The Lincoln Diocesan Guild of Church Bell Ringers

Membership Database from January 2022

This statement is to remind all members that membership of the Guild shall be going live from January 1st 2022 on membermojo.co.uk

Initially basic details will be entered for each member by the Membership Secretary. It will be the responsibility of all members to amend and update their records after this date. Notes and guidance on how to do this will be made available.

But to reassure all members that their data will be held securely please note the following excerpt from the membermojo website. Further details can be found on their website

Security of Your Membership Data

Security and Member Privacy at membermojo

Security and Privacy are considered at all stages of design and implementation. Some of the key points are listed here:

• GDPR requires us to validate and identify all third-party services that we may share your data with. (see Sub Processors within our Terms and Conditions).
• Your data is stored on servers in a modern, secure, purpose built data centre in the UK.
• All changes are mirrored across backup servers in realtime and hourly encrypted backups are sent to a second secure data centre, also in the UK.
• All hosting companies are ISO27001 certified.
• Online payments are transferred directly from the member to your PayPal or Stripe account. No account or card details touch our systems.
• Our mailing list sends email to each member individually. A member receiving email cannot see other member addresses.

Administrator access to your data is controlled by email and password from a verified browser. Selected members can be given read or write access to this data to avoid distributing or storing insecure copies.

Your member data belongs to you. We will never sell or trade any part of this with 3rd parties. Please read our Privacy Policy.

Technical Security

We regularly review site security to ensure our servers are up to date and that we continue to follow industry best practice.

• We use Cloudflare to provide best practice TLS encryption between your browser and our site.
• We use firewalls and two factor authentication where available to protect our servers and third-party services.
• Passwords are never sent by email. Modern methods mean we don't (and shouldn't) know what your password is.
• Passwords are one way encrypted using a modern multi-pass hash and unique salt before being stored.
• Password strength is measured using data from the Have I Been Pwned? service.

---

Jenny Bennett
Membership Secretary