At SportsData360 (operated by Gatch Analytics, LLC, “SportsData360,” “we,” “us,” or “our”), we are committed to respecting your privacy rights and protecting your personal data. This Privacy Policy describes what personal information we collect, how we use and share it, and the rights and choices you have regarding your information, in accordance with industry best practices and legal requirements. PLEASE READ THIS PRIVACY POLICY CAREFULLY. By using our website and services (collectively, the “Service”), you agree to the data practices described in this Policy. If you do not agree, please do not access or use the Service.

We maintain this Policy not only to comply with applicable laws (such as the GDPR in Europe and the CCPA/CPRA in California), but also to be transparent about our data practices in order to build trust with our users. We will update this Policy as needed to reflect changes in our practices or legal obligations. The Last Updated date at the end indicates the latest revision.

Categories of Information We Collect

We collect personal information from and about users in a few different ways: information you provide to us directly, information collected automatically (e.g. via cookies and analytics), and information from third parties. In the past 12 months, SportsData360 has collected (and in some cases disclosed) the following categories of personal information (as defined under relevant privacy laws, such as the California Privacy Rights Act):

• A. Identifiers: e.g. real name, email address, phone number, online identifier or username, Internet Protocol (IP) address. Collected: Yes – we collect basic identifiers like your name and contact details when you register an account or sign up for our services, and we collect device identifiers (such as IP address or cookie IDs) automatically through your use of our Service. Source: Provided directly by you (e.g., via forms you fill out) and automatically from your device or browser.
• B. Personal information under Cal. Civ. Code § 1798.80(e): e.g. contact details (name, physical address, telephone number), payment card number or financial information. Collected: Yes – we collect contact information like your name and email; we may collect your phone number and mailing address if you provide them. If you make purchases or payments through our Service, you will provide payment information (such as credit or debit card number and billing address), which is processed via our payment processor (e.g., Stripe). Source: Provided by you (when you register, subscribe, or complete transactions). (Note: We do not store full payment card details on our servers; these are handled by third-party payment processors.)
• C. Protected classification characteristics (under California or federal law): e.g. age (40 years or older), race, color, national origin, citizenship, religion, marital status, sex/gender, pregnancy status, veteran status, disability, etc. Collected: No – we do not request or intentionally collect this kind of sensitive demographic information about you. (Any age information we collect would only be to ensure compliance with age-related laws, as described under Children’s Privacy below.)
• D. Commercial information: e.g. records of products or services purchased, obtained, or considered; other purchasing or consuming histories or tendencies. Collected: Yes – if you purchase a subscription or other services from us, or if you have a transaction history on your account, we keep records of those purchases and interactions. We may also maintain records of services or content you have accessed or considered on our site (such as sports data or analytics tools you viewed). Source: Provided by you through your transactions with us, and recorded by our systems during your usage of the Service.
• E. Biometric information: e.g. genetic, physiological, behavioral, or biological characteristics that can be used to establish identity (fingerprints, faceprints, voiceprints, iris or retina scans, or other biometric identifiers), or biometric information processed for identification or health. Collected: No – we do not collect biometric identifiers or biometric information.
• F. Internet or other electronic network activity: e.g. browsing history, search history, and information regarding a consumer’s interaction with a website, application, or advertisement; device information (device type, operating system, browser type, application IDs); cookie and tracking information; and crash or performance data. Collected: Yes – when you use our Service, we automatically collect certain information about your device and usage of the site. This includes your IP address, device and browser type, pages or screens you view, how you interact with our site, and cookies or similar identifiers. We (and authorized third-party analytics and advertising providers) use cookies, pixels, and similar technologies to collect this information as you browse. Source: Your device or browser, automatically (via our website’s analytics tools and cookies).
• G. Geolocation data: e.g. precise physical location or movements. Collected: No – we do not actively collect precise geolocation data (such as GPS coordinates) from you. We may infer general location information (e.g. city or region) from your IP address for purposes such as analytics or fraud prevention, but we do not collect or use precise location data.
• H. Sensory data: e.g. audio, electronic, visual, thermal, olfactory, or similar information. Collected: No – we do not collect sensory information. For example, we do not record phone calls, and we do not solicit photos, videos, or audio recordings from users in the normal course of our Service.
• I. Professional or employment-related information: e.g. current or past job history or performance evaluations. Collected: No – our Service does not request or collect information about your professional background or employment, unless you choose to provide it for a specific reason (and in such cases, it would only be used for that context).
• J. Non-public education information (per the Family Educational Rights and Privacy Act): e.g. education records, student transcripts, or any information from educational institutions. Collected: No – we do not collect educational records or information subject to FERPA.
• K. Inferences drawn from other personal information: e.g. a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, or attitudes. Collected: Yes, potentially – we may analyze the information we have about you to infer your preferences or interests related to our services. For example, we might infer what sports or data insights you are interested in based on your browsing or purchase history, in order to personalize your experience. However, we do not create sensitive character profiles; any inferences are limited to your use of our Service (e.g. what content or features might be relevant to you). Source: Derived from your interactions with our Service (through internal analytics).
• L. Age or date of birth: (Not a category in the original CCPA list, but included here for clarity.) Collected: No – aside from ensuring a user is old enough to use the Service (see Children’s Privacy), we do not collect or store your precise date of birth or age as a standalone data point. We do not knowingly collect personal information from anyone under the age of 13, and we do not target our Service to minors (see below).
• M. Sensitive Personal Information: This refers to specific sub-categories of personal information designated as “sensitive” under certain laws (such as the CPRA). We outline these sub-categories and whether we collect them below for transparency:
  • M.1. Social Security, driver’s license, state ID card, or passport number: No. We do not ask for or collect government-issued identifiers from our users.
  • M.2. Account log-in credentials, financial account, debit card, or credit card number in combination with any required security code, password, or credentials allowing access to an account: Yes (limited use). If you create an account on our Service, we collect your login credentials (such as username/email and a password). If you make payments, you provide a credit/debit card number and security code or other payment information. However, we use a third-party payment processor (e.g. Stripe) to handle payment transactions, and we do not store your full payment card numbers or security codes on our systems. We only collect the necessary information to enable account access and payment processing, and use it only for those purposes (not for secondary uses).
  • M.3. Precise geolocation: No. As noted for category G, we do not collect precise geolocation data.
  • M.4. Personal information revealing racial or ethnic origin, religious or philosophical beliefs, or union membership: No. (This overlaps with Category C above; we do not collect this type of sensitive personal data.)
  • M.5. The contents of a consumer’s mail, email, or text messages, unless the business is the intended recipient of the communication: No. We do not access or collect the content of your personal communications. (If you communicate with us via email or support channels, those communications are received as intended, but we don’t scrape or collect your communications from other services.)
  • M.6. Genetic data: No. We do not collect genetic information.
  • M.7. Personal information collected and analyzed concerning a consumer’s health: No. We do not collect health or medical information.
  • M.8. Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation: No. We do not collect information about sexual life or orientation.

