Privacy Policy

1. Who We Are

This Privacy Policy describes how Elite Soccer Academy ("we," "us") collects, uses, and shares information when a parent or legal guardian creates an account, enrolls a child, or otherwise uses this Site.

2. Information We Collect

From parents / guardians (over 18):

• Name, email address, phone number, password (stored hashed).
• Stripe customer ID (no full card number is stored on our servers).
• Messages you send the coach and any notes you choose to provide.
• Standard server logs (IP address, browser, timestamps) for security and debugging.

About enrolled children — only what the parent provides:

• Child's first/full name, age, and program enrollment / attendance records.
• Optional notes the parent provides (medical conditions, allergies, position preferences).

3. Children's Privacy — COPPA Compliance

Elite Soccer Academy is directed at parents and legal guardians, not at children. We do not knowingly permit children under 13 to create their own account or directly submit personal information through this Site. The Children's Online Privacy Protection Act ("COPPA") and the FTC's COPPA Rule apply when a website knowingly collects personal information from a child under 13.

• We collect information about a child only after a verifiable parent or legal guardian has created an account, accepted these terms, and entered the child's information themselves.
• The information we collect about children is the minimum necessary to register, supervise, and contact the family about that child's enrollment.
• We do not require children to disclose more information than is reasonably necessary to participate. We do not condition participation on disclosure of additional personal data.
• We do not sell, rent, or use children's personal information for behavioral advertising. We do not allow third-party advertising networks on this Site.
• A parent or legal guardian may at any time review the personal information we have collected about their child, request that we correct or delete it, and withdraw consent for further collection by emailing the contact address below.

4. How We Use Information

• To register children, schedule and confirm sessions, manage waitlists, and communicate about enrollment.
• To process payments, refunds, and chargebacks.
• To send transactional messages (booking confirmations, schedule changes, attendance reminders).
• To respond to your messages and provide customer support.
• To comply with legal obligations and enforce our Terms.

We do not sell personal information. We do not share children's personal information with third parties for marketing purposes.

5. Third-Party Service Providers

• Stripe, Inc. — payment processing. See stripe.com/privacy.
• Email delivery providers (e.g., SendGrid, Gmail SMTP, or other transactional-email services) — used to send confirmations, reminders, and parent-coach messages.
• Hosting provider — this site runs on managed infrastructure that processes data on our behalf under standard data-processing terms.

6. Cookies

We use a small number of strictly-necessary cookies (login session, CSRF protection). We do not use third-party advertising or tracking cookies on this Site.

7. Data Retention

We retain enrollment, attendance, and payment records for as long as needed to operate the program and to meet tax and legal-defense requirements (typically up to 7 years). You may request deletion of your account and your child's record at any time; we will delete personal data that is not subject to a legal-retention requirement.

8. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know, access, correct, delete, and opt out of "sale" or "sharing" of personal information — we do neither. To make a request, email us with the subject line "California Privacy Request."

9. European Privacy Rights (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights of access, rectification, erasure, restriction, data portability, and objection, and you may lodge a complaint with your local data-protection authority. Lawful bases include performance of a contract, legal obligation, legitimate interests, and your consent.

10. Photo / Video

We may take photos and short videos at training and events for our own promotional and operational use. Parents may opt their child out at any time by emailing the contact address below. See the Terms Section 7 for details.

11. Security

We use HTTPS in transit, hashed passwords at rest, and reputable third-party processors for payments. No system is perfectly secure; please contact us if you suspect any unauthorized access to your account.

12. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date above will reflect the most recent change. Material changes affecting children's data will be posted prominently and may require renewed parental consent.

13. Contact & Privacy Requests (including COPPA Requests)

For privacy questions, deletion, consent withdrawal, or access requests, email info@elitesocceracademy.com with the subject line "Privacy Request" or write to [BUSINESS MAILING ADDRESS — TBD].