Privacy Policy

Volleyball Mississauga

• Support email:[email protected]
• Phone: (647) 493-5035
• Address: Applewood, 945 Bloor St, Mississauga, ON
• Website:volleyballmississauga.com
• Jurisdiction: Governed by the laws of Ontario, Canada

Personal information you provide

When you register and use the Service, you may provide:

• Account information: full name, email address, phone number, date of birth, password
• Profile information: profile photo, skill level, preferred positions, playing experience
• Location data: current location (when you enable location services) to find nearby games
• Payment information: credit card details and billing address (processed securely through third-party payment processors)
• Communication data: messages sent through the in-app messaging system, support requests
• Game participation: games joined, leagues enrolled in, attendance history, ratings and reviews

Information collected automatically

• Device information: device type, operating system, unique device identifiers, mobile network information
• Usage data: app and site interactions, features used, time spent, crash logs, performance data
• Location data: GPS coordinates and Wi-Fi network information (when location services are enabled)
• Log data: IP address, browser type, access times, pages viewed

Information from third parties

• Social media: if you connect social accounts (Facebook, Google, Apple), we receive the profile information you authorize
• Game organizers: information shared by independent organizers when you join their games
• Payment processors: transaction confirmations and payment status updates

Service provision (contract performance)

• Create and manage your player account
• Connect you with volleyball games and leagues in your area
• Process game bookings and league registrations
• Facilitate secure payments and refunds
• Provide real-time game updates and notifications
• Enable in-app messaging between players and organizers

Communication (contract performance & legitimate interest)

• Send transactional notifications about bookings, cancellations, and game updates
• Provide customer support and respond to inquiries
• Send important service announcements and security alerts
• Share promotional content about new features and games (with consent)

Service improvement (legitimate interest)

• Analyze usage patterns to enhance functionality
• Develop new features and expand to additional programs
• Ensure platform security and prevent fraud
• Conduct research and analytics to improve user experience

Legal compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent illegal activities
• Protect the rights, property, and safety of Volleyball Mississauga, our users, and others

We do not sell your personal information. We may share your information in these situations:

With game organizers

When you join a game, we share necessary information (name, contact details, skill level) with the organizer to facilitate coordination. Independent organizers must use this information solely for game organization.

With other players

Your profile information (name, photo, skill level) may be visible to other players in games and leagues you join. You control what appears in your public profile.

With service providers

• Payment processing: Stripe and other secure providers
• Cloud storage: AWS, Google Cloud for hosting and backup
• Analytics: Google Analytics, Firebase for usage analysis
• Communication: email and SMS providers for notifications
• Customer support: help-desk platforms for ticketing

For legal reasons

We may disclose information when required by law, court order, or government request, or to protect the rights and safety of Volleyball Mississauga, our users, or the public.

Business transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity with prior notice to users.

Transactional messages

When you book games or join leagues, you’ll receive important SMS and email notifications about game confirmations and reminders, cancellations and schedule changes, league updates and standings, and payment confirmations and receipts. These transactional messages are essential for service delivery and cannot be opted out of while using the Service.

Marketing communications

With your consent, we may send promotional emails about new games and leagues in your area, special offers and discounts, new features, and community events and tournaments.

Opt-out options:

• SMS: reply “STOP” to any message
• Email: click “Unsubscribe” in the email footer
• Push notifications: disable in your device settings or app preferences

Message and data rates may apply. Message frequency varies.

We retain your personal information for as long as necessary to:

• Maintain your active account and provide services
• Meet legal requirements and resolve disputes
• Prevent fraud and ensure platform security

Specific retention periods:

• Account data: until you delete your account or request deletion
• Game history: 7 years for tax and legal compliance
• Communication records: 3 years for support and legal purposes
• Usage analytics: aggregated data may be retained indefinitely
• Location data: deleted after 30 days unless needed for active bookings

When you delete your account, we will remove or anonymize your personal information within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights:

• Access and portability: request a copy of the personal information we hold and download it in a portable format
• Correction and updates: update incorrect or incomplete information, or request correction of inaccurate data
• Deletion (“right to be forgotten”): delete your account and associated personal information
• Restriction and objection: limit how we process your information, object to processing based on legitimate interests, or withdraw consent for marketing
• Data portability: transfer your data to another service provider

To exercise these rights, use your account settings for basic updates and deletions, or contact[email protected] for complex requests. Response time: 30 days for most requests.

The Service is designed for users 13 years and older. We do not knowingly collect personal information from children under 13. Users between 13–17 should have parental consent before using the Service. If we discover we have collected information from a child under 13, we will delete it immediately. Parents who believe their child has provided information to us should contact[email protected].

Location services help you find nearby games. We collect location data when you search for games in your area, check in at game venues, or enable location-based notifications. We use it to match you with nearby games and facilities, provide directions to venues, send location-relevant recommendations, and improve our venue database.

Your controls: enable or disable location services in your device settings and control location sharing in the app’s privacy settings. Disabling location may limit core functionality.

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for data transmission and encrypted storage of sensitive information
• Regular security audits and secure, PCI-compliant payment processing
• Access limited to business necessity, with multi-factor authentication for admin accounts
• Secure data centers, environmental monitoring, redundant storage, and disaster recovery

While we implement strong security measures, no system is completely secure. Use strong passwords and report suspicious activity immediately.

