1. Who We Are and How to Contact Us
The data controller is White Sports Ventures, LLC. For questions about this policy, to exercise your rights, or to report a concern, contact certification@whitesportsventures.com.
2. Information We Collect
2.1 Information you provide
- Account and application data: name, email, phone number, location, coaching background, certifications, age-group and setting experience, motivation, and references.
- Program work product: quiz responses, assignment submissions, capstone deliverables, reflections, and reviewer feedback tied to your record.
- Billing information: name and billing address. Card numbers are collected directly by our payment processor (Stripe) and are never stored on our servers.
- Support and contact messages: the content of any messages you send us and any attachments you include.
2.2 Information we collect automatically
- Usage and device data: IP address, browser type, operating system, pages viewed, referring URL, and session timestamps.
- Cookies and similar technologies: as described in our Cookie Policy.
2.3 Information we receive from third parties
- Authentication providers: if you sign in with a third-party identity provider, we receive the basic profile information that provider returns.
- Payment confirmations: Stripe returns confirmation events, the last four digits of the card, and billing country.
3. How We Use Information
We use personal information to:
- create and operate your account and process your application;
- deliver curriculum, administer quizzes, grade assignments, and review capstone submissions;
- issue, verify, revoke, and renew credentials;
- process payments and handle refunds;
- communicate with you about cohort logistics, reviewer feedback, and credential status;
- detect, investigate, and prevent fraud, abuse, or violations of our Terms or Code of Conduct;
- improve the curriculum, rubrics, and platform — using aggregated or de-identified data wherever possible;
- comply with applicable law and respond to lawful requests.
4. Legal Bases (EEA/UK Users)
If you are in the EEA or UK, our legal bases are: performance of a contract (operating the program you enrolled in), legitimate interests (security, fraud prevention, improving the Service), consent (for non-essential cookies and marketing communications), and legal obligation (tax, accounting, and anti-fraud rules).
5. How We Share Information
We do not sell personal information. We share it only with:
- Service providers who operate the platform on our behalf under contract — hosting (Vercel), database and auth (Supabase), email (Postmark/Resend), and payments (Stripe);
- Reviewers engaged by WSV to evaluate your submissions, subject to confidentiality obligations;
- The public credential registry at /verify, which displays your name, credential type, issue date, and status so clubs and parents can verify authenticity;
- Authorities and advisors where required by law or necessary to protect our rights, users, or the public; and
- Successors in the event of a merger, acquisition, or asset sale, subject to this policy.
6. International Transfers
WSV is based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
7. Data Retention
We retain personal information for as long as your account is active and for a reasonable period after closure to comply with legal obligations, resolve disputes, and support credential verification. Typical retention periods:
- Application records, submissions, and credentials: seven (7) years after credential expiry or denial — long enough to support verification claims and credentialing-body audits.
- Financial records: seven (7) years for tax and accounting compliance.
- Support messages: two (2) years from last interaction.
- Server logs: ninety (90) days.
8. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, role-based access control, row-level security on candidate data, and routine security reviews. No system is perfectly secure; if we become aware of a breach affecting you, we will notify you as required by applicable law.
9. Your Rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. California residents have the specific rights described in Section 11 below. You may also lodge a complaint with a data protection authority.
To exercise a right, email certification@whitesportsventures.com or use the data-request tools in your account settings. We respond within 30 days (extendable to 90 for complex requests). We may need to verify your identity before acting on a request.
10. Children
The Service is not directed to children under 18, and we do not knowingly collect personal information from minors. If you believe a minor has provided personal information, contact us and we will delete it.
11. California Residents (CCPA/CPRA)
In the twelve months preceding this policy, we have collected the categories of personal information described in Section 2 and disclosed them for the business purposes described in Section 5. We do not sell or share personal information for cross-context behavioral advertising. California residents may request disclosure of the categories and specific pieces of personal information we hold, deletion of that information (subject to exceptions), and correction of inaccuracies. You may also designate an authorized agent. We will not discriminate against you for exercising these rights.
12. Changes to This Policy
We may update this policy from time to time. When we do, we will bump the version number at the top of this page and update the effective date. Material changes will be communicated to active candidates by email.