Summary of Sources: In general, the personal information we collect comes directly from you (for example, information you provide when you create an account, subscribe to a newsletter, enter information on our site, or contact us), automatically from your device (through cookies and similar technologies when you interact with our Service), or from service providers/third parties (for example, analytics providers or advertising partners may provide us with certain technical or usage data, and if you use a third-party login or integration, we might receive information from that third party with your consent). We do not purchase personal data about consumers from data brokers or unrelated third parties. We also avoid collecting types of data we don’t need – our policy is to clearly list the specific types of data we collect and not overwhelm you with irrelevant details. If our data collection practices change, we will update this Policy to include any new categories as needed.

How We Use Personal Information

We collect and use your personal information for specific, legitimate purposes in connection with operating and improving our Service. We do not use personal data for any purposes that are incompatible with the ones listed here. The purposes for which SportsData360 may use your information include:

• Providing and Improving the Service: To provide you with the features and services you request, such as creating and managing your user account, authenticating you when you log in, and delivering sports data, analytics, or other content. We use personal info to operate, maintain, and improve our website and services, ensuring they function properly and are optimized for user experience.
• Processing Transactions: To process payments or subscription orders you make. For example, if you subscribe to a paid plan or purchase a product, we will use your provided payment information to complete the transaction (via our payment processor) and record your purchase. We also use your information to fulfill any other requests you make (such as sending you a report or granting access to premium content).
• Communicating with You: To communicate with you about your account or transactions, send you confirmations, invoices, technical notices, updates, security alerts, and support/administrative messages. We may also respond to your inquiries, support requests, or feedback. Your email address and/or phone number (if provided) are used to contact you for customer service purposes or to send critical notices about the Service.
• Marketing and Promotions: To send you news and updates about new services, features, or special offers if you have opted to receive such communications. For example, we may use your name and email to send newsletters or promotional materials about our latest sports data insights or partner offers, in accordance with your marketing preferences. (You can opt out of marketing emails at any time by using the unsubscribe link or contacting us.) We may also use information about your use of the Service to tailor marketing content or advertising so that it is more relevant to your interests, but only in accordance with applicable law and with appropriate notice/consent.
• Analytics and Product Development: To analyze usage of our website and services, in order to understand how users interact with our Service, which features are popular, how the Service is performing, and where improvements are needed. We and our analytics providers (such as Google Analytics) process usage data (IP address, device info, on-site actions, etc.) to generate insights that help us optimize user experience and develop new features or content. This allows us to make data-driven decisions to improve our offerings and fix issues. We strive to be transparent about these “service improvement” uses and explain how they benefit you, rather than just vaguely citing “service improvement”.
• Personalization: To personalize your experience on our website. For instance, we might remember your preferences (e.g., favorite sports or teams) or customize the content and recommendations shown to you based on your past interactions. Any behavioral data used to improve ad targeting or content recommendations is disclosed here – we want to be clear if we tailor your experience or advertisements based on your usage patterns. Personalization is intended to make the Service more useful and relevant to you.
• Advertising (Interest-Based Ads): To provide interest-based advertisements and sponsorship content in a manner consistent with your preferences. If we display ads on our Service (for example, via Google Ads or similar advertising networks), we or our advertising partners may use cookies and browsing data to serve you ads that are more likely to be relevant to you. This is sometimes called interest-based or cross-context behavioral advertising. (See “Interest-Based Advertising” below for more information and how you can opt out.) We do not share information with advertisers in a way that directly identifies you; rather, we may use and allow advertising partners to use cookies or device identifiers to show personalized ads on our site or on other sites. We disclose this purpose and obtain any required consent for the use of cookies for targeted advertising.
• Security and Fraud Prevention: To protect our Service and our users. We may use personal information (like device identifiers, IP addresses, and account activity) to detect, investigate, and prevent fraudulent transactions, spam, abuse, security incidents, and other harmful or unauthorized activities. This includes enforcing our Terms of Service, verifying user identity (if needed), and implementing security measures to safeguard the integrity of our systems and your data. We also may use your information as necessary to debug and fix errors in our Service.
• Compliance with Legal Obligations: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests. For example, we may use and retain certain information to fulfill our tax and accounting obligations, to respond to subpoenas or court orders, or to exercise or defend legal claims. If we are required by law to collect certain data (for instance, records of consents, or age verification in some cases), we will use it for that purpose. We also use personal information to comply with user data requests under privacy laws (e.g., to provide you with a copy of your data or delete your data when you exercise your rights – see Your Privacy Rights below).
• Other Purposes with Your Consent: If we ever need to use your personal information for a purpose materially different from the ones above, we will explain the purpose at the time of obtaining your consent. We will not use or disclose your personal information in new ways without informing you and, if required, getting your permission.

