Privacy Policy

Last updated: [go-live date — set at publication]

Welcome to Volleyball Mississauga!

Volleyball Mississauga (“Volleyball Mississauga”, “We”, “Us”, or “Our”) operates this website and organises the volleyball leagues offered through it. This Privacy Policy describes how your personal information is collected, used, stored, and protected when you use our website and register for our volleyball leagues (collectively, the “Service”).

By using the Service, you (“User”, “You”, “Player”) acknowledge that you have read, understood, and agree to this Privacy Policy and our Terms & Conditions. Your use of the Service constitutes acceptance of these practices.

We reserve the right to modify this Privacy Policy at any time. Changes become effective upon posting, with the updated date shown above. Continued use of the Service after changes constitutes acceptance of the revised policy.

1. Company Information

Volleyball Mississauga

Support email:admin@volleyballmississauga.com
Phone: (647) 493-5035
Address: Applewood, 945 Bloor St, Mississauga, ON
Website:volleyballmississauga.com
Jurisdiction: Governed by the laws of Ontario, Canada

2. Information We Collect

Personal information you provide

When you register and use the Service, you may provide:

Account information: full name, email address, phone number, date of birth, password
Profile information: profile photo, skill level, preferred positions, playing experience
Location data: current location (when you enable location services) to find nearby games
Payment information: credit card details and billing address (processed securely through third-party payment processors)
Communication data: messages sent through the in-app messaging system, support requests
Game participation: games joined, leagues enrolled in, attendance history, ratings and reviews

Information collected automatically

Device information: device type, operating system, unique device identifiers, mobile network information
Usage data: app and site interactions, features used, time spent, crash logs, performance data
Location data: GPS coordinates and Wi-Fi network information (when location services are enabled)
Log data: IP address, browser type, access times, pages viewed

Information from third parties

Social media: if you connect social accounts (Facebook, Google, Apple), we receive the profile information you authorize
Game organizers: information shared by independent organizers when you join their games
Payment processors: transaction confirmations and payment status updates

3. How We Use Your Information

Service provision (contract performance)

Create and manage your player account
Connect you with volleyball games and leagues in your area
Process game bookings and league registrations
Facilitate secure payments and refunds
Provide real-time game updates and notifications
Enable in-app messaging between players and organizers

Communication (contract performance & legitimate interest)

Send transactional notifications about bookings, cancellations, and game updates
Provide customer support and respond to inquiries
Send important service announcements and security alerts
Share promotional content about new features and games (with consent)

Service improvement (legitimate interest)

Analyze usage patterns to enhance functionality
Develop new features and expand to additional programs
Ensure platform security and prevent fraud
Conduct research and analytics to improve user experience

Legal compliance

Comply with applicable laws and regulations
Respond to legal requests and prevent illegal activities
Protect the rights, property, and safety of Volleyball Mississauga, our users, and others

4. How We Share Your Information

We do not sell your personal information. We may share your information in these situations:

With game organizers

When you join a game, we share necessary information (name, contact details, skill level) with the organizer to facilitate coordination. Independent organizers must use this information solely for game organization.

With other players

Your profile information (name, photo, skill level) may be visible to other players in games and leagues you join. You control what appears in your public profile.

With service providers

Payment processing: Stripe and other secure providers
Cloud storage: AWS, Google Cloud for hosting and backup
Analytics: Google Analytics, Firebase for usage analysis
Communication: email and SMS providers for notifications
Customer support: help-desk platforms for ticketing

For legal reasons

We may disclose information when required by law, court order, or government request, or to protect the rights and safety of Volleyball Mississauga, our users, or the public.

Business transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity with prior notice to users.

5. SMS and Email Communications

Transactional messages

When you book games or join leagues, you’ll receive important SMS and email notifications about game confirmations and reminders, cancellations and schedule changes, league updates and standings, and payment confirmations and receipts. These transactional messages are essential for service delivery and cannot be opted out of while using the Service.

Marketing communications

With your consent, we may send promotional emails about new games and leagues in your area, special offers and discounts, new features, and community events and tournaments.

Opt-out options:

SMS: reply “STOP” to any message
Email: click “Unsubscribe” in the email footer
Push notifications: disable in your device settings or app preferences

Message and data rates may apply. Message frequency varies.

6. Data Retention

We retain your personal information for as long as necessary to:

Maintain your active account and provide services
Meet legal requirements and resolve disputes
Prevent fraud and ensure platform security

Specific retention periods:

Account data: until you delete your account or request deletion
Game history: 7 years for tax and legal compliance
Communication records: 3 years for support and legal purposes
Usage analytics: aggregated data may be retained indefinitely
Location data: deleted after 30 days unless needed for active bookings

When you delete your account, we will remove or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

Access and portability: request a copy of the personal information we hold and download it in a portable format
Correction and updates: update incorrect or incomplete information, or request correction of inaccurate data
Deletion (“right to be forgotten”): delete your account and associated personal information
Restriction and objection: limit how we process your information, object to processing based on legitimate interests, or withdraw consent for marketing
Data portability: transfer your data to another service provider

To exercise these rights, use your account settings for basic updates and deletions, or contactadmin@volleyballmississauga.com for complex requests. Response time: 30 days for most requests.

8. Children’s Privacy

The Service is designed for users 13 years and older. We do not knowingly collect personal information from children under 13. Users between 13–17 should have parental consent before using the Service. If we discover we have collected information from a child under 13, we will delete it immediately. Parents who believe their child has provided information to us should contactadmin@volleyballmississauga.com.

