Privacy
Policy

Who We Are

Volleybox Sports Centre ("Volleybox", "we", "us") runs a youth volleyball sports centre in Surrey, BC. This policy applies to volleybox.ca, the Volleybox app and our related services. Volleybox decides what personal information is collected and why, and is responsible for it.

Captivation Sports (10234931 Manitoba Ltd, Manitoba) runs this website, the app and our systems for Volleybox as our service provider. It uses the information only to provide that service to Volleybox.

What We Collect From Parents and Guardians

Name, email address, phone number, mailing address and payment records given at registration; the programs you register your child for; the waivers you sign; the emails, texts and chat messages you exchange with us; and the choices you make about news and text messages.

What We Collect About Athletes

What we collect about athletes: name, birth date, gender, school grade, level and coach evaluations, attendance, medical notes and allergies you give us, incident and injury reports, emergency contacts, photos and videos taken at the sports centre, and, if you allow it, what your child posts in the app (Hangout posts, messages, Rep It Out videos).

What the App Collects

What the app collects: an app identifier for each phone, the app version, the phone's internet address when signing in, and a push token if you allow notifications.

Our website sets one first-party cookie that remembers which link or ad brought you to volleybox.ca. It is not shared with anyone.

How We Use Your Information

• To register athletes for programs and process payments
• To send confirmations, receipts, schedule changes and program updates
• To run programs safely (attendance, coach communication, emergency contact)
• To track athlete development through coach evaluations
• To send news about future programs, where the law allows it or you have asked for it (you can unsubscribe at any time from the link in any of those emails)

Artificial Intelligence

Artificial intelligence: our website chat and some email replies are written by an AI assistant working for Volleybox. It reads the message you send and the details needed to answer it. A person at Volleybox reviews refunds, money and anything sensitive, and you can ask for a person at any time. AI providers we use: Anthropic, and where Volleybox chooses them, xAI and Google. They may not use your information to train their models.

Service Providers

Service providers: Captivation Sports (10234931 Manitoba Ltd, Manitoba) runs this service for Volleybox on DigitalOcean in Toronto, Canada. Email goes through Mailgun, texts through Twilio, card payments through Stripe on Volleybox's own account, push notifications through Expo, Apple and Google, and AI as above. Some of these process information in the United States.

We do not sell, rent or trade personal information to anyone.

Data Retention

We retain registration and program data while an athlete is active in our programs and for a reasonable period afterward to support returning families. Financial records are retained for the period required by Canadian tax and accounting law (currently six years from the end of the tax year they relate to, as the Canada Revenue Agency requires). You may request deletion of your data at any time, subject to those legal retention requirements.

Your Rights

Volleybox Sports Centre is in British Columbia, so British Columbia's Personal Information Protection Act (PIPA) governs how we handle your personal information. You can ask to see the information we hold about you or your child and to correct it. If you are not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia.

• Access the personal information we hold about you or your child
• Correct any inaccurate information
• Request deletion of your information, subject to legal retention requirements
• Withdraw consent for news emails and text messages at any time
• Delete your app account yourself, from the Me tab in the app

Full steps, and what is deleted and kept, are on our account deletion page.

Security

We use industry-standard safeguards including HTTPS encryption in transit, encrypted storage at rest, role-based access controls and audit logging. No system is perfectly secure; if a breach affecting your information occurs, we will notify you and the Office of the Information and Privacy Commissioner for British Columbia and the Office of the Privacy Commissioner of Canada as the law requires.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to registered families and noted at the top of this page.