We use personal data only for the purposes described above and not for any discriminatory or unexpected purposes. By clearly specifying our “real-world” purposes for data use (such as marketing, personalization, or security), we aim to be transparent and avoid vague justifications. If you have any questions about why we need a certain piece of information, please contact us at any time (see Contact Us below).

How We Share and Disclose Personal Information

We understand the importance of your personal information and only share it in carefully considered ways. We do not sell your personal information to data brokers or third parties for their own monetary gain. However, we do share certain information with third parties under the following circumstances, in order to operate our business and provide our Service to you:

• Service Providers (Processors): We may share personal information with third-party service providers and contractors who perform services on our behalf and under our instructions. These providers help us run and support the Service and are contractually obligated to protect your information and use it only for the purposes of providing their services to us. Examples include:
  • Hosting and Infrastructure: We might use web hosting providers or cloud storage services to store our website and data. (Your personal data may be stored on their secure servers as part of our use of their services.)
  • Analytics Providers: We use third-party analytics tools (e.g., Google Analytics) to collect information about how users interact with our site. These analytics partners receive network identifiers and usage data from your browser (via cookies or similar) to provide us aggregate insights. (You can opt out of Google Analytics by installing Google’s opt-out browser add-on, or through any consent preferences we provide.)
  • Email and Communication Tools: If we send emails or newsletters, we may use an email marketing platform or service (for example, Mailchimp or similar) to manage our mailing lists. In that case, we share your email address and name with that provider solely for the purpose of sending communications. They are not allowed to use your information for their own marketing.
  • Payment Processors: When you make a purchase or subscription payment, your payment details are transmitted to our payment processor (such as Stripe). The payment processor will use your payment information to process the transaction and will handle your data in accordance with their privacy policy. We share the minimum necessary information with payment processors (e.g., transaction amount, your name and card info) to complete the payment. We do not receive or store your full financial account numbers beyond what is needed for record-keeping (like the last four digits of your card, for instance).
  • Advertising Partners: If we partner with advertising networks (like Google AdSense/Ads or similar) to display ads, we may allow these partners to collect certain information from our site (via cookies or tags) to serve you targeted advertisements and measure their effectiveness. For example, an ad partner might record that a browser with your cookie visited a page about “football analytics,” which could help it later show you a relevant ad. These partners typically act as independent “controllers” of the data they collect via their cookies; however, we contractually require that they use such data only for providing services to us and not for their own unrelated purposes. (See Interest-Based Advertising below for more on advertising and your choices.)
  • Other Vendors: We may engage other vendors for services such as security (e.g., DDoS protection, fraud prevention), customer support tools (if you contact us through a support widget or form, the data might be processed by that tool provider), or market research. In all cases, these service providers only get the information necessary for their function and cannot use it outside of our instructions.

By transparently listing our third-party processors and integrations, we align with best practices to inform you about who else might handle your data. All such parties are bound by appropriate confidentiality and data protection agreements.

• Business Partners and Integrations: In some cases, we may integrate with or link to third-party services. For example, if you choose to log in via a third-party account (such as signing in with Google or Apple, if we offer that option), we would receive certain information from that third party (like your name and email from your Google profile) as permitted by you through that login process. Likewise, if our Service includes features from partners (such as a social media sharing feature or an embedded content from another site), those partners may receive certain data (like your interactions or impressions). We will disclose such relationships and obtain any necessary permissions. (As of the latest update, SportsData360’s integrations are limited; we will update you if we begin linking user accounts with any third-party services.)
• Legal and Safety Disclosures: We may disclose personal information when required by law or necessary to protect rights and safety. This includes situations such as:
  • Compliance with Laws: If we receive a subpoena, court order, or legal process demanding the disclosure of personal information, we may disclose data to the extent required by law. We will attempt to notify you of such requests when permissible.
  • Enforcing Our Rights: We may disclose information to enforce our Terms of Service or other agreements, or to investigate potential violations thereof.
  • Protecting Everyone’s Safety: If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of SportsData360, our users, or the public, we may share information. For example, we might share data with law enforcement or relevant authorities to investigate fraud or security threats, or to prevent imminent harm.
  • Corporate Transactions: If we merge with, are acquired by, or sell substantially all of our assets to a third party, or in the unlikely event of bankruptcy or reorganization, user information (including personal data) may be among the assets transferred to the new owner. In such a case, we would contractually require the new owner to honor the commitments we have made in this Privacy Policy regarding your personal information. We would also provide notice to our users (for example, by posting on our website or emailing you) if your data is transferred and becomes subject to a different privacy policy.
• With Your Consent: We may share your personal information with other third parties when you direct us to or with your explicit consent. For instance, if you ask us to share data with a friend, publish a testimonial with your name, or otherwise opt in to a specific data-sharing arrangement not covered above, we will do so in accordance with your instructions.

