Legal
Privacy Policy
Aloha Table Tennis Association · 1375 Dillingham Blvd. #204, Honolulu, HI 96817
Version 2026-08-25 · Effective August 25, 2026
1. Who This Covers
This policy explains how Aloha Table Tennis Association (“ATTA”, “we”), a 501(c)(3) nonprofit organization, handles information about members, drop-in players, guests, and visitors to this website.
It sits alongside our Terms of Service, which govern membership and use of the facility. We are a small community club, not an advertising business: we collect what we need to run the club, and nothing we collect is sold.
2. What We Collect
In your online account
- Your name and email address, given when you sign up.
- Sign-in details: your password or the social login you chose. These are held by Clerk, our accounts provider; ATTA never sees your password.
- Membership and billing records: your tier, subscription status, renewal dates, and payment history. We do not store your card number. Card details go directly to Stripe; we keep only a customer reference.
- Visit records: drop-in visits and passes you buy, their confirmation codes, and when they were checked in at the club.
- Your acceptance record: the date, time, and version of the Terms of Service you accepted, including the liability waiver they contain, and the same for any guest you accepted on behalf of.
- Your player profile: an optional skill level and any official ratings you choose to record (USATT or Spindex). Both are optional, and you can leave them blank or clear them at any time. See Section 4 for when these are shown publicly.
- Your preferences: whether you receive our newsletter, and whether you appear in the player directory.
At the front door
The front door is a Kwikset fingerprint lock. If you choose to be enrolled, a manager records your fingerprint on the lock itself, in person at the club. The fingerprint never reaches this website.The template is held on the lock and in the club's Kwikset account; all your ATTA account stores is a yes-or-no flag saying you have been enrolled, so the dashboard knows to stop asking. If you book an enrollment appointment, we also keep the time you chose until the appointment is done.
Enrollment is optional. Members who are not enrolled call the club to be let in, as described in our Terms of Service. Ask us and we will remove your fingerprint from the lock.
On our paper membership form
Our paper membership form also collects a phone number and an emergency contact name and number. These are not stored in your online account. They are kept by the club on paper, for safety, so that we can reach you about a visit and reach someone you trust if you are injured at the facility.
An emergency contact is someone else's name and phone number. Please make sure that person is comfortable being listed. We use their details only to reach them in an emergency involving you.
Guests you book for
If you book a drop-in visit for a guest, we record that you accepted our Terms on that guest's behalf, along with the date and version, and any name you give us for them so the club knows who to expect.
Automatically
Our website host keeps standard server logs of requests, and our accounts provider records sign-in activity and the devices used, to keep your account secure. We do not run advertising trackers or third-party analytics on this site.
3. How We Use It
- To give you access to the facility and to run your membership.
- To take payment and send receipts, renewal notices, and billing alerts.
- To confirm drop-in visits, to arrange access when you call ahead, and to set you up at the door if you choose to be enrolled.
- To contact you about your account, or about the club and its programs.
- To reach your emergency contact if you are injured at the facility.
- To keep records the club needs for accounting, insurance, and safety, including records of the waiver you accepted.
- To keep the facility and the website secure and to enforce our rules.
Club staff with administrator access can see member records in order to do these things. Administrator actions that change a member's record are logged.
4. Who Else Sees It
We do not sell your personal information, and we do not share it for advertising. We use the following service providers to run the club, and share with each only what it needs:
| Provider | What it does | What it receives |
|---|---|---|
| Clerk | Accounts and sign-in | Name, email address, password or social login, profile photo and username, session and device information |
| Stripe | Payments | Name, email, card details (handled entirely by Stripe), payment and subscription history |
| Supabase | Database hosting | Your membership record, purchases, visit and check-in history, player profile and ratings, and your acceptance of our Terms |
| Resend | Sending email | Name, email address, and whether a message was delivered, opened, or clicked |
| Vercel | Website hosting | Standard server request logs |
| Ring | Security cameras | Video (without audio) recorded inside the facility, stored on Ring’s cloud service |
| Kwikset | The front door lock | Your fingerprint template and your name, held on the lock and in the club’s Kwikset account |
Each provider has its own privacy policy and handles your information under its agreement with us.
The player directory
Our website has a player directory that anyone can read, including people who are not signed in and are not members. You are not in it unless you turn it on.The setting is in your account under Profile & Preferences, it is off for every member by default, and nobody at the club can switch it on for you.
