The short version

• Your account information and order history belong to you and your club. We don’t sell, lease, or share it with anyone.
• Every record is tagged with your club’s tenant ID and isolated at the database layer. Members from another club cannot see yours; staff from another club cannot reach yours.
• Your password is hashed with bcrypt before it ever touches the database. Even we cannot read it.
• Photos you upload are private to you and your club’s pro shop. They are never indexed or exposed by a public URL.
• Email communication with your pro shop is end-to-end inside Resend — not stored on a third-party marketing platform.
• You can request a full export or deletion of your data at any time by emailing your club’s pro shop.

My Crest Club is a multi-tenant platform: many clubs operate on the same backend infrastructure, but their data is segregated by a cryptographic club_id stamp. Every member document, every order, every wishlist entry, and every uploaded photo carries that stamp. Every server-side query enforces the stamp before it returns a single byte to the requester. A tenant breach would require a deliberate code-level bypass — not a misconfiguration.

Members who belong to multiple clubs have a separate active-session context per club. Switching clubs in the navigation reissues the tenant stamp; you never see your other club’s records while sessioned into one. Pro shop staff are tenant-bound by their credentials and cannot enumerate, read, or modify records outside their own club’s scope.

We collect only what your pro shop needs to fulfill your special orders: your name and contact details, your club affiliation, your sizing preferences, your style preferences, and the orders / wishlist items you submit. We never collect payment-card data; transactions are settled by your club at the counter or via your existing club account.

Third-party services

We use Resend for transactional email, MongoDB Atlas for encrypted data storage, and a CDN for static asset delivery. No analytics, advertising, or marketing-automation provider has access to your account data.

Your controls

• Update any profile field at any time from your member dashboard.
• Withdraw a wishlist item or a not-yet-submitted order yourself.
• Request a data export or a full account deletion from your club’s pro shop — we honor it within 14 days.
• Switch clubs without losing the data you’ve built up in either.