No Sale of Personal Information: SportsData360 does not sell your personal information for monetary consideration. In other words, we do not exchange your data with third parties for money. We also do not share your personal information for others’ independent use except as described in this Policy. However, we want to be transparent that the term “sell” under certain privacy laws (like the California CCPA/CPRA) is defined broadly to include sharing of personal information for targeted advertising or other valuable consideration. We do share some personal information with third-party advertising and analytics partners to enhance your experience and promote our services (as described above). This kind of sharing may be considered a “sale” or “sharing” under applicable law, even though we do not receive money in exchange. Specifically, if we allow advertising cookies or identifiers to be shared with third-party ad networks that use them to track your browsing across other sites for ad personalization, that could be deemed a “share” of data for cross-context behavioral advertising.

Your Opt-Out Rights: If you prefer that your personal information not be used for interest-based advertising purposes (i.e., if you want to opt out of any “selling” or “sharing” of your data as defined by law), you have the right to opt out – see Your Privacy Rights below for how to exercise this right. We honor Global Privacy Control signals and similar browser mechanisms as opt-out requests (see below). Importantly, we do not have actual knowledge that we collect, sell, or share personal information of consumers under 16 years of age, and we do not knowingly engage in such activities.

Categories of Information Disclosed: In the preceding 12 months, we have disclosed the following categories of personal information to service providers or other authorized third parties for the business purposes described:

• Identifiers (Category A) – shared with service providers (like email providers, payment and analytics processors) and advertising partners for the purposes above.
• Personal records (Category B, contact and payment info) – shared with payment processors (to complete transactions) and email/mailing vendors (to send communications).
• Commercial information (Category D, transaction records) – shared with payment and fulfillment processors (to facilitate services you’ve purchased) and internally used for analytics.
• Internet or network activity (Category F) – shared with analytics providers and advertising partners (via tracking technologies) for site analytics and advertising.
• Inferences (Category K) – used internally for personalization; not routinely disclosed externally except through advertising cookies as mentioned.
• Sensitive Info (Category M.2, e.g. login credentials and payment details) – login credentials are stored internally and not shared except with our authentication service or as needed for account security; payment card information is shared with our payment processor during transactions (and not retained by us). We only use sensitive personal information to perform necessary services on your behalf, such as processing your transactions and securing your account, and not for purposes like profiling or behavioral advertising. In other words, whenever we handle any sensitive personal data, we limit its use to what is necessary to provide the Service (as allowed by law).

We do not disclose categories of personal information that we do not collect (for example, we do not collect or disclose biometric data, so Category E remains not applicable). This mapping of categories and disclosures is intended to meet the comprehensive privacy notice requirements under laws like the CPRA.

Interest-Based Advertising and Analytics

Analytics: As noted, we use third-party analytics services (such as Google Analytics) on our website. These services use cookies and similar technologies to collect data about visitors over time and across our site (and sometimes other sites) for analytics purposes. The information collected may include your IP address, browser type, pages visited, time spent on pages, and other usage data. We use these analytics to understand website traffic and improve our Service. These third-party analytics providers process personal data according to their own privacy policies (for example, see Google’s Privacy Policy for details on Google Analytics data practices). You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on, or by adjusting your cookie preferences on our site.

Interest-Based Advertisements: We may allow third-party advertising companies to display ads on our Service or to manage our advertising on other sites. These companies may use cookies, pixel tags, and other tracking technologies to collect information about your activities on our website and other websites over time in order to provide you with targeted ads based on your interests. This practice is often referred to as online behavioral advertising or interest-based advertising. For example, if you visit pages on our site about certain sports or statistics, an advertising partner may recognize your cookie and show you an ad for a relevant product on our site or elsewhere.

We participate in these advertising activities to fund our Service and provide relevant content, but we also want you to be informed. The information collected for ad targeting may include data such as your visits to our site or other sites, your IP address and device information, and how you interact with our ads. Advertising partners may combine this information with information they collect from other sources to infer your interests and deliver more relevant ads.

For more information on how interest-based ads work and how you can opt out, you can visit the Network Advertising Initiative’s Consumer Opt-Out page or the Digital Advertising Alliance’s Consumer Choice page. These industry organizations provide tools to opt out of most behaviorally targeted ads. Please note that opting out of interest-based advertising through those mechanisms does not mean you will no longer see ads, only that those ads will not be personalized based on your perceived interests.

Opt-Out of Ad Cookies: If you prefer, you can also disable advertising cookies through our cookie consent banner or your browser’s settings. Many browsers allow you to block third-party cookies (which are often used for advertising). You can also clear your cookies periodically to reset identifiers. Keep in mind that if you clear cookies, any opt-out preferences (including cookies that store your opt-out choices) may also be cleared, so you might need to opt out again.

We make an effort to honor “Do Not Sell/Share” preferences. If you use our provided tools to opt out of personalized ads, or if you contact us to opt out (see Your Privacy Rights below), we will cease sharing your data with third-party advertising partners for targeted advertising purposes to the extent required by law. Additionally, as described in the next section, we will recognize certain browser-based opt-out signals as an exercise of your opt-out rights.

