Privacy Policy

1. About This Policy

Sportster Inc. (“Sportster,” “we,” “us,” or “our”) is committed to protecting your privacy in accordance with the BC Personal Information Protection Act (PIPA, SBC 2003 c. 63) and, where applicable, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Sportster platform.

2. Information We Collect

We collect the following categories of personal information:

• Account information: Name, email address, phone number, and password (stored as a hash)
• Profile information: Profile photo, sports preferences, player profile details
• Booking information: Venues booked, booking dates, booking history
• Payment information: Payment is processed by Stripe, Inc. We do not store credit card numbers. We receive only a payment confirmation token.
• Location data: City/region (for venue recommendations), and optional precise location if you choose to enable it
• Device and usage data: IP address, browser type, pages visited, and usage patterns (for analytics and security)
• Venue Operator information: Business name, business licence number, GST/HST number, bank account details for Stripe payouts

3. How We Use Your Information

We use your personal information to:

• Create and manage your account
• Process bookings and payments
• Share your booking details with the relevant Venue Operator
• Send booking confirmations, receipts, and service-related communications
• Send marketing emails (with your express consent under CASL)
• Improve the Platform through analytics
• Comply with legal obligations
• Detect and prevent fraud and abuse

4. Legal Basis for Collection

Under BC PIPA, we collect personal information with your consent, or where permitted by law (e.g., to fulfil a contract with you, or to comply with a legal obligation). By creating an account and accepting these terms, you consent to the collection and use of your personal information as described in this Policy.

5. Sharing Your Information

We share your information only as necessary:

• Venue Operators: When you book a venue, we share your name, phone number, and email with the Venue Operator to facilitate your booking.
• Stripe, Inc.: Payment processing. Stripe is PCI-DSS Level 1 compliant. Review Stripe's Privacy Policy.
• Supabase, Inc.: Our database infrastructure provider. Data may be stored on servers located in the United States. See cross-border transfer notice below.
• SendGrid (Twilio): Email delivery service for transactional and marketing emails.
• Legal authorities: Where required by Canadian law or valid court order.

We do not sell your personal information to third parties.

6. Cross-Border Transfer

Some of our service providers (including Supabase, Stripe, and SendGrid) are located in the United States. When we transfer your personal information outside Canada, we take reasonable steps to ensure it receives comparable protection, including contractual safeguards. By using the Platform, you acknowledge that your information may be transferred to and stored in the United States, subject to US privacy laws. This transfer is made pursuant to PIPEDA's cross-border transfer provisions.

7. Marketing Communications (CASL)

We send commercial electronic messages (marketing emails) only with your express consent, as required by Canada's Anti-Spam Legislation (CASL). You may withdraw your consent at any time by clicking “Unsubscribe” in any marketing email, or by contacting us at support@sportsters.ca. Transactional messages (booking confirmations, receipts, security alerts) are sent based on our contractual relationship with you and are not subject to CASL consent requirements.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We retain booking records for a minimum of 7 years for financial and tax compliance purposes. You may request deletion of your account at any time; we will delete or anonymize your personal data within 30 days, except where retention is required by law.

9. Your Rights (BC PIPA s.23–24)

Under BC PIPA, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal information (subject to legal retention obligations)
• Withdraw consent for non-essential uses
• File a complaint with the BC Office of the Information and Privacy Commissioner (OIPC) at oipc.bc.ca

To exercise these rights, contact our Privacy Officer at admin@sportsters.ca.

10. Security

We implement industry-standard security measures including encrypted data storage, TLS encryption in transit, and access controls. However, no system is completely secure, and we cannot guarantee the absolute security of your information.

11. Children's Privacy

The Platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. Users between 13 and 18 require parental/guardian consent.

12. Contact Our Privacy Officer

For privacy-related inquiries, contact:
Privacy Officer, Sportster Inc.
Email: admin@sportsters.ca
BC PIPA Complaints: BC Office of the Information and Privacy Commissioner (oipc.bc.ca)