Privacy policy
We are committed to protecting your Personal data and ensuring your security when you use our Websites, Platforms and services or when you get in contact with us otherwise complying with GDRP requirements and best practice standards (“Data Protection Requirements”). We strive to be transparent about the processing of your Personal data on the Platforms.
Please read the following to learn more about our joint data processing activities and the ways in which we use your information on the Platforms. If you have any questions on the processing of your data by us on this basis, please refer to canadianvolleyballleagueteam@gmail.com.
IMPORTANT TERMS TO KNOW:
General Definitions:
a) Best practice: Refers to established business or professional approaches, systems, or practices that are widely recognized as the most effective or reliable compared to other available options, either because they consistently deliver stronger outcomes or because they have become the accepted norm within an industry. These practices often guide how organizations meet legal or ethical expectations (such as data protection standards) and help ensure consistent quality, even in situations where no formal regulation mandates a specific approach. They may be developed through internal evaluation, industry comparison, or performance benchmarking rather than strict legal requirements.
b) Consent: Means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of Personal data relating to him or her.
c) Controller: Refers to an individual or organization, such as a company, government body, or other entity, that independently or jointly decides why and how personal data is collected and used. In cases where applicable laws define the purpose and method of data processing, those laws may also specify who assumes this role or outline how that party is designated.
d) Data concerning health: Means Personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status.
e) Filing system: Refers to any organized collection of personal information that is structured so that specific data can be retrieved based on defined criteria. These systems may be centralized or distributed across different locations, departments, or functions.
f) Personal Information Protection and Electronic Documents Act (PIPEDA): PIPEDA is Canada’s federal privacy legislation that governs how private-sector organizations collect, use, and disclose personal information in the course of commercial activities. It applies to organizations operating across provincial or national borders, as well as to federally regulated industries.
The Act is based on fair information principles that require organizations to be accountable for personal information under their control, obtain meaningful consent, limit collection to appropriate purposes, and safeguard data appropriately. Its primary objective is to balance individuals’ privacy rights with the legitimate needs of organizations to use personal information for reasonable business purposes.
g) Personal Information: Means any information about an identifiable individual. This includes both direct identifiers (such as name or contact details) and indirect information that could reasonably be used, alone or in combination with other data, to identify an individual.
h) Use, Disclosure, and Processing of Personal Information: Refers to any handling of personal information by an organization, including its collection, recording, organization, storage, modification, retrieval, use, sharing, or disposal. Under PIPEDA, such activities must be limited to purposes that a reasonable person would consider appropriate in the circumstances and must be supported by valid consent where required.
i) Service Provider: Refers to a third-party individual or organization that processes or handles personal information on behalf of another organization. The organization remains accountable for the information and must ensure, through contractual or other means, that the service provider protects the data in accordance with applicable privacy standards.
j) Automated Decision-Making: Refers to the use of automated systems or technologies to analyze personal information in order to evaluate, predict, or make decisions about an individual’s characteristics, preferences, behavior, or other attributes. Organizations must ensure transparency and fairness when using such methods.
k) De-Identification: Refers to the process of modifying personal information so that it cannot be directly linked to a specific individual without additional information. Such additional information must be kept separate and protected through appropriate safeguards to reduce the risk of re-identification.
l) Recipient: Refers to any individual or organization to whom personal information is disclosed in the course of business activities. This includes third-party service providers and partners, but excludes disclosures made to public authorities where required by law.
m) Limiting Use: Refers to restricting how personal information is used, retained, or disclosed, ensuring that it is only handled for the specific purposes for which it was originally collected, unless further consent is obtained or required by law.
n) Third party: Refers to any individual or organization outside of the organization that collects the personal information, excluding employees or agents who are authorized to handle the information as part of their role.