Your Privacy Rights

Depending on applicable law and your place of residence, you may have certain rights regarding your personal information. SportsData360 is committed to honoring these rights and providing you with control over your data. This section describes the rights that may be available to you (for example, under the California Consumer Privacy Rights Act (CPRA) or similar state laws, and other privacy regulations) and how you can exercise them. Even if you are not a resident of a jurisdiction that grants these rights by law, we may, in our discretion, accommodate your request (for instance, we generally strive to allow all users to access or delete their data upon verified request, where feasible, as a matter of good practice).

1. Right to Know / Access: You have the right to request that we provide you details about the personal information we have collected about you. This is sometimes called the Right of Access. In response to a verifiable request, we will provide you with information such as:

• The categories of personal information we have collected about you.
• The categories of sources from which we collected your personal information (e.g., directly from you, from your device via cookies, etc).
• The business or commercial purposes for collecting (and if applicable, sharing) your personal information. We have outlined these purposes in this Privacy Policy (see How We Use Personal Information above).
• The categories of third parties to whom we have disclosed your personal information (for example, our service providers, advertising partners, etc).
• The specific pieces of personal information we collected about you. This typically includes the actual data you provided (such as your name, email, phone number) and may include information like a copy of content you submitted or records of your activities on our Service that are linked to you.
• If applicable, the categories of personal information we have sold or shared and the categories of third parties to whom each category was sold or shared (however, as noted, we do not sell data for money; if we share data for advertising, we can disclose details of that upon request).

You may request a copy of the personal data we have on file for you, which we will provide in a readily usable format (generally electronic). This is often known as the right to data portability, meaning you can request your information in a format that can be transferred to another entity. We will provide this data to you via email or secure download. (Please note, for security, we will only provide personal data to the verified account owner or as legally required.)

2. Right to Delete: You have the right to request that we delete personal information we have collected from you (and direct our service providers to do the same), subject to certain exceptions. Once we receive and confirm a verifiable deletion request, we will delete (and instruct our processors to delete) your personal information from our records, unless an exception applies. For example, we may retain information as necessary to complete transactions or provide services you requested, to detect or prevent security incidents, to comply with legal obligations (such as maintaining certain financial records for tax/regulatory requirements), or other limited purposes permitted by law.

• Account Deletion: If you request deletion of your data, this may involve closing your account with us. Upon account deletion, we will remove your personal identifiers (name, email, etc.) and unlink you from any data we retain. However, we may retain transactional records or other necessary data without personal identifiers. For instance, we might keep records of purchases (without your name attached) for accounting, or keep server logs for security – but we would disassociate those from your identity. In essence, we strive to erase your identifiable information, while preserving only what we absolutely need for lawful or internal purposes.
• After we process a deletion request, your account will be deactivated/removed and you will lose access to the Service as a registered user. Please be aware that deletion is permanent and cannot be undone – you would need to create a new account to use our Service again, and your old data would not be retrievable.

3. Right to Correct: You have the right to request that we correct any inaccurate personal information we maintain about you. If you believe that any of your information in our records is incorrect or outdated (for example, an outdated email address or an incorrect name spelling), please contact us with the updated information. Upon verifying the request, we will correct our records and instruct any service providers who have received the inaccurate data to also make corrections. We want to ensure we maintain accurate, up-to-date information; you can also update some information by logging into your account profile (if such feature is available) and editing details directly.

4. Right to Know What is Sold or Shared / Right to Opt-Out: You have the right to know if we have sold or shared your personal information for valuable consideration, and to whom. As explained, we do not sell data for monetary payment. We do share some personal data with advertising partners for the purpose of targeted advertising (which the CPRA terms “sharing”). You have the right to opt out of this kind of data sharing. This is sometimes referred to as the “Do Not Sell or Share My Personal Information” right.

• Opt-Out of Sale/Sharing: If you wish to opt out of the sharing of your personal information for interest-based advertising, you may do so by using one of the following methods:
  • Opt-Out Mechanism on our Site: (If we have a “Do Not Sell or Share” link or toggle in our website footer or privacy settings, you can use that. [For example, if required, we would provide a “Do Not Sell or Share My Personal Information” link – in this hypothetical policy, you can contact us directly to opt out.])
  • Contact Us Directly: You can always opt out by emailing us at support@sportsdata360.com with the subject “Opt-Out of Sale/Sharing” and providing your name, associated account or email, and a statement that you wish to opt out of targeted advertising data sharing. We will process your request as an opt-out of personal info “sale/sharing” in our systems.
  • Browser Signals (Global Privacy Control): We recognize opt-out preference signals, such as the Global Privacy Control (GPC), as a valid opt-out of sale/sharing request. GPC is a setting or browser extension that broadcasts a “do not sell or share” signal when you visit websites. If our site detects a GPC signal from your browser, we will treat it as if you had submitted an opt-out request for your browser/device, and will apply it to the extent required by law. (Learn more about GPC at globalprivacycontrol.org.)

Once you opt out, we will stop sharing your personal information with third parties for targeted advertising. Note that you may still see advertisements, but they will be generic and not personalized using your data. Also, if you opt out and later use our Service from a different device or browser, or if you clear cookies, you may need to opt out again for that device/browser or if cookies were erased (because some opt-out preferences are stored via cookies).

5. Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information about you (as defined by law), you may have the right to tell us to limit the use or disclosure of that sensitive data to only what is necessary to perform the services or provide the goods. In our case, the only sensitive information we handle are your login credentials and payment information, which we already use only for their necessary purposes (account access and payment processing, respectively). We do not use sensitive info like account passwords or payment details for any secondary purposes (like profiling or marketing). Nevertheless, if you wish to ensure we continue to limit use of your sensitive info, you can contact us with such a request and we will confirm that we are in compliance. We do not use any sensitive personal information (as listed in Category M above) for inferring characteristics about you or for any purpose outside of what is required to provide the Service.

6. Right of No Retaliation / Non-Discrimination: We will not discriminate or retaliate against you for exercising any of your privacy rights. This means that if you choose to exercise your rights (such as opting out of data sharing or requesting deletion), we will not deny you our services, charge you different prices, or provide a lesser quality of service just because you exercised your rights. For example, we won’t suddenly start charging you (or increase your price) for a service that was previously free, or downgrade your service level, just because you made a privacy request. If you are a paid subscriber and you request deletion, we might have to cancel your service (since we can’t provide it without your data), but we will do so in a fair and transparent manner (and it would result from the deletion itself, not as punishment). This right is provided to you under laws like the CCPA/CPRA to ensure you can freely exercise your privacy rights without fear of adverse consequences.

7. Right to Data Portability: As mentioned under the Right of Access, you may request a copy of the personal data that we have about you in a portable format. We will provide this data in a commonly used electronic format (such as CSV or JSON file, or PDF report) that you can easily use or transmit to another entity. You are entitled to request this up to two times per year free of charge, as per California law.

These rights may be subject to certain limitations and exceptions under applicable law. For example, if fulfilling your specific request would conflict with legal requirements or the rights of another individual, we may not be able to fully comply (we will inform you if that is the case). We may also need to retain certain information for record-keeping after a deletion request (as noted) or decline to provide certain sensitive information in an access request if we cannot verify your identity to a high degree of certainty.

Exercising Your Rights: To exercise any of the privacy rights described above, please contact us by email at support@sportsdata360.com. Please include your name and the email associated with your account (if you have one), specify which right you wish to exercise (e.g., “Right to Access – CCPA Data Request” or “Right to Delete Request”), and provide sufficient information for us to verify your identity. For instance, we may ask you to confirm certain details we have on file (like last four digits of your phone number, or recent transaction amount) to ensure you are the account holder. You can also send us your requests via mail to our postal address provided in the Contact Us section, or through any web forms or portals we may provide in the future for such requests.

• Verification: For your protection, we will need to verify your identity before fulfilling certain requests (especially access, deletion, or highly sensitive data requests). If you have an account and are logged in, verification may be automatic (since the request is coming from your authenticated account). If not, we may reach out for additional information. We will only use that additional information for verification purposes.
• Authorized Agents: If you are a California resident, you may designate an authorized agent to make requests on your behalf. If you choose to do so, we will require the agent to provide proof that you gave them signed permission to submit the request, and we may still ask you to verify your identity directly or confirm with us that you provided the agent permission. (This is to prevent fraud.) We will follow the requirements of the CCPA/CPRA for requests made by authorized agents.
• Response Time: We will respond to privacy requests within the time frame required by law. Under California law, that is generally 45 days, with the possibility of a 45-day extension when necessary (we’ll inform you if we need more time). For GDPR (if applicable), it’s generally one month, extendable by two months if needed. We aim to respond as quickly as possible, typically within 30-45 days. If we need more time, we will let you know the reason and extension period in writing.

Additional Rights for EU/EEA or Other Regions: While our primary user base is in the United States, if you are located in certain other jurisdictions (such as the European Union, United Kingdom, Brazil, etc.), you may have additional rights under local laws (e.g., GDPR, UK GDPR, LGPD). These can include the rights listed above and potentially: the right to object to processing (for example, objecting to processing based on legitimate interests), the right to restrict processing of your data, and the right to lodge a complaint with a supervisory authority. We will respect any applicable rights based on your jurisdiction. For instance, EU users have the right not to be subject to a decision based solely on automated processing (we do not engage in fully automated decision-making without human involvement that produces legal or similarly significant effects). If such users wish to exercise any EU-specific rights, they can also contact us at support@sportsdata360.com and we will assist in accordance with applicable law.

We have established procedures to ensure we can honor your rights and provide a method for you to exercise them easily. If you have any questions about your privacy rights or need assistance, please contact us (see Contact Us below). We take users’ privacy requests seriously and will not refuse or charge for valid requests that are not excessive.

(Note: If you are a California resident, you can also refer to the section California “Shine the Light” and Do Not Track below for additional information about your rights under specific California laws.)

California “Shine the Light” Law and Do Not Track

Shine the Light: Under California’s “Shine the Light” law (California Civil Code § 1798.83), residents of California who have an established business relationship with us have the right to request information about certain types of personal information we share with third parties for those third parties’ direct marketing purposes, once per calendar year. We do not currently share personal information with third parties for their own direct marketing use without your consent. In other words, we do not disclose your personal data to unrelated companies for their marketing mailings or advertising. Thus, a typical “Shine the Light” disclosure is not applicable, since we don’t engage in that type of information sharing. If you are a California resident, you can send us a request at support@sportsdata360.com to receive a report outlining any relevant sharing of your information with third parties for their direct marketing (as defined in the law) in the prior year. Given our practices, we expect to respond that we have not shared such information, or provide you with any required details if we have (but again, we presently do not do this kind of sharing).

