PRIVACY POLICY

P&I WeSports OG respects your privacy and is committed to protecting your personal information in accordance with the EU General Data Protection Regulation (GDPR).

We may collect:

• Parent/guardian name
• Parent email address
• Parent telephone number
• Child's name
• Child's date of birth
• Emergency contact information
• Dietary requirements
• Allergy information
• Registration information
• Payment information processed securely through Stripe
• Photo consent preferences
• Collection permission (Home Alone), issued T-shirt size and delivery status of important messages
• Verification and security records and newsletter preferences
• Website usage information
• Cookies and analytics data

We process personal data to:

• Register participants
• Organise camps and academies
• Contact parents
• Process payments
• Provide customer support
• Meet legal obligations
• Improve our services
• Send important camp information

Links to update child details and reuse information for another registration require a code sent to the recorded parent's email address before saved information is shown. Verification lasts for a short session. Details links expire and can be replaced or revoked by the academy. A forwarded link alone is not enough to view saved child information.

Please protect your email account and do not share verification codes. Parents can review and update saved details; changes are recorded and the academy is notified. Parents with more than one child choose the relevant child.

Authorised staff and coaches have access to information needed for organisation and safety. Attendance sheets can contain names, contact and emergency numbers, allergies, dietary notes and photo and collection permissions, and can be printed. They are intended for activity supervision, not for sharing with other families.

We use Lovable Cloud for website operation, storage and sign-in, Gmail through a connected service for email delivery, and Stripe for online payments. These services process information needed for their respective tasks. Child-detail change notifications direct staff to the protected admin area rather than emailing health details or parent editing links.

Photo and video consent, emergency medical-treatment permission and Home Alone are separate optional choices. Home Alone permits a child to leave the gym without a guardian after a session; without that permission the child must be collected. Permission for emergency treatment is not a separate consent to health-data processing. Acknowledging that you have read this policy is also not blanket consent for every use of data.

Important registration, payment and booked-activity messages are separate from promotional emails. Promotional emails include a personal opt-out link. Opting out stops promotions, not necessary messages about your child's activities. Staff cannot reverse an opt-out through newsletter administration.

A previous registration alone is not treated as newsletter consent by the new delivery service. Historically imported contacts are held for a permission review before further promotional campaigns.

Payments are securely processed by Stripe.

WeSports Academy does not store credit card information.

During camps and programmes we may take photographs and videos. We request separate optional parental permission for promotional use. Parents can change their photo preference in the verified child-details form or contact us. For an image already published, please provide its link or a description so we can review it.

Verified parent access uses a necessary short-lived session cookie. It is not accessible to browser scripts and is transmitted securely over HTTPS.

The website also uses browser storage for:

• Your selected language
• Gallery image selection during an open session
• Authorised staff sign-in; session information can remain stored until sign-out

Lovable provides visitor statistics for published websites, such as page views, visit duration, country and device type. The exact hosting setting and any additional cookies or storage use are still being verified. Source-code checks have not identified embedded advertising trackers; this does not confirm every operation on the published website.

You can manage cookies and website storage through your browser settings. Authorised staff should sign out on shared devices.

Registration records are currently not automatically deleted at the end of the school year. Expiring parent links stop access through those links; they do not delete the underlying registration records. Specific retention periods for each data category are still under review.

You can ask us to review and delete information that is no longer needed. Invoices and other legally required records may need to be retained; we will explain any applicable limitations.

Under the GDPR you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion
• Restrict processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Austrian Data Protection Authority

Questions regarding privacy may be directed to:

info@wesportsacademy.com