Privacy Policy

1. Introduction

This Privacy Policy explains how Clubnizer ("we," "us," or "our") collects, uses, shares, and protects personal data when you use our platform for sports club management ("Service"). We are committed to protecting your privacy and handling your data responsibly. This policy applies to all users of Clubnizer, including Club administrators, members, and guardians.

2. Data Controller vs Data Processor Roles

Understanding who is responsible for your data depends on the context:

2.1 Club Data (Clubnizer as Data Processor)

For data processed within Clubs, the Club acts as the Data Controller. This means the Club (through its administrators) determines why and how member data is processed within their organization. Clubnizer acts as a Data Processor, processing Club data only on behalf of and under the instructions of the Club. We do not independently determine the purposes of processing Club member data.

2.2 Account Data (Clubnizer as Data Controller)

For data related to your Clubnizer account (such as your login credentials and account settings), Clubnizer acts as the Data Controller and processes such data to provide and maintain the Service.

3. Data We Collect

Note: Clubs are responsible for obtaining guardian consent before adding Youth Members. Clubnizer does not independently verify that such consent has been obtained.

4. How We Use Data

We use the data we collect to:

• Create and maintain your account
• Enable Club administration and member management
• Facilitate event scheduling and communications
• Process payments
• Analyze usage patterns to improve features
• Fix bugs and resolve technical issues
• Send notifications about events and Club activities
• Prevent unauthorized access and ensure security

5. Legal Basis for Processing

We process personal data based on: contract performance (to provide the Service), legitimate interests (security, fraud prevention, service improvement), controller-determined basis (for Club member data, the Club determines the applicable lawful basis), and legal obligations as required by applicable laws.

6. Youth Members and Guardian Consent

Youth Members (users under 16 years of age) must be associated with a Guardian in the system. Youth Members cannot create accounts directly. Clubs and their administrators are solely responsible for obtaining appropriate consent from Guardians before adding Youth Members, ensuring Guardians are informed about data processing, and maintaining accurate Guardian contact information.

Clubnizer does not independently verify that guardian consent has been obtained. We rely on Clubs to fulfill this responsibility. Guardians may exercise data subject rights on behalf of their Youth Members.

7. Data Sharing

Your data is shared with the Club(s) you belong to, as determined by Club administrators. Certain information (such as name, profile photo, email, and role) may be visible to other members within the same Club.

We share data with service providers who process data on our behalf, including Google Cloud / Firebase (infrastructure, authentication, database), Stripe (payment processing), and email delivery providers.

We do not sell your personal data to third parties.

8. International Data Transfers

Your data may be processed in countries other than your country of residence, including the United States and other countries where our service providers operate. When we transfer data internationally, we implement appropriate safeguards as required by applicable data protection laws. We cannot guarantee that data protection laws in all countries where data is processed will be equivalent to those in your jurisdiction.

9. Data Retention

We retain your data while your account remains active and as necessary to provide the Service.

Deleted Accounts & Removed Memberships

• Deleted accounts and removed memberships are subject to a 30-day recovery period before permanent deletion
• During the 30-day recovery period, reactivation may be possible
• After the recovery period, data is permanently deleted from active systems
• Backups may retain data for a limited period after deletion from the primary system

Data Export

Data export is available upon request. Clubs may request an export of their data, which will be provided in a structured, commonly used format. Requests must come from authorized club administrators. To request an export, contact us at support@clubnizer.com.

10. Your Rights

Under applicable data protection laws, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict how we process your data
• Request a copy of your data in a portable format

For Club data: Contact your Club administrator, who as Data Controller can assist with requests relating to Club membership data. For account data: Contact us at privacy@clubnizer.com. We aim to respond within 30 days.

11. Cookies and Tracking

We use essential cookies necessary for the Service to function, including authentication and session management, and security features. We may collect anonymized usage data to improve the Service. This does not include personal identifiers.

12. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include encryption of data in transit and at rest, access controls and authentication, and regular security reviews. However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, the "Last Updated" date will be revised. Material changes will be communicated via the Platform or email. Continued use of the Service after changes constitutes acceptance. We encourage you to review this policy periodically.

14. Contact Us

For questions about this Privacy Policy or our data practices: privacy@clubnizer.com (Privacy Inquiries) or support@clubnizer.com (General Support). We aim to respond to all inquiries within 30 days.

15. Additional Information for Specific Jurisdictions

If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws. California residents may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information as defined under CCPA.