Do Not Track (DNT): “Do Not Track” is a privacy preference that users can set in some web browsers to signal that they do not want to be tracked across different websites. California’s Online Privacy Protection Act (CalOPPA) requires websites to disclose how they respond to Do Not Track signals in their privacy policies. At this time, SportsData360 does not respond to browser Do Not Track signals, for a couple of reasons. First, there is currently no standard, consistent interpretation of the DNT signal across the industry – different websites and services treat DNT requests differently, and many third-party services (including some we use, like Google Analytics or advertising networks) do not honor DNT signals. Second, we already provide other means for you to control tracking (such as cookie consent tools and the Global Privacy Control for opting out, as described above). As a result, if you enable the DNT setting in your browser, we will not treat it as a formally binding request, and our site’s data collection (via cookies, etc.) will continue as described in this Policy. Instead, to opt out of tracking or targeted ads, please use the methods described in the Interest-Based Ads and Your Rights sections (e.g., adjust cookie settings, use GPC, etc.).

It’s important to note that companies are not required to honor DNT signals; they are only required to state whether they do or not. The best practice recommended by many organizations is to not claim compliance with DNT unless you can ensure all third parties on your site also comply. Since we cannot guarantee that for all our third-party integrations (which may not recognize DNT), we think it is more honest to disclose that we do not currently respond. We will re-evaluate this if a uniform standard for DNT response is established in the future.

For California residents: In summary, aside from the rights provided under the CPRA (which we detailed in Your Privacy Rights), you also have the right under CalOPPA to know our DNT practices (as stated above), and the right under Shine the Light to request certain disclosures (which, as noted, are largely inapplicable due to our practices). We are committed to complying with all applicable California privacy laws and have designed this Policy to meet those requirements.

Data Security

We take data security seriously and implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, and destruction. For example:

• We use encryption (HTTPS/TLS) to protect data in transit between your browser and our site. This means any personal information you submit (such as login credentials or payment details) is encrypted during transmission.
• We maintain access controls and authentication measures such as password protection and, where applicable, multi-factor authentication for administrative access. Only authorized personnel and service providers who need to process your data have access to it, and they are required to keep it confidential.
• Our databases are hosted in secure environments. We employ firewalls and monitoring to guard against external attacks. Regular security assessments and software updates are performed to address vulnerabilities.
• If we store passwords, we use secure hashing and never store them in plain text. Payment information is handled by PCI-compliant processors.
• We have an incident response plan in case of a security breach, and we conduct periodic reviews of our security practices to ensure they remain up to date.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. You should also take care with how you handle and disclose your personal information, and avoid sending sensitive information via insecure means.

In the event of a data breach that affects your personal information, we will notify you and/or the appropriate regulatory authorities as required by law. We also continually explore new technologies and methods to enhance your security and privacy.

Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes we collected it for, unless a longer retention period is required or permitted by law. In practice, this means:

• If you have an account or ongoing relationship with us, we retain your data for as long as your account is active or as needed to provide you services. For example, your profile information and preferences are kept until you delete your account or request deletion.
• We retain transactional and usage data as needed for our internal records and analysis. If you make a purchase, we’ll keep records of that transaction as required for financial reporting and audits.
• We may retain certain data after you close your account or after fulfilling the original purpose if retention is reasonably necessary for our legitimate business interests, such as fraud prevention, or if required by law. For instance, we might keep a record that you opted out of communications to honor that going forward, or retain server logs for a short period for security.
• When we no longer have a legitimate need or legal obligation to retain your personal information, we will securely delete or anonymize it. We may aggregate or de-identify data so it no longer can be associated with you, and use that for statistical purposes.

Our retention practices aim to follow the principle of “storage limitation” as found in regulations like GDPR – i.e., not keeping personal data for longer than necessary. We periodically review the data we hold and erase or anonymize personal information that is no longer needed for any legitimate purpose. The only exceptions are if we need the data for archival purposes in the public interest, journalistic or research purposes, or other exceptions provided by law.

If you have specific questions about how long a certain type of data is retained, you can contact us for more details. Generally, financial/payment records are kept for a minimum duration (e.g., 7 years in some jurisdictions) due to tax laws, communications are kept for a couple of years for reference, and analytics data may be retained in aggregate form.

Children’s Privacy

Our Service is not intended for children under the age of 13, and we do not knowingly collect personal information from anyone under 13 years old. If you are under 13, please do not use or register on SportsData360 or send any personal information about yourself to us. In alignment with the U.S. Children’s Online Privacy Protection Act (COPPA), if we learn that we have collected personal data from a child under 13 without verified parental consent, we will promptly delete that information from our records.

We also do not knowingly sell or share personal information of consumers under 16 years of age. We do not market to minors, and our content is intended for a general audience (typically adult sports enthusiasts, analysts, etc.). If you are under 16, you should only use our Service with the involvement of a parent or guardian. If you are a parent or guardian and you believe your child under 16 (especially under 13) has provided personal information to us, please contact us at support@sportsdata360.com so that we can take appropriate action, including deleting their information if appropriate.

