Member Privacy Notice
Effective September 28, 2026 · Version 2026-09-launch-v2
What D&A collects
For membership D&A collects the minimum information needed to operate the account: email address, display name, password credential in hashed form, membership tier and status, age band, consent records, Watch preferences, entitlement records, and payment-provider identifiers for paid memberships. For 16–17-year-old members, D&A also records guardian name, guardian email, verification status, consent version and the minimum audit information needed to demonstrate the co-consent process. For a Constellation enquiry, D&A collects organization and requester details, requested seats, intended use and procurement information; participant names are not requested at the enquiry stage.
Why it is used
The information is used to create and secure accounts, provide membership access, remember member preferences, process and reconcile paid membership, manage guardian co-consent, communicate essential service information, prevent abuse, maintain audit records and meet legal obligations.
Payments and service providers
D&A does not store full payment-card numbers. Paid checkout is handled by D&A’s payment provider. D&A may use service providers for hosting, security and transactional email. Those providers receive only information reasonably required to provide their service and are subject to contractual or legal safeguards appropriate to the service.
Marketing and Watch notices
Creating an account does not enroll a member in promotional marketing. Optional Watch State notices are a separate member preference and can be paused or disabled. Any commercial electronic messaging program will use the consent and unsubscribe controls required by applicable law.
Retention
Account and transaction records are retained only as long as reasonably necessary for membership administration, security, legal, tax, audit and dispute-resolution purposes. Password-reset tokens expire quickly and are not retained as reusable credentials.
Choices and access
Members can update permitted profile information and Watch preferences through their account. They may request access to or correction of their personal information, withdraw optional consent, or ask about deletion subject to legal, security, contractual and record-retention requirements. Email admin@deciphernews.ca.
Youth privacy
D&A does not offer member accounts to children under 16. For members aged 16–17, D&A keeps the account pending until a guardian completes the required co-consent through the verification process. The verification link is single-use and expires after 72 hours. Entering a guardian name or email address does not itself provide guardian consent. D&A does not require identity documents merely to establish the declared age band. Any stronger age-assurance measure must be necessary and proportionate to the identified risk.
Security and incidents
D&A uses administrative and technical safeguards appropriate to the sensitivity of account information. No system is risk-free. Suspected unauthorized access should be reported promptly to admin@deciphernews.ca.
Changes
If D&A makes a significant change to how member information is collected, used or disclosed, it will update this notice and obtain new consent where required.