DATA YOU CAN EXPECT OUR ORGANIZATION TO COLLECT:
These are the categories of Personal data we collect directly or indirectly from you on the Platforms:
a) Behavioural and Profile information: Includes information about how you interact with our services and offerings, such as your purchasing patterns across different channels (e.g., streaming platforms, online purchases, event ticketing), your attendance at our events, website activity, content preferences, purchasing interests, and engagement with our social media platforms, along with any other insights we may reasonably derive. This information is used to better understand your interests and behaviour so that we can tailor and deliver marketing communications that are more relevant to you, in accordance with the applicable legal basis outlined below and subject to your consent where required.
b) Contact information: We may use your contact information to communicate with you for the purposes outlined below, including responding to inquiries and providing relevant updates, in accordance with applicable privacy laws and, where required, your consent. This information may include details such as your email address, telephone number, mailing address, social media identifiers, and any other communication channels you have used to interact with us.
c) Device information: We collect and use certain technical data to support the security, functionality, and performance of our systems, as well as to better understand how our services are accessed and used. This may include details such as your IP address, browser type, device type, operating system, version information, pages visited, time spent on our site, date and time of access, and the referring source (such as a website or advertisement). This information is gathered through our applications and through technologies such as cookies, tags, and similar tracking tools used on our platforms.
d) Identity information: We use certain personal details to confirm and authenticate your identity when you interact with our services, in accordance with applicable privacy laws and, where required, your consent. This may include information such as your name (including first name, last name, and initials), date of birth, email address, username or nickname, account credentials (such as a password), social media identifiers, and any information shared with us through your linked social media accounts.
e) Location information: We may use location-related information to provide you with more relevant content, services, or recommendations based on where you are, in accordance with applicable privacy laws and, where required, your consent. This may include details such as your home or mailing address, approximate or real-time login location, IP address, GPS data (where enabled through your device settings), and contextual indicators such as websites or pages visited that may suggest your geographic location.
f) Purchase information: We use transaction-related information to process and fulfill your orders, manage payments, and maintain accurate records of your purchases, in accordance with applicable privacy laws and, where required, your consent; this may include details such as your payment information (e.g., credit card details), billing and shipping addresses, delivery information, items in your cart, order and transaction identifiers, purchase history, and any risk or fraud-related assessments provided by our payment service providers, along with other information necessary to complete your transaction.
g) Preference information: We use certain preference-related information to improve your experience and make your interactions with our platforms more convenient and personalized, in accordance with applicable privacy laws and, where required, your consent. This may include details such as your preferred language, login or regional settings, saved addresses, wishlist items, browsing preferences, communications between you and us, and any product reviews or feedback you have provided.
h) Social Media information: We may collect and use information from your interactions with us on social media platforms to better understand engagement and improve our communications, in accordance with applicable privacy laws and, where required, your consent. This information may be obtained directly from the platforms or through authorized third-party partners with whom we have agreements.
Such information can include publicly available details such as your social media usernames, interactions with our content (including likes, comments, and reactions), public posts, connections, and any images or content you share with us by tagging, mentioning, or engaging with our accounts through platform features (e.g., hashtags or handles).
In addition, we may receive publicly available or aggregated data from research and analytics partners and use this information for the purposes described in this policy. Any additional categories of data not outlined above will be clearly identified in the relevant sections where applicable.
How Your Data will be used
1. Operations, Functionality, and Security
Categories of Information Used
To maintain the operation, reliability, and security of our websites and platforms, we may use certain technical and identity-related information, including device information and account or identity verification data.
Purpose of Collection and Use
This information is collected and processed to help ensure our systems function properly, remain secure, and provide users with a safe and efficient experience. These activities may include monitoring for unauthorized access or suspicious activity, identifying and resolving technical issues, enforcing our Terms and Conditions, improving platform performance, and maintaining the overall integrity and functionality of our services.
Access to Information
Access to this information is restricted to authorized personnel who require it for operational or security-related purposes. This may include individuals responsible for technology management, system administration, and platform operations, who are subject to appropriate confidentiality and security obligations.
