Privacy Policy

Crush FC Inc. runs the Crush F.C. youth soccer club in Burlington, Ontario. Our privacy officer is responsible for how we handle personal information and answers every privacy question.

We collect what we need to run the club: guardian names and contact details, each child's name and birth year, the program and team, emergency contacts, consents, payment records and messages you send us.

We use this information to register players, place them on teams, share schedules, collect fees, keep players safe and send the emails you agree to receive.

We ask for your consent when you register. Newsletter emails and media consent are optional and separate, and you can change them at any time in the family portal or by email.

We share information only with the services that help us run the club: Supabase stores our database and files, Vercel hosts the website, Stripe processes online payments and Resend sends our emails.

Coaches see the rosters and emergency contacts for their own teams. We never sell personal information, and our public pages never show a player's name.

Our database and file storage sit in Canada, and the website's server code runs in Montreal. Stripe and Resend may process some information in the United States, where it is protected by their own security and privacy commitments.

Families who registered interest and never enrolled are deleted after 24 months without activity. Payment records are kept for 7 years, as tax law requires. Safety reports and coach screening records follow the club's retention policy.

We collect information about children only from their parents or guardians. Photos of children appear only with media consent, and we never publish a child's name with a photo.

We protect information with encryption, strict access by role, sign in codes in place of passwords, and an audit log of every staff change. Card and bank details are collected by Stripe and never reach our servers.

You can see most of your information in the family portal. To request a copy, a correction or deletion, use the contact form or email admin@crushfc.ca. We reply within 30 days and keep only the records the law requires.

If a breach of our security safeguards creates a real risk of significant harm, we report it to the Office of the Privacy Commissioner of Canada and tell affected families as soon as possible.

We update this policy when our practices change. The date at the bottom of this page shows when it last changed, and we tell families by email about any important change.

Questions about privacy go to our privacy officer at admin@crushfc.ca, and we reply within 2 business days. If you are unhappy with how we handled your information, please tell us first so we can put it right.

You can also contact the Office of the Privacy Commissioner of Canada, which oversees how organizations in Canada handle personal information.