As the club website provides users the ability to create an account the club needs to agree a data protection policy that states how we will use the information provided.
I propose finding and tailoring a statement that amounts to the following:
The club will only use your data for the purposes of orienteering.
The club will not share your data with anybody unless we are legally required to.
The club will take all reasonable precautions to keep your data safe.
The club will delete your data if you request us to.
Feel free to propose alternatives to the above and if you have a template or a good example data protection policy please pase a copy or a link in this thread.