Deletion of Data
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as otherwise required or permitted under applicable law. Individuals may request the deletion of their personal information at any time by submitting a written request or contacting us by email, subject to any legal, regulatory, or contractual retention requirements. This policy is maintained in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), including the principles relating to meaningful consent and limiting retention of personal information, section 6.1 (https://laws-lois.justice.gc.ca/eng/acts/p-8.6/page-1.html)
2. User experience (registered Website and app users/account holders)
Categories of Information Used
To provide and improve personalized user experiences across our websites, applications, and digital platforms, we may collect and use device information, contact information, identity information, location information, behavioural and preference-related information, and social media information where voluntarily made available to us.
Purpose of Collection and Use
This information may be used to personalize content, recommendations, promotional materials, account features, and communications based on user interests and interactions with our services. In order to better understand user engagement and preferences, we may analyze browsing activity, viewed content, interaction history, platform usage patterns, and other engagement-related activity across our platforms.
We may also use analytics and measurement tools to evaluate the effectiveness of our communications, services, digital content, events, and promotional activities. Any use of personal information will be limited to purposes that a reasonable person would consider appropriate under the circumstances and will be handled in accordance with the user’s selected consent preferences.
Access to Information
Access to personal information is restricted to authorized personnel, contractors, and trusted service providers who require the information for operational, technical, marketing, analytics, customer support, or platform-related purposes. This may include technology providers, cloud hosting providers, analytics providers, communication and marketing partners, and other organizations assisting in the operation and improvement of our services, all of whom are expected to maintain appropriate confidentiality and security safeguards.
Deletion of Data
Personal information will only be retained for as long as necessary to fulfill the purposes for which it was collected, or as otherwise required or permitted by applicable law. Users may withdraw consent to marketing communications, request deletion of their personal information, adjust their privacy preferences, or close their accounts at any time, subject to any legal or contractual obligations requiring retention. The collection, use, disclosure, and retention of personal information are conducted in accordance with the principles and requirements set out under Personal Information Protection and Electronic Documents Act (PIPEDA), including provisions relating to meaningful consent, appropriate purposes, limiting collection, and limiting use, disclosure, and retention of personal information.
3. Service Development and Market Research
Categories of Information Used
Depending on the nature of the project, initiative, or activity involved, we may collect and use information such as device information, identity information, location information, behavioural and preference-related information, social media information, and, where voluntarily provided and necessary for the specific purpose, limited health-related information.
Purpose of Collection and Use
Personal information may be used to help evaluate, improve, and develop our services, programs, events, digital platforms, and user experience. This may include conducting surveys, feedback requests, promotional campaigns, contests, or other market research initiatives designed to better understand user interests, engagement, and satisfaction.
We may also work with authorized third-party service providers or research partners to assist with analytics, feedback collection, and service evaluation activities on our behalf. Participation in these activities is voluntary, and any collection or use of personal information will be limited to purposes that a reasonable person would consider appropriate in the circumstances.
Where sensitive information, including health-related information, is collected, explicit consent will be obtained prior to its collection, use, or disclosure, except where otherwise permitted or required by applicable law.
Access to Information
Access to personal information is limited to authorized personnel, contractors, and trusted third-party service providers who require the information for operational, research, analytics, administrative, or service development purposes. This may include technology providers, analytics providers, cloud hosting providers, consulting partners, sponsors, and other organizations assisting in the evaluation and improvement of our services, all of whom are expected to maintain appropriate confidentiality and security safeguards.
Deletion of Data
Personal information collected for market research or service development purposes will only be retained for the duration necessary to complete the applicable project, initiative, or purpose for which it was collected, unless a longer retention period is required or permitted by law. Individuals may withdraw their consent at any time, subject to legal or contractual limitations and reasonable notice. The collection, use, disclosure, and retention of personal information are conducted in accordance with the principles and requirements established under the Personal Information Protection and Electronic Documents Act (PIPEDA).
