The National Association of Physical Education and Sports Science ("NAPESS", "we") runs this website and its membership services. This policy explains what personal information the website collects, why, how long it is kept and what you can ask us to do with it.
Information you give us
If you apply for membership we ask for:
- your email address and a password, which is stored only as a salted cryptographic hash and never in a readable form;
- your prefix, name, designation and institution;
- your district and state;
- optionally, contact details for our records: mobile number, telephone number, postal address and postal code.
If you send us a message through the Contact page we receive your name, email address, subject and message. If you submit a photograph for your profile, we receive that image file.
Information we create about your membership
As an administrator reviews your membership we record your application and its outcome, any offline payment or fee waiver we have verified, and the start and end dates of an approved membership term. We also keep an internal record of consequential administrative actions so that decisions about membership can be accounted for. These records are visible to the Site Admin and to you, not to the public.
What is published publicly
The member directory publishes exactly seven details, and only for members whose email address is verified and whose membership term is current and not suspended:
- prefix, name, designation and institution;
- district and state;
- the profile photograph, if an administrator has approved one.
Your email address, telephone numbers, postal address, application, payment records and membership dates are never published. A photograph you submit stays private unless and until an administrator approves it.
Payments
This website does not take card payments and has no payment gateway. Fees are paid offline and an administrator records the payment reference and amount. We never receive or store your card or bank account details through this website.
Cookies and tracking
This website sets one cookie of its own, and only after you sign in, to keep you signed in. It uses no analytics or measurement cookies of its own and embeds no trackers of its own. See the Cookie policy for details.
Advertising
Some public pages of this website may carry advertisements served by Google AdSense. Where they do, advertising is not loaded until you have made a choice in the privacy message that appears on your first visit, which is provided by Google Privacy & Messaging. If you decline, or if the message cannot be shown, no advertising is requested at all. No advertising appears on the sign-in, account, application or verification pages, or on the legal pages.
If you consent, Google may use cookies and similar technologies to select and measure advertisements, including personalisation where you have allowed it. You can change or withdraw your choice at any time using the "Privacy and cookie settings" link in the footer of every page. Withdrawing consent stops advertising being requested from then on; it cannot recall information that Google received before you withdrew. Google describes how it uses information from sites that use its services at policies.google.com/technologies/partner-sites, and its advertising controls at adssettings.google.com.
Who else sees your information
We do not sell your personal information and we do not share it for marketing. It is handled by the Site Admin, by the service that hosts this website, and by the email service that delivers verification, password reset and notification messages to you. If you consent to advertising, Google receives the information described under Advertising above. Members recorded from the association’s earlier website were carried into the member register; no password from the earlier website was carried over.
How long we keep it
Messages sent through the Contact page are deleted one year after they are received. Membership records are kept for as long as you hold a membership and afterwards as part of the association’s historical record. You can ask us to remove information that we are not required to keep.
Keeping your account safe
Accounts require a password of at least twelve characters. Confirmation and password reset links can be used once and expire after twenty-four hours. Repeated failed sign-in attempts temporarily lock an account. Requests to the website are rate limited, and pages that carry member information are never cached by shared caches.
Your choices
You can sign in at any time to see and correct the profile details you gave us. To ask for a copy of your information, to have something corrected, or to ask us to delete information we are not obliged to keep, write to us through the Contact page and we will respond directly.
Changes to this policy
If this policy changes we will publish the new version on this page.
Status of this document
This document is published in draft while the association completes its review. It describes how this website currently works and is not legal advice. Please use the Contact page if anything here is unclear or looks wrong.