____ January 2016
Capitalized terms used herein without definition will have the same meanings as defined in the Terms of Service applicable to the Service, which are available at https://www.sparxhockey.com/pages/terms-services.
SECTION 1 - WHAT INFORMATION DO WE COLLECT?
When you visit the Site or otherwise access the Service, web servers collect general information about your visit (such as, for example, traffic data like time, date and the address of the website from which you entered the Site), which is stored as anonymous, aggregate data. Velasa Sports also collects more specific information about you and your use of the Service (such as, for example, demographic data, profile data and frequency or duration of use). Collecting such data (collectively, "Traffic Data") may entail the use of software programs, web beacons, pixel tags, cookies, IP addresses or other numeric codes used to identify a computer.
Whenever you interact with the Service, a variety of technologies are employed to automatically or passively collect Service Data. The term "Service Data" means all data and information that are provided by you in connection with the purchase of Products, posting User Generated Content and other uses of the Service, and all other data and information about you that are otherwise discerned or collected by Velasa Sports based on your access and use of the Service. For clarity, Service Data includes, but is not limited to: personally identifiable information (like name, address, telephone number and email address); browser or device type; operating system; time of day; identification of Site page views; use of particular Service features; and geographic location. At no time will the Service access, collect or store any of the personal contacts, photographs or other information stored on your device without your permission.
We do not collect or store your credit card information. The purchase of Products (including the entry, storage and verification of credit card information) is handled by our e-commerce vendor, as described in more detail below.
SECTION 2 – DO WE COLLECT INFORMATION FROM CHILDREN?
Velasa Sports will not collect personally identifiable information from any person who is actually known to us to be under the age of 13. If we become aware that a person under 13 has provided personally identifiable information, Velasa Sports will take steps to remove such information and terminate that individual’s account, access and use of the Service.
SECTION 3 - WHAT DO WE DO WITH YOUR INFORMATION?
Except as set forth below, at no time will any of your personal data be shared with any third party by Velasa Sports. Your IP address is not linked to personally identifiable information, but is used to gather broad demographic data and to monitor statistics to improve the Service.
Velasa Sports uses Traffic Data to help diagnose problems with its web servers, to administer the Service and to analyze user trends and behaviors. Velasa Sports will share Traffic Data with certain third parties for the purposes of technical and customer support.
Velasa Sports collects, stores, processes and analyzes Service Data and produces Analytics. The term "Analytics" means user profiles and statistics, metrics, abstractions and other analyses that are based on or derived from the Service, Service Data and/or your use of the Service (including without limitation, measurements of Service usage and performance), which are developed in a manner that does not disclose your identity (such as, in the aggregate with other data, results and measurements) and that does not disclose any specific Service Data (unless in aggregated or de-identified form).
Velasa Sports will access, record, collect, copy, store, process, analyze and use your Service Data: to communicate with you (including sending emails about our store, new Products and other updates); provide the Service to you; to develop, improve, extend and test the Service (and underlying technology platforms); to design, develop and produce Analytics; and to disclose, distribute and transmit Service Data to our third party service provides, solely for the purpose of them providing to us services that are related to the Service. Velasa Sports will use Analytics to market and promote Velasa Sports, our Products and the Service.
SECTION 4 – YOUR CONSENT
You may withdraw your consent for us to contact you, and to continue collecting, using and disclosing your personal information, at any time, by contacting us at email@example.com or mailing us at: Velasa Sports, Inc., 30 Sudbury Road, Acton, Massachusetts 01720, USA.
SECTION 5 – DISCLOSURE AND SHARING OF SERVICE DATA
Velasa Sports does not rent or sell Service Data to outside marketers.
For clarity, we may share your Service Data with trusted service providers that need access to your information to provide operational or other support services for us. These providers must agree to comply with terms and conditions that are consistent with our privacy and data security policies.
We may also partner with third party organizations to provide special programs or offers to Velasa Sports / Sparx Hockey customers, in which case we may disclose to that organization information we collect, such as your name and contact information. Any such partnerships will be communicated and/or disclosed prior to placing an order to purchase Products from us. If you elect not to participate in such special programs or offers, you reserve the right to deny such sharing of information.
SECTION 6 - E-COMMERCE VENDOR
Our store, which is located at the Site, is currently hosted by Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our Products to you. Your data is stored through Shopify’s data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
SECTION 7 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use, and disclose your Service Data to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are required to provide to them for your purchase-related transactions.
When you click on links on the Site, they may direct you away from our Site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 8 - SECURITY
Information collected by Velasa Sports is stored in operating environments that are secured using commercially available tools and procedures, and which are not made generally available to the public. Unfortunately, no data transmission over the Internet and/or wireless networks can be guaranteed to be 100% secure. As a result, Velasa Sports cannot unequivocally guarantee the security of any information you provide, and you do so at your own risk. Once Velasa Sports receives your information, we will make reasonable efforts to ensure its security on our systems.
If you provide credit card information, it will be encrypted using secure socket layer technology (SSL) and stored with an AES-256 encryption.
SECTION 9 - COOKIES
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not. _session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc). _shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits _shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer. cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart. _secure_session_id, unique token, sessional storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
SECTION 10 – DO NOT TRACK
Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities, over time and across different websites.
When you turn on the Do Not Track function in your browser, Velasa Sports stops collecting the information from your browser that allows us to tailor the Service specifically to you and to develop valuable Analytics. Do Not Track signals are set on a browser-by-browser basis, so you must set them on every browser you use if you do not wish to be tracked.
For clarity, this is just our Do Not Track policy. Velasa Sports cannot and does not make any promise about how third parties react when you set the Do Not Track signal on your browser. In addition, the Do Not Track signal does not apply to the use of information collected prior to such request.
SECTION 11 - CALIFORNIA RESIDENTS
Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents who provide personal information in obtaining products or services from Velasa Sports are entitled to request and obtain from us once a calendar year information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year (e.g., requests made in 2016 will receive information regarding 2015 sharing activities). If you are a California resident and would like a copy of this information, please submit a written request to:
Velasa Sports, Inc.
Attn: California/Shine the Light
30 Sudbury Road
Acton, MA 01720, USA
SECTION 12 - BUSINESS TRANSFERS
SECTION 13 - NON-US USERS
SECTION 15 - QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at firstname.lastname@example.org or by mail at
Velasa Sports, Inc.
Attn: Compliance Officer
30 Sudbury Road
Acton, Massachusetts 01720, USA