4. Social Media Campaigns and Community Engagement
Categories of Information Used
Depending on the nature of the campaign or activity and the information voluntarily shared with us, we may collect and use device information, identity information, location information, behavioural and preference-related information, social media information, and user-generated content submitted through social media platforms.
Purpose of Collection and Use
We may invite individuals to participate in social media campaigns, promotional activities, or community engagement initiatives by submitting content such as images, videos, comments, posts, or other media through social media platforms. Participation may involve the use of campaign-specific hashtags, tags, mentions, or other instructions associated with a particular initiative or promotion.
Information and content voluntarily shared with us may be used for promotional purposes, campaign communications, community engagement, marketing activities, digital content creation, and showcasing participation across our websites, platforms, and social media channels.
Participation in these activities is voluntary, and any use of personal information will be limited to purposes that a reasonable person would consider appropriate in the circumstances.
Access to Information
Access to personal information and submitted content is limited to authorized personnel, contractors, and trusted third-party service providers who require the information for operational, marketing, analytics, administrative, or campaign-related purposes. This may include technology providers, advertising and media partners, analytics providers, cloud hosting providers, sponsors, and social media platform providers, all of whom are expected to maintain appropriate confidentiality and security safeguards.
Retention of Data
Personal information and campaign-related content will only be retained for as long as necessary to fulfill the purpose of the applicable campaign, promotion, or engagement activity, unless a longer retention period is required or permitted by law. Individuals may withdraw their consent at any time, subject to legal or contractual limitations and reasonable notice. The collection, use, disclosure, and retention of personal information are conducted in accordance with the principles and requirements established under the Personal Information Protection and Electronic Documents Act (PIPEDA), including provisions relating to meaningful consent, appropriate purposes, and limiting the use, disclosure, and retention of personal information.
4. Subscription to Newsletters, Updates and similar communications
Categories of Information Used
To provide subscription-based communications and related services, we may collect and use identity information, contact information, and behavioural or preference-related information associated with your interactions with our platforms and communications.
Purpose of Collection and Use
We may invite individuals to subscribe to newsletters, email updates, announcements, promotional communications, or other subscription features made available through our websites, applications, or digital platforms.
Personal information may be used to deliver requested communications, manage subscription preferences, improve the relevance of content provided to subscribers, and better understand engagement with our communications and services. This may include evaluating interactions such as email opens, clicks, content interests, and other engagement-related activity in order to improve communication quality and user experience.
Participation in subscription services is voluntary, and individuals may choose whether to receive such communications.
Access to Information
Access to personal information is limited to authorized personnel, contractors, and trusted third-party service providers who require the information for communication, marketing, analytics, operational, or administrative purposes. This may include analytics providers, communication service providers, advertising and marketing partners, and other organizations assisting in the delivery and improvement of subscription services, all of whom are expected to maintain appropriate confidentiality and security safeguards.
Retention of Information
Personal information associated with newsletters, subscription services, and communication updates will be retained only for as long as an individual remains subscribed to the applicable communication service or as otherwise required or permitted by law. Individuals may unsubscribe or withdraw consent at any time through the available unsubscribe mechanisms or by contacting us directly. The collection, use, disclosure, and retention of personal information are conducted in accordance with the principles and requirements established under the Personal Information Protection and Electronic Documents Act (PIPEDA), including provisions relating to meaningful consent, appropriate purposes, and limiting the use, disclosure, and retention of personal information.
Cookies, Tracking Technologies, and Similar Tools
Our websites, applications, and digital platforms may use cookies, pixels, tags, web beacons, and similar technologies to improve functionality, enhance user experience, analyze platform performance, support security measures, and deliver relevant content and communications.
These technologies may collect technical and usage-related information such as browser type, device identifiers, IP address, pages visited, session activity, preferences, and interaction data. Certain technologies may also be used by authorized third-party analytics, advertising, or service providers assisting in the operation and improvement of our services.