In summary:

• No minors under 13: We don’t knowingly collect info from children under 13. Registration on our site is intended for adults. COPPA imposes requirements on websites that knowingly collect data from kids under 13, and we abide by those rules by avoiding such collection.
• Users 13-15: We treat users under 16 as a special category – while they may not be “children” under COPPA, the California Privacy law gives additional protections. We have no actual knowledge of users between 13 and 16 providing personal data, but if we did and if we ever were to engage in data “sales” or “sharing,” we would not do so unless we obtained affirmative authorization as required by law. Again, since we do not engage in selling data, this is more of a precaution.
• Parental Guidance: We encourage parents to supervise their children’s online activities. If a minor (under 18) uses our Service, their personal information will be handled as described in this Policy, and they may have certain rights over their data (exercisable through a parent/guardian in the case of minors under certain ages).

By using our Service, you represent that you are at least 13 years of age (and in certain jurisdictions, at least 16 years of age) or using the Service with the consent of a parent or guardian.

International Users and Data Transfers

SportsData360 is based in the United States, and our website and databases are operated from the U.S. If you are accessing our Service from outside the United States, please be aware that your information will likely be transferred to, stored, and processed in the United States or other jurisdictions where our service providers are located. Data protection laws in the U.S. (or those other countries) may not be as comprehensive or equivalent to the laws in your country of residence.

However, we will handle your personal information in accordance with this Privacy Policy and all applicable laws, regardless of where it is processed. If you reside outside of the U.S. and use our Service, we will respect your privacy rights as required by your jurisdiction’s laws. For example, if you are in the European Economic Area (EEA) or the UK, we rely on legal bases such as your consent or the necessity to perform a contract (provide you the Service) to process your data, and we implement safeguards for cross-border data transfers (such as standard contractual clauses, as needed).

By using our Service or providing us with information, you consent to the transfer of your personal information to the United States (and any other countries where we or our vendors operate). We will take steps to ensure your data is subject to appropriate protections in the U.S. For instance, our service providers are often certified under frameworks like the EU-U.S. Data Privacy Framework or bound by standard data protection clauses, which are designed to protect your data to EU standards. If we transfer your data from the EEA/UK to a country not deemed “adequate” by regulators, we will do so in compliance with GDPR requirements.

If you have questions about international data transfers or require more information about our data transfer safeguards, you can contact us.

Links to Third-Party Websites

Our Service may contain links to third-party websites or services that are not operated by us. For example, our site might include links to our profiles on social media platforms, or references to partner websites, or embedded content (like a video player or an article) from other sources. Please note that this Privacy Policy does not apply to any third-party websites or services that you access through such links. We are not responsible for the privacy practices of those third-party sites, which may be different from ours.

We encourage you to review the privacy policies of any third-party site or service that you visit or interact with. If you leave our site by clicking an external link, the privacy and data collection practices of that other site will govern any information you provide there. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites.

For example, if we provide a link to a partner’s sports betting site or a data source site and you click it, any data they collect from you on their site would be subject to their policy, not ours. The inclusion of a link on our site does not imply that we endorse or have reviewed the third party’s privacy policy.

Public Forums and User-Generated Content

Public Posts: If our Service offers any public forums, community boards, commenting features on blog posts, or similar interactive features where you can post content, please be aware that any information you submit in those public areas can be read, collected, and used by others who access them. For example, if you leave a comment on our blog or in a forum with your name or email visible, that information becomes public. We strongly urge you to use discretion and caution when posting personal information in public areas of our Service or the Internet in general. We cannot control how other viewers might use that information.

If you participate in a public discussion, it is at your own risk. We are not responsible for the information you choose to make public, and this Privacy Policy does not apply to information you post publicly. If you would like us to remove personal information that you have posted publicly on our Service (like in a comment), please contact us and we will do our best to remove it, unless we are required to keep it by law or it has been copied or stored by other users (in which case it’s out of our control).

Business Transfers

As mentioned under disclosures, we reserve the right to transfer or assign the information we have collected (including personal information) in the event of a business transaction such as a merger, acquisition by another company, sale of all or a portion of our assets, or other change of control. If SportsData360 is involved in such a transaction, we will ensure the confidentiality of your personal information is maintained and provide notice before personal information is transferred and becomes subject to a different privacy policy. The new entity will be required to handle your personal data in line with this Policy or notify you of any changes.

In the event of bankruptcy or insolvency, personal data may be considered an asset subject to sale or transfer to third parties. If such a transfer occurs, we would request (though we might not be able to enforce) that the new entity continues to protect your personal information in accordance with applicable privacy laws and at least as stringently as we have. We will notify users via the website or by email of any such data transfer and any choices you may have regarding your information at that time.

Changes to this Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. We reserve the right to modify this Policy at any time, but if we do so, we will post the updated Privacy Policy on our website and update the “Last Updated” date at the bottom for transparency. If we make material changes to how we collect, use, or share your personal information, we will provide a prominent notice of such changes. This might include posting a notice on our homepage, within the Service (e.g., via a banner or pop-up), or in some cases, sending you a notification via email (if you have provided an email and not opted out of such notices).

Material changes could include, for example, using your information for new purposes that were not originally disclosed, or changing the way your rights work. Minor changes (such as clarifications, grammar fixes, or updates to contact information) may be made with just an updated date.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any updates constitutes your acceptance of the revised Privacy Policy.

If you do not agree with any updates or changes, you should stop using the Service and deactivate your account (if applicable), and you may contact us with any questions or to request deletion of your data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please do not hesitate to contact us:

SportsData360 (Gatch Analytics, LLC)
Address: 1235 East Blvd, Ste. E #1607, Charlotte, NC 28203, United States
Email: support@sportsdata360.com

Last Updated: September 2, 2025