1. Scope and roles
This Privacy Policy explains how Nabbol Athletics collects, uses, discloses, retains, and protects personal information through its websites, applications, and services. Nabbol Athletics acts as the operator for account, subscription, security, and platform data. Athletic organizations and private coaches generally control the athlete, guardian, staff, team, event, attendance, and performance records they enter, and Nabbol Athletics processes those records to provide the service.
2. Information collected
We may collect account and contact information; organization and role information; athlete and guardian profiles and relationships; age, gender, program interests, team assignments, attendance, event, location, and performance information; photographs and uploaded files; subscription and transaction records; support and contact-form messages; device, browser, IP address, security, authentication, and usage data; and choices such as language and theme preferences. Payment-card details are generally collected directly by the payment provider rather than stored by Nabbol Athletics.
3. Sources of information
Information comes from organization owners, staff, coaches, athletes, guardians, other authorized users, identity and payment providers, devices and browsers, and activity generated while the service is used. Organizations decide which authorized users may create or update participant records.
4. How information is used
We use information to create and administer accounts and organizations; provide registration, team, event, attendance, billing, communication, and analytics features; authenticate users and enforce permissions; process subscriptions; provide support; communicate service and security notices; maintain, troubleshoot, and improve the service; prevent fraud and abuse; comply with law; and protect users, organizations, Nabbol Athletics, and the public.
5. Legal grounds and organization instructions
Depending on location, processing may be based on performance of a contract, legitimate interests, consent, compliance with law, or protection of vital interests. Where an organization controls participant records, Nabbol Athletics processes those records under the organization’s instructions and service agreement. Organizations are responsible for their own notices, lawful basis, and consent obligations.
6. How information is disclosed
Information may be disclosed to authorized members of the relevant organization; guardians or participants according to configured relationships and permissions; vendors providing hosting, identity, payment, email, mapping, analytics, security, and support services; professional advisers; authorities where legally required; and parties to a merger, financing, acquisition, or transfer subject to appropriate safeguards. We do not sell personal information for money or use athlete information for behaviorally targeted advertising.
7. Children and minors
The service supports youth athletic programs but is intended to be configured and administered by authorized adults. Organizations and guardians must provide required notices and obtain any required parental consent before a child’s personal information is collected. A verified parent or guardian may ask the relevant organization to review, correct, delete, or stop further collection of a child’s information, subject to legal and operational requirements. Nabbol Athletics will assist organizations with verified requests. The service must not be used to knowingly collect information directly from a child under 13 without a compliant parental-consent process.
8. Retention and deletion
We retain information only as long as reasonably necessary to provide the service, maintain required business and security records, resolve disputes, enforce agreements, and comply with law. Retention varies by record type and organization instructions. Organizations can request deletion or export subject to legal, safety, backup, fraud-prevention, and audit requirements. Child information should not be retained indefinitely and should be deleted when no longer needed for the stated athletic-program purpose.
9. Security
We use administrative, technical, and organizational safeguards designed for the nature of the information, including authentication, role-based access, tenant separation, encryption in transit, logging, and managed infrastructure. No system is completely secure. Organizations and users must protect credentials, use appropriate permissions, and report suspected incidents promptly.
10. Your choices and rights
Depending on location and relationship to an organization, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, and to withdraw consent. Requests concerning organization-controlled participant records should first be directed to that organization. Requests concerning platform-controlled data may be submitted through the Contact page. We may verify identity and authority before acting.
11. International processing
The service and its providers may process information in countries other than the user’s country. Where required, Nabbol Athletics will use recognized transfer safeguards. Organizations are responsible for determining whether their use of the service is permitted in the locations where they operate.
13. Version history and policy changes
Each published Privacy Policy has a version number and effective date. Material changes will be communicated through the service or another reasonable method, and fresh consent will be requested where required. Previous published versions remain available from the public Privacy Policy page.
14. Contact and required production details
Privacy questions and requests may be submitted through the Nabbol Athletics Contact page. Before production launch, this policy must be reviewed by qualified counsel and completed with the operator’s legal entity name, postal address, privacy email, telephone number, data-protection contact where required, service-provider list or categories, specific retention schedule, operating jurisdictions, and procedures for verified parental and regional privacy requests.