Privacy Policy

TRSA (Terwillegar Riverbend Soccer Association) ("we", "us", "our") operates trsasolstice.com. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and services.

The website is powered by Sports Event Zone, a platform that provides event management tools. Both the Event Organizer and Sports Event Zone are responsible for the handling of your data as described in this policy.

Account Information

When you create an account, we collect your name, email address, username, and password. Your password is stored as a one-way cryptographic hash and cannot be read by anyone, including us.

Team & Roster Data

When you register a team, we collect team details (name, age group, pool) and roster information (player names, jersey numbers, dates of birth where required). You may also upload official roster documents (PDF files).

Payment Information

Credit card payments are processed by Stripe, a PCI-compliant payment processor. We do not store your credit card number, expiry date, or security code on our servers. We retain only transaction records (amount, date, status).

Contact Information

When you submit the contact form or register a team, we collect your phone number. If you subscribe to email updates, we store your email address.

Usage Data

We automatically collect your IP address, browser type, and pages visited for security purposes (e.g., rate limiting, spam prevention) and to improve the website.

We use the information we collect to:

• Manage event registration, team rosters, and scheduling.
• Process payments and send payment confirmations.
• Communicate with you about your team, schedule changes, and event updates.
• Display public-facing information such as team names, schedules, scores, and standings.
• Prevent spam and abuse (rate limiting, honeypot detection, IP logging).
• Improve the platform and troubleshoot issues.

We share your information with the following parties and no others:

• Event Organizer (TRSA (Terwillegar Riverbend Soccer Association)) — receives team registrations, roster data, and contact form submissions for the purpose of running the event.
• Stripe — processes credit card payments. See Stripe's Privacy Policy.
• Postmark — delivers transactional emails (account activation, password reset, notifications). See Postmark's Privacy Policy.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Account data is retained for as long as your account exists. You may request account deletion at any time by contacting us.

Event-related data (team registrations, rosters, scores, standings) is retained as a historical record of the event. Contact form submissions are retained for the duration of the event lifecycle.

Email subscription data is retained until you unsubscribe or request removal.

You have the right to:

• Access your personal data — view your account details and team information on your dashboard.
• Correct inaccurate information — update your profile, team details, and roster through the platform.
• Delete your data — request account deletion by contacting us at [email protected].
• Unsubscribe from emails — click the unsubscribe link in any email, or manage your preferences on the platform.

This platform is operated from Canada and is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have the right to:

• Know why your personal information is being collected.
• Expect your information to be collected, used, and disclosed only for reasonable purposes.
• Access your personal information and challenge its accuracy.
• Withdraw consent to the collection, use, or disclosure of your information (subject to legal and contractual restrictions).

If you believe your privacy rights have been violated, you may file a complaint with the Office of the Privacy Commissioner of Canada.

If you are located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) provides additional rights regarding your personal data. While most of our users are based in Canada, we respect these rights for all participants.

Our lawful bases for processing your data are:

• Contract performance — processing necessary to provide the services you registered for (team registration, scheduling, scoring).
• Legitimate interests — security, fraud prevention, and platform improvement.
• Consent — email subscriptions and optional communications (which you may withdraw at any time).

As an EEA resident, you additionally have the right to data portability, the right to erasure ("right to be forgotten"), and the right to lodge a complaint with your local data protection supervisory authority.

Our use of cookies and similar technologies is described in our Cookie Policy.

We take reasonable measures to protect your personal information, including:

• Passwords stored using industry-standard bcrypt hashing (one-way encryption).
• HTTPS encryption for all data transmitted between your browser and our servers.
• CSRF (cross-site request forgery) protection on all forms.
• Rate limiting and spam prevention on public-facing endpoints.

No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

This platform is used to manage youth sports events. We collect player names, jersey numbers, and dates of birth for roster and eligibility purposes. This information is submitted by team staff (adults), not directly by minors.

We do not create accounts for minors or collect personal information directly from children. Parental or guardian consent is assumed through the team staff member's act of registering the team and submitting the roster.

If you believe a child's information has been submitted without proper authorization, please contact us at [email protected] and we will promptly remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

For privacy-related questions or to exercise your data rights, contact us at [email protected]. Our mailing address is P.O. Box 88053, Rabbit Hill P.O., Edmonton, Alberta, T6R 0M5.