Privacy & data handling
- Injury reports are treated as protected health information (PHI), even where not legally required.
- The narrative is encrypted in the database. All traffic uses HTTPS.
- Anonymous reports store no account, email, IP address or exact time of submission.
- Reports by registered users are visible only to that user and to authorised SCA staff, and every staff access is recorded in an audit log.
- We never collect the injured person's name. Please don't write names, phone numbers or SCA membership numbers in the narrative.
- Statistics are computed on combined incidents and are exported without narratives or reporter details.