A privacy fix: club officers' mobile numbers were being published openly

What the problem was

Come & Try shows the public each club's session times and who to contact. Behind the scenes, the system that builds that public list had also been including each coordinator's mobile number, pulled in from an internal membership record rather than anything a coordinator had agreed to publish. Because the page was open to anyone and not password-protected, that meant 38 personal mobile numbers were sitting in plain, unauthenticated view.

What was built

A routine check of the Come & Try data during a data-quality pass caught the numbers appearing where they shouldn't. The fix was straightforward once found:

• The part of the system that publishes club contact details was changed to publish a coordinator's name only, with no phone number fallback.
• The change was checked against the one place that reads this data to confirm nothing on the site had ever actually displayed the number. It hadn't, so nothing needed to be rebuilt, just stopped from being published.
• Every one of the 38 numbers was confirmed removed from the public feed, while all 38 coordinator names stayed visible, and the internal system clubs use to text prospects was checked to make sure it still worked exactly as before.

What it means for you

If you're one of the coordinators whose number was affected, it's no longer visible to the public. Your name still is, which is what people need to know who to ask for. This is also a small example of the kind of check that runs in the background: data feeding a public page gets reviewed for what it's actually exposing, not just whether it displays correctly.

Where it stands

Fixed and verified on 30 July 2026. The public Come & Try contact list has shown zero phone numbers since that date.