards used
- How long each kind of data is kept
- Members' rights: access, rectification, erasure, restriction, portability, objection, and withdrawing consent
- The right to complain to a supervisory authority