Privacy

High Club is operated by HighClub Investments, Boulder, Colorado, USA, which is the party responsible for the personal data described on this page.

To ask about your data, contact HighClub Investments through the channel you normally use to reach the club.

When you request access: full name, delivery address, WhatsApp number, e-mail address, who referred you and any notes you write.

When you place an order: the items, quantities and delivery notes, along with the address and WhatsApp number on your account.

Automatically: date, time, IP address and browser for every sign-in, application, approval and order, plus a count of visits to the home page.

All data is stored in a private Google spreadsheet, reachable only by club administrators and by the application through a service account.

Product photos uploaded by an administrator are stored in Vercel file storage.

Passwords are never stored in plain text: they are kept as a bcrypt hash and cannot be recovered, only reset.

Your session lives in a signed httpOnly cookie that expires after 12 hours. Your language preference is kept in a separate cookie.

Access is re-checked against the sheet on every visit: if an administrator withdraws access, the session stops working immediately.

We do not process online payments or store card details — the site has no payment gateway.

We do not sell or share your data with third parties for advertising.

We use no advertising cookies and no third-party trackers.

All metadata, including GPS location, is stripped from administrator-uploaded photos before they are stored.

Google (spreadsheet), Vercel (hosting and image storage) and our e-mail provider, used solely to send you transactional messages such as your membership approval or an order confirmation.

You can request access to, correction of, or deletion of your data by contacting the club. Deleting your membership removes your record and your access to the site.