9. Location Data

Location services help you find nearby games. We collect location data when you search for games in your area, check in at game venues, or enable location-based notifications. We use it to match you with nearby games and facilities, provide directions to venues, send location-relevant recommendations, and improve our venue database.

Your controls: enable or disable location services in your device settings and control location sharing in the app’s privacy settings. Disabling location may limit core functionality.

10. Data Security

We implement industry-standard security measures to protect your information:

SSL/TLS encryption for data transmission and encrypted storage of sensitive information
Regular security audits and secure, PCI-compliant payment processing
Access limited to business necessity, with multi-factor authentication for admin accounts
Secure data centers, environmental monitoring, redundant storage, and disaster recovery

While we implement strong security measures, no system is completely secure. Use strong passwords and report suspicious activity immediately.

11. Cookies, Analytics, and Tracking

Our website and booking platform use cookies and third-party tracking services that load automatically when you visit. There is currently no cookie banner or consent control, so these services run without a separate opt-in. This section describes what runs and what it collects so you can make an informed choice about using the site and your browser’s controls.

Analytics and tag management

Google Tag Manager loads and manages the tags listed below.
Google Analytics 4 — aggregate usage measurement: which pages you view, how you interact with them, and how you reached us. Sets the _ga cookie, which can persist for up to about 400 days.
Cloudflare — performance and security, including privacy-oriented traffic analytics.

Advertising and remarketing

These services measure actions on the site to attribute and target advertising:

Google Ads / DoubleClick (_gcl_au) — attributes ad clicks to actions taken on the site.
Meta (Facebook) Pixel (_fbp, fr) — measures actions for advertising on Facebook and Instagram.
Microsoft Clarity also syncs with Microsoft advertising, setting Bing/Microsoft ad cookies — MUID (up to about 390 days) and _uetmsclkid / _uetvid (up to about 365 days).

Session recording and heatmaps

We use Hotjar and Microsoft Clarity to record how visitors move through and interact with pages, including pages where you enter your email address and phone number to register.

Hotjar is configured to anonymise email addresses and numbers (including phone numbers), so the contents of those fields are not captured in its recordings. It does not suppress other text shown on the page, and keystroke capture is enabled — so if recording is turned up, more of what happens on a page could be recorded. This reflects the current configuration, not a permanent guarantee.

Microsoft Clarity uploads the text shown on pages. We cannot confirm from its public configuration whether it masks the values you type into form fields, so you should assume its recordings may capture what you enter, including your email address and phone number. If you would prefer not to be recorded, use the browser controls described below.

Sharing with Meta after a purchase (server-side)

When you complete a purchase, our server sends Meta (Facebook) ahashed (obscured) version of your email address and phone number, together with your IP address and browser user-agent, through the Meta Conversions API. Because this happens on our server rather than in your browser, it cannot be seen or blocked by browser settings or ad blockers.

Fonts

Fonts are served from Google Fonts, which discloses your IP address to Google when a page loads.

Cookie lifetimes

Some of the cookies set by these services are long-lived — up to about400 days — so they can persist across visits until they expire or you clear them.

Your choices

Because the site does not offer an on-page cookie control, you can limit this tracking using your browser and device: block or clear cookies, use private/ incognito browsing, use tracker-blocking extensions, and adjust the ad personalisation settings in your Google and Meta accounts. Note that the server-side sharing with Meta described above happens outside your browser and is not affected by these controls. To ask about the data held about you, contactadmin@volleyballmississauga.com.

12. International Data Transfers

Your information may be processed and stored in countries outside your residence, including the United States and Canada. We ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, and binding corporate rules for multinational service providers.

13. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

Right to know the categories and sources of personal information collected, the business purposes, and third parties who receive it.
Right to delete personal information we’ve collected, subject to certain exceptions.
Right to opt out — we do not sell personal information, but you can opt out of targeted advertising.
Right to non-discrimination for exercising your privacy rights.

To exercise California rights, emailadmin@volleyballmississauga.com with “California Privacy Request” in the subject line. Response time: 45 days.

14. Canadian Privacy Rights (PIPEDA)

For Canadian users, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA): we collect only information necessary for identified purposes, clearly state why we collect it, obtain meaningful consent, use information only for stated purposes, and let you access and correct your personal information.

Privacy Officer contact:admin@volleyballmississauga.com — response time: 30 days for access requests.

15. Third-Party Links and Services

The Service may contain links to external websites, social media platforms, or integrated services not operated by us. We are not responsible for the privacy practices of these third parties — review their policies before sharing information. Third-party services we use include Google Maps (venue locations and directions), social media (account creation and sharing), payment processors (secure transactions), and analytics providers (usage statistics).

16. Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will immediately contain and investigate it, assess the compromised data and affected users, notify the relevant authorities within 72 hours, and directly notify affected users within 72 hours with a clear explanation, the steps being taken, and recommended actions. We will provide regular updates until the investigation concludes.

17. Updates and Changes

We may update this Privacy Policy to reflect changes in our data practices, new features or services, legal or regulatory requirements, and user feedback.

Minor changes: updated policy posted with a new date.
Major changes: email notification to registered users.
Material changes: in-app notification and consent request.

18. Contact Information

For privacy-related questions, concerns, or requests: