Privacy Policy
Effective date: 2025-01-01
Overview
COMMUNITY ACTIVE SPORTS LEAGUE INC. ("OFSL", "we", "us") is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and the rights available to you. This policy applies to ofsl.ca and related services.
Information We Collect
- Account information: name, email, phone number, password hash.
- Profile information: gender/skill selections, sport preferences, team membership.
- Transaction information via Stripe: payment method, amounts, and status (we do not store full card numbers).
- Usage data: device/browser, pages viewed, and interactions (via analytics).
- Communications: messages or emails you send to us.
How We Use Information
- Provide and manage league registration, teams, schedules, and standings.
- Process payments and refunds through Stripe.
- Authenticate users and secure accounts using Supabase Auth.
- Send administrative communications (confirmations, updates, schedule changes).
- Improve website performance and services through analytics.
Legal Bases
We process personal information with your consent, to perform a contract (league registrations), to comply with legal obligations, and for our legitimate interests (site security, service improvements). Our practices are intended to comply with applicable Canadian privacy law, including PIPEDA.
Sharing
We share data with trusted service providers that help us operate the site:
- Supabase (hosting, database, authentication)
- Stripe (payments)
- Analytics providers (e.g., Google Analytics) for site usage statistics
- Email/SMS providers for notifications, as applicable
We do not sell personal information.
Retention
We retain information for as long as necessary to provide services, meet legal requirements, and resolve disputes. Payment records are kept as required for tax and accounting.
Security
We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Your Rights
You may request access to, or correction of, your personal information. You may withdraw consent for marketing communications at any time. To exercise your rights, contact us at [email protected].
International Transfers
Our service providers may store or process data outside Ontario/Canada. We take steps to ensure appropriate protections are in place.
Children
Our services are intended for adult participants and guardians. If you believe a child has provided us with personal information without consent, contact us and we will remove it.
Changes
We may update this policy. Material changes will be posted on this page with an updated effective date.
Contact
For privacy questions, contact [email protected].