We put the question to you once, on the screen you see just after creating your account. The box on that screen arrives ticked, and nothing is published unless you press save while it is. If you skip the question, or leave that screen without answering it, you are not listed.
If you turn it on, the public page shows your profile photo, your username, your skill level, and any ratings you have recorded, and nothing else. Your name is not published. The public roster calls you by your username, and shows your first name only if your account has no username. Signed-in members see the same list with your full name and with whether you are currently checked in at the club; visitors who are not signed in see neither. The photo and username are the ones on your account; if you have never uploaded a photo, your initials are shown in its place. Your email address, membership status, payment history and visit records are never published.
Turning the setting off removes you from the directory immediately. Because the page is public while it is on, we cannot undo copies made by search engines or by people who saw it while you were listed.
Everyone else
We may also disclose information where the law requires it, to respond to a legal claim, or where we believe it is necessary to protect the safety of members, staff, or the public. If a security incident ever affects your personal information, we will investigate and notify affected people as Hawaii law requires. If ATTA ever merges with or transfers its operations to another organization, member records may transfer with it.
5. Email & Tracking
We send two kinds of email. Service email (receipts, visit confirmations, billing notices) is part of your membership and cannot be unsubscribed from while your account is active. Newsletters and announcements are optional, and every one includes an unsubscribe link that works immediately.
Our email provider records whether a message was delivered, opened, or clicked, and whether it bounced or was reported as spam. We use this to tell whether important notices are reaching people and to stop emailing addresses that no longer work. You can stop the tracking on optional email by unsubscribing, or by turning off image loading in your email app.
6. Cameras & Photography
Security cameras operate inside the facility to monitor activity. Recordings are used for safety, security, and investigating incidents. The cameras record video only; they do not record audio. Camera coverage is a condition of entry and cannot be opted out of.
Our cameras are Ringdevices, and footage is stored on Ring's cloud service under a paid subscription rather than on equipment at the facility. That means recordings leave the building and are held by Ring, subject to Ring's own privacy policy and security practices. Footage is kept for 60 days and then deleted automatically, unless we save a clip for a specific incident. Club staff with access to the Ring account can view footage.
We also take photographs and videoat the facility and at events for ATTA's website, social media, and promotional material, as described in our Terms of Service. If you would prefer not to appear, contact us. We will make reasonable efforts to keep you out of new promotional media and will remove existing images on request.
8. How Long We Keep It
- Your account and membership record: for as long as you are a member, and afterwards for as long as we need it for accounting, tax, insurance, or legal reasons.
- Payment records: retained as required for tax and accounting.
- Your acceptance of our Terms, including the liability waiver they contain: retained for as long as it may be needed to establish what you agreed to.
- Your fingerprint: held on the door lock until you ask us to remove it, or until your membership ends and we clear it.
- Paper membership forms: retained for safety and record-keeping for as long as safety or legal reasons require.
- Security camera recordings: held by Ring for 60 days, then deleted automatically, unless we download and keep a clip for a specific incident.
9. Your Choices
- See or correct your information. Most of it is in your account. For anything else, contact us.
- Ask for a copy of what we hold about you.
- Ask us to delete your account. We will do so, except for records we must keep for legal, accounting, or safety reasons, including records of a liability waiver you accepted.
- Unsubscribe from newsletters at any time, from your account or from any newsletter we send.
- Choose whether to appear in the player directory. It is off unless you turn it on, and you can turn it back off at any time from your account. See Section 4.
- Ask to be left out of promotional photos and video.
- Ask us to remove your fingerprint from the door lock. You keep your membership; you call the club to be let in instead.
We will not treat you differently for exercising any of these choices. Contact us using the details in Section 12.
10. Children
Online accounts are for adults: you must be 18 or older to create one. Players under 18 are enrolled by a parent or legal guardian through the guardian's own account, and the information we hold about a minor is provided by the guardian and held under the guardian's account. We do not knowingly collect information online directly from children. If you believe a child has created their own account, contact us and we will remove it.
11. Changes
We may update this policy, for example if we change service providers. The current version and its effective date always appear at the top of this page. If we make a material change to how we handle your information, we will give notice by email to the address on your account or by notice on this site.
12. Contact Us
Questions about this policy, or want to make a request about your information?
Aloha Table Tennis Association
1375 Dillingham Blvd. #204, Honolulu, HI 96817
(808) 841-8844
contact@alohatabletennis.org
Version 2026-08-25 · Effective August 25, 2026.