Privacy Policy

Last updated: April 19, 2026

1. Who We Are

Atlas Hockey ("we," "us," or "our") operates the Atlas Hockey platform at atlashockey.ca. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with your use of our Platform. We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws of Canada.

2. Information We Collect

Account information: When you register, we collect your name, email address, role (coach, parent, or organization), and password (stored as a hashed value — we never store plain-text passwords).

Player profile information: For each player profile you create, we collect the player's name, date of birth, skating position, and any assessment scores or development notes you enter.

Usage data: We automatically collect information about how you interact with the Platform, including pages visited, features used, and session duration. This data is used to improve the Platform and is not used for behavioral advertising.

Payment information: Payment processing is handled by our third-party processor (Stripe). We do not store full credit card numbers. We retain only the last four digits, card type, and expiry for display purposes.

Communications: If you contact us by email, we retain those communications to resolve your inquiry and improve support.

3. How We Use Your Information

We use personal information for the following purposes, all of which we consider necessary for the performance of our service contract with you or our legitimate business interests:

  • Providing, operating, and maintaining the Platform
  • Processing transactions and managing subscriptions
  • Sending transactional emails: account verification, password reset, and progress digests
  • Responding to support requests and inquiries
  • Detecting and preventing fraud, abuse, and security incidents
  • Complying with legal obligations
  • Improving the Platform using anonymized, aggregated data (see our Terms of Service, Section 8)

We do not use your personal information for behavioral advertising, profiling, or sale to third parties.

4. Children's Privacy (COPPA & PIPEDA)

We take children's privacy seriously. We comply with the Children's Online Privacy Protection Act (COPPA) for users in the United States, and with PIPEDA for Canadian users, with respect to personal information about minors.

We do not knowingly collect personal information from children under 13 without verifiable parental or guardian consent. Player profiles for children under 13 may only be created by a verified parent or guardian. Parents can review, correct, or delete their child's data at any time. See our COPPA Notice for full details.

5. Data Sharing and Disclosure

We do not sell, rent, or trade personal information. We share data only in the following limited circumstances:

  • Service providers: We use Supabase (database and authentication), Stripe (payments), and transactional email providers. Each is bound by a data processing agreement and may only process your data on our instructions.
  • Legal requirements: We may disclose information if required by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers: If Atlas Hockey is involved in a merger, acquisition, or sale of assets, personal information may be transferred. We will notify you in advance and you will have the right to request deletion.
  • With your consent: We will share information in any other circumstance only with your explicit consent.

6. Cross-Border Data Transfers

Atlas Hockey operates from Canada. Your data is stored and processed using infrastructure provided by Supabase, which may be located in the United States. By using the Platform, you consent to the transfer of your personal information to the United States and other jurisdictions that may have different data protection laws than your home province or country.

We ensure that service providers maintaining your data in other jurisdictions are subject to contractual obligations providing a level of privacy protection comparable to Canadian standards.

7. Data Security

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. We use Supabase Row Level Security (RLS) policies to ensure each user can access only their own data. Authentication is handled via secure server-side sessions. We conduct regular security reviews and promptly address vulnerabilities.

Despite these measures, no system is completely secure. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access to your account.

8. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required by law to retain it for a longer period.

9. Your Rights Under PIPEDA

As a Canadian resident, you have the following rights with respect to your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Withdrawal of consent: Withdraw consent for optional data uses at any time (note: withdrawal may limit your ability to use certain features)
  • Deletion: Request deletion of your account and associated personal information
  • Portability: Request an export of your data in a machine-readable format
  • Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe we have violated your privacy rights

To exercise any of these rights, contact us at privacy@atlashockey.ca. We will respond within 30 days.

10. Cookies and Tracking

We use only functional cookies that are strictly necessary for authentication and session management. We do not use advertising cookies, third-party tracking pixels, or behavioral profiling technologies. You may disable cookies in your browser settings, but doing so will prevent you from logging in to the Platform.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or in-app notice at least 30 days before they take effect. The current version will always be available at atlashockey.ca/privacy.

12. Contact Our Privacy Officer

If you have questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact our Privacy Officer at privacy@atlashockey.ca. We are committed to resolving privacy concerns promptly and fairly.