Privacy Policy

2. How We Use Your Information

We process personal information to:

• Create and manage user accounts and team/roster profiles
• Facilitate tournament operations, schedules, brackets, standings, and results
• Provide customer support and respond to inquiries
• Process payments, invoices, and refunds
• Deliver transactional notices: receipts, confirmations, event updates
• Personalize features and improve platform performance
• Publish non-sensitive competitive statistics and media (as part of service expectations)
• Detect, investigate, and prevent fraud, abuse, or security threats
• Comply with legal obligations and enforce terms
• Send product updates, feature announcements, marketing (where permitted)

3. Legal Bases for Processing (EU / UK)

Where GDPR/UK GDPR applies, we rely on:

• Performance of a contract (e.g., delivering registered event services)
• Legitimate interests (platform optimization, fraud prevention, limited promotion of public competition data)
• Consent (certain marketing communications, optional analytics cookies)
• Legal obligations (tax, accounting, compliance)
• Vital interests (rare safety-related scenarios)

You may object to processing based on legitimate interests (see Section 11).

4. Cookies & Tracking

Types:

• Essential: Required for login, navigation, security.
• Functional: Preferences, saved sessions.
• Analytics: Usage patterns (e.g., Google Analytics or similar).
• Advertising: Retargeting or audience building (only where lawful and, if required, consented).

Your Controls:

• Browser settings (block/delete cookies)
• Cookie banner preferences (where required)
• Opt-out tools (regional advertising bodies)

Blocking essential cookies may impair service use.

5. Integrations & Linked Services

If you connect a third-party service (e.g., video provider, stats automation, social media):

• We receive only the scope of data you authorize.
• We never collect third-party passwords.
• Review those services' privacy policies for independent processing practices.
• Disconnecting an integration may not retroactively delete previously imported data.

6. Payment & Commerce Data

• We use reputable third-party payment processors for card and ACH transactions.
• We do not store full payment card numbers; tokens are retained for recurring authorizations where you consent.
• Personally Identifiable Information (PII) provided for payment or compliance is used solely for that purpose or as required by law.

7. How We Share Information

We may share:

• With Service Providers / Sub-Processors: Hosting, analytics, payment processing, email delivery, customer support tools.
• Within Corporate Structure: Affiliates or successors (see Section 16).
• With Event Stakeholders: Publicly expected player stats, team names, brackets, standings.
• For Legal Reasons: Compliance with subpoenas, court orders, or to enforce rights.
• With Your Consent: Any additional disclosures you explicitly authorize.

We do not sell personal information as traditionally defined; if regional law defines "sale" to include certain ad/analytics sharing, we will honor opt-out mechanisms.

8. International Data Transfers

Data may be stored or processed in the United States or other jurisdictions lacking equivalent data protection laws. Where required, we implement appropriate safeguards (e.g., Standard Contractual Clauses) for international transfers.

9. Data Security

We apply industry-standard safeguards, including:

• Encryption in transit (TLS)
• Access controls and role-based permissions
• Regular vulnerability and patch management
• Audit logging and anomaly detection

No system is perfectly secure; we strive for continuous improvement. Please notify us promptly if you suspect unauthorized access.

10. Data Retention

We retain data:

• As long as accounts remain active or necessary to provide services
• For legitimate business interests (dispute resolution, audit trails)
• As required by law (tax/regulatory retention windows)

When no longer needed, data is securely deleted or anonymized.

11. Your Rights (Depending on Jurisdiction)

Subject to applicable law, you may have rights to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): Request deletion of eligible data.
• Restriction: Limit certain processing.
• Portability: Receive data you provided in a machine-readable format.
• Object: To processing based on legitimate interests or direct marketing.
• Withdraw Consent: For any processing based on consent.
• Lodge a Complaint: With a supervisory authority (e.g., your EU Data Protection Authority, UK ICO).

Submit requests: privacy@nextlevelbaseball.com

We may require verification of identity.

12. Children & Youth Participants

• Our services are primarily directed to coaches, team managers, and guardians—not directly to children.
• Under 16 (EU/UK) or Under 13 (U.S. COPPA context): We do not knowingly collect personal data without parent/guardian consent or authorization through an adult-managed account.
• If you believe we have collected personal data from a minor improperly, contact us and we will address it promptly.
• Some athlete public data (e.g., name, age category, stats) is published as core event functionality. Guardians/coaches should manage disclosures appropriately.

13. Your Choices & How to Exercise Them

• Account Settings: Update profile, team, and contact preferences directly.
• Email Preferences: Unsubscribe links in non-transactional emails.
• Data Request/Deletion: Email us with subject line: Data Request – [Your Name].
• Cookie Preferences: Adjust via cookie banner (where available) or browser.

If you request deletion, certain minimal records may be retained for legal, accounting, or fraud prevention purposes.

14. Advertising & Analytics

We may use analytics to:

• Measure engagement, improve features
• Understand geographic demand and capacity planning
• Assess marketing campaign performance

If ad technologies are used, they may set or read identifiers. Where legally required, we obtain consent or provide opt-outs.

15. Data Sub-Processors (Overview)

Typical categories (an up-to-date detailed list can be provided upon request):

• Cloud hosting & infrastructure
• Email/SMS delivery
• Payment processing
• Analytics & performance monitoring
• Customer support / ticketing
• Video or stats integration partners

We contractually require these providers to process data only under our instructions and maintain appropriate security.

16. Business Changes

In a merger, acquisition, restructuring, financing, asset sale, bankruptcy, or similar event, personal data may be transferred under appropriate confidentiality protections. You will be notified of any material ownership or control changes affecting your data rights.

17. External Links

Our site or apps may link to third-party sites or platforms. We are not responsible for their privacy practices. Review those policies independently.

18. Updates to This Policy

We may modify this Privacy Policy periodically. The "Effective Date" will reflect the latest version. Material changes may be communicated via email, banner notice, or dashboard alert. Continued use after changes constitutes acceptance.

19. Contacting Us

Data Protection & Privacy Inquiries:

Email: privacy@nextlevelbaseball.com

Mailing Address: [Insert Legal Entity Name & Address]

If you are in the EEA/UK and require a representative or DPO contact, include that info here if applicable.

Additional Regional Notices (Optional Add-Ons)

If you expect California users:

California (CCPA/CPRA) Rights: Right to know, delete, correct, opt-out of "sale" or "sharing," and non-discrimination. Provide a "Do Not Sell or Share My Personal Information" link if required.

If you operate in Canada:

You may add references to PIPEDA and consent withdrawal.

Consent

By using our services, registering an account, submitting roster information, or participating in events, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. Where required by law, we rely on your explicit consent for specific processing activities (e.g., certain marketing or optional cookies).