Privacy Policy

We collect only what we need to run our programs and your account:

• Account details — your name, email address, phone number, and password credentials when you create an account.
• Participant details — the names and, where relevant, ages of the children or participants you register, so we can place them in the correct program, camp, drop-in, or party.
• Booking and registration history — the field rentals, program and camp registrations, drop-ins, and parties you book, along with attendance and related notes.
• Payment information — card payments are processed by Stripe. We do not store full card numbers on our systems; we retain a tokenized reference, the card brand and last four digits, and a record of amounts charged, refunded, and owing.
• Waivers and consents — signed liability waivers and the marketing or communication consents you provide.
• Communications — emails, SMS messages, and contact-form or support messages exchanged with us.
• Technical and usage data— device, browser, and usage information collected automatically through analytics and security tooling (see “Cookies and analytics” below).

• To create and manage your account and process your bookings, registrations, and parties.
• To take payment, issue receipts and invoices, and manage balances, credits, and refunds.
• To send you transactional messages such as confirmations, reminders, schedule changes, and receipts.
• To keep participants safe — verifying waivers and contacting you about a session your child is attending.
• To meet our legal and tax obligations, including records the Canada Revenue Agency requires us to keep.
• To send marketing messages about programs, camps, and offers — only where you have consented, and you may withdraw consent at any time.
• To maintain the security of our site and prevent fraud and abuse.

We collect, use, and disclose your personal information with your consent. By creating an account and using our services you consent to the handling of your information as described in this policy. For marketing email and SMS, we rely on your express consent and honour unsubscribe and opt-out requests promptly, as required by CASL. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us (note that withdrawing consent may limit our ability to provide certain services).

Accounts are held by a parent or guardian, who provides and manages the information for the children they register. We collect children's information only from the registering adult and use it solely to deliver and administer the programs those children are enrolled in. If you believe a child's information has been provided without appropriate authority, please contact us and we will correct or delete it.

We share personal information only with the service providers that help us operate, and only as needed for them to perform their function:

• Stripe — payment processing.
• Supabase — database, authentication, and file storage.
• Resend — transactional and marketing email delivery.
• Quo — SMS message delivery.
• Google Analytics — aggregate website usage measurement.
• Cloudflare — security, bot protection, and content delivery.

Each provider handles your information under its own privacy and security commitments. We do not sell your personal information. We may also disclose information where required by law, to enforce our agreements, or to protect the rights, safety, and property of our participants, staff, or the public.

We use essential cookies to keep you signed in and to operate the site. We use Google Analytics to understand how the site is used in aggregate, which may set its own cookies. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the site from working.

Some of our service providers store and process data on servers located outside Canada, including in the United States. Where that happens, your information is subject to the laws of those jurisdictions and may be accessible to their courts, law-enforcement, and regulatory authorities. We take reasonable steps to ensure our providers protect your information to a comparable standard.

We keep personal information only as long as needed for the purposes above or as required by law:

• Financial and transaction records are retained for seven (7) years to meet Canada Revenue Agency requirements.
• Inactive client profiles are retained for up to three (3) years after your last activity, after which they are deleted or anonymized.
• Marketing consent and unsubscribe records are kept as long as needed to honour your choices.

We use encryption in transit, access controls, and reputable providers to safeguard your information. Card data is handled by Stripe under PCI-DSS standards. No system is perfectly secure, but we work to protect your information and to limit access to staff who need it. In the event of a privacy breach posing a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

Under PIPEDA and BC PIPA you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Withdraw consent to our use of your information, subject to legal and contractual limits;
• Request deletion of your information, subject to our legal retention obligations;
• Ask questions or make a complaint about how we handle your information.

To exercise any of these rights, email us at info@full90.ca. We will respond within the timeframes required by law.

We may update this policy from time to time. We will revise the “Last updated” date above and, where changes are significant, take reasonable steps to notify you.

Questions, requests, or complaints about your privacy can be directed to our Privacy Officer:

Full 90 Soccer Centre — Privacy Officer
110-1680 Savage Rd., Richmond, BC V6V 3A9
info@full90.ca · 778-767-4600

See also our Terms of Service.