Where required by applicable law, users will be provided with options to manage or adjust cookie and tracking preferences, including the ability to accept, reject, or modify non-essential tracking technologies. Additional information regarding our use of cookies and similar technologies may be provided in a separate Cookie Policy or related notice.
Additional Information Regarding Service Providers and Third-Party Recipients
Depending on the nature of the services provided, personal information may be shared with authorized third-party service providers, contractors, partners, or advisors who assist in operating, maintaining, supporting, analyzing, improving, or securing our services and platforms.
These third parties may include technology providers, cloud hosting providers, analytics providers, communication service providers, marketing and advertising partners, payment processors, business consultants, legal advisors, sponsors, operational partners, and other organizations supporting our activities.
All third parties with access to personal information are expected to maintain appropriate confidentiality, security, and privacy safeguards consistent with applicable privacy laws and contractual obligations.
II. General Information Regarding the Disclosure and Transfer of Personal Information
We do not sell, rent, or lease personal information to third parties except as described within this Privacy Policy or where otherwise permitted or required by applicable law.
Where appropriate and practical, we may use de-identification, anonymization, or other privacy-enhancing measures to minimize the amount of identifiable information used in our operations while still allowing us to fulfill legitimate operational, analytical, or service-related purposes.
In addition to the uses described throughout this Privacy Policy, personal information may be disclosed where:
-
the individual has provided consent;
-
the disclosure is necessary to provide requested services or fulfill contractual obligations;
-
the disclosure is reasonably necessary to establish, exercise, or defend legal claims;
-
the disclosure is required or authorized by law, regulation, court order, subpoena, warrant, or other lawful authority; or
-
the disclosure is necessary to protect the rights, safety, security, or property of our organization, users, staff, or others.
Personal information may be stored or processed in jurisdictions outside of Canada where our service providers, partners, or infrastructure providers operate. As a result, information may become subject to the laws and lawful access requirements of those jurisdictions.
When transferring personal information to third-party providers or across jurisdictions, we take reasonable steps to ensure that appropriate safeguards, contractual protections, confidentiality obligations, and security measures are implemented to protect personal information in accordance with applicable privacy laws, including Personal Information Protection and Electronic Documents Act (PIPEDA).
III. Your Privacy Rights
Subject to applicable law, individuals may have the right to request access to, correction of, or information regarding the personal information we hold about them and how it is used or disclosed.
Right of Access
You may request access to personal information we maintain about you, including information regarding how it has been collected, used, or disclosed. Reasonable verification of identity may be required before fulfilling such requests.
Right to Correction
If you believe personal information held by us is inaccurate, incomplete, or outdated, you may request that it be corrected or updated.
Right to Withdraw Consent
Where personal information is processed based on consent, you may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain services or features.
Right to Request Deletion
You may request that we delete personal information retained about you where such information is no longer necessary for the purposes for which it was collected, subject to any legal, operational, contractual, or regulatory obligations requiring retention.
Right to Challenge Compliance
Individuals may contact us regarding concerns, questions, or complaints related to our privacy practices or handling of personal information.
Filing a Complaint
If you believe your personal information has been handled in a manner inconsistent with applicable privacy laws, you may file a complaint with the Office of the Privacy Commissioner of Canada.
IV. Third-Party Links and External Platforms
Our websites, applications, newsletters, social media pages, and other communications may contain links to third-party websites, applications, services, or platforms operated by external organizations, partners, advertisers, or social media providers.
Any personal information collected through third-party websites or services is governed by the privacy practices and policies of those third parties and not by this Privacy Policy. Users are encouraged to review the privacy policies and terms of any external services they access through links provided on our platforms.
VI. Updates and Changes to this Privacy Policy
This Privacy Policy may be updated or modified periodically to reflect changes in our practices, services, operational requirements, or applicable legal obligations. Updated versions will be made available through our websites or platforms with a revised effective date where appropriate.
Where material changes significantly affect how personal information is collected, used, or disclosed, we may provide additional notice through our platforms, email communications, or other reasonable methods.