Our website and booking platform use cookies and third-party tracking services that load automatically when you visit. There is currently no cookie banner or consent control, so these services run without a separate opt-in. This section describes what runs and what it collects so you can make an informed choice about using the site and your browser’s controls.

Analytics and tag management

• Google Tag Manager loads and manages the tags listed below.
• Google Analytics 4 — aggregate usage measurement: which pages you view, how you interact with them, and how you reached us. Sets the _ga cookie, which can persist for up to about 400 days.
• Cloudflare — performance and security, including privacy-oriented traffic analytics.

Essential first-party cookies

These are set by our own site and are needed for it to work: vm_session (keeps you signed in), vm_oauth (protects a Google or Apple sign-in while it is in progress, for ten minutes), ab_vbv (remembers which version of the registration page you were shown, for 30 days, so the page does not change between visits), and the cookies Stripe sets to process a payment and prevent fraud (__stripe_mid, __stripe_sid).

Advertising and remarketing

These services measure actions on the site to attribute and target advertising:

• Google Ads / DoubleClick (_gcl_au) — attributes ad clicks to actions taken on the site.
• Meta (Facebook) Pixel (_fbp, fr) — measures actions for advertising on Facebook and Instagram.
• Microsoft Clarity also syncs with Microsoft advertising, setting Bing/Microsoft ad cookies — MUID (up to about 390 days) and _uetmsclkid / _uetvid (up to about 365 days).

Session recording and heatmaps

We use Hotjar and Microsoft Clarity to record how visitors move through and interact with pages, including pages where you enter your email address and phone number to register.

Hotjar is configured to anonymise email addresses and numbers (including phone numbers), so the contents of those fields are not captured in its recordings. It does not suppress other text shown on the page, and keystroke capture is enabled — so if recording is turned up, more of what happens on a page could be recorded. This reflects the current configuration, not a permanent guarantee.

Microsoft Clarity uploads the text shown on pages. We cannot confirm from its public configuration whether it masks the values you type into form fields, so you should assume its recordings may capture what you enter, including your email address and phone number. If you would prefer not to be recorded, use the browser controls described below.

Sharing with Meta after a purchase (server-side)

Our previous website sent Meta (Facebook) a hashed (obscured) version of your email address and phone number, together with your IP address and browser user-agent, through the Meta Conversions API after each purchase. This website does not do that: purchase events reach advertising services only through the browser-side tags managed by Google Tag Manager, described above, which your browser controls can block. If we add server-side sharing again, this section will say so before it starts.

Fonts

Fonts are served from our own website, not from Google Fonts, so loading a page does not disclose your IP address to Google for that purpose.

Cookie lifetimes

Some of the cookies set by these services are long-lived — up to about400 days — so they can persist across visits until they expire or you clear them.

Your choices

Because the site does not offer an on-page cookie control, you can limit this tracking using your browser and device: block or clear cookies, use private/ incognito browsing, use tracker-blocking extensions, and adjust the ad personalisation settings in your Google and Meta accounts. To ask about the data held about you, contact[email protected].

Your information may be processed and stored in countries outside your residence, including the United States and Canada. We ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, and binding corporate rules for multinational service providers.

California residents have additional rights under the CCPA:

• Right to know the categories and sources of personal information collected, the business purposes, and third parties who receive it.
• Right to delete personal information we’ve collected, subject to certain exceptions.
• Right to opt out — we do not sell personal information, but you can opt out of targeted advertising.
• Right to non-discrimination for exercising your privacy rights.

To exercise California rights, email[email protected] with “California Privacy Request” in the subject line. Response time: 45 days.

For Canadian users, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA): we collect only information necessary for identified purposes, clearly state why we collect it, obtain meaningful consent, use information only for stated purposes, and let you access and correct your personal information.

Privacy Officer contact:[email protected] — response time: 30 days for access requests.

The Service may contain links to external websites, social media platforms, or integrated services not operated by us. We are not responsible for the privacy practices of these third parties — review their policies before sharing information. Third-party services we use include Google Maps (venue locations and directions), social media (account creation and sharing), payment processors (secure transactions), and analytics providers (usage statistics).

In the unlikely event of a data breach affecting your personal information, we will immediately contain and investigate it, assess the compromised data and affected users, notify the relevant authorities within 72 hours, and directly notify affected users within 72 hours with a clear explanation, the steps being taken, and recommended actions. We will provide regular updates until the investigation concludes.

We may update this Privacy Policy to reflect changes in our data practices, new features or services, legal or regulatory requirements, and user feedback.

• Minor changes: updated policy posted with a new date.
• Major changes: email notification to registered users.
• Material changes: in-app notification and consent request.

For privacy-related questions, concerns, or requests:

Volleyball Mississauga

• Email:[email protected]
• Phone: (647) 493-5035
• Address: Applewood, 945 Bloor St, Mississauga, ON

Response times: general inquiries 3–5 business days; privacy rights requests 30 days; data breach concerns 24 hours.

This Privacy Policy is effective as of the date listed above. By using the Service, you acknowledge that you have read and understand this policy and agree to its terms.