Privacy Policy

1. Who We Are

Grit + Grace Sports Academy is a youth sports training program based in the Oak Lawn, Illinois area. We provide skills training, conditioning sessions, and related services for student-athletes and their families.

For the purposes of the General Data Protection Regulation (“GDPR”) and other applicable data protection laws, we act as the “data controller” for personal information we collect directly from you.

2. What This Policy Covers

This policy applies to personal information we collect when you:

• Visit our website at gritandgracesports.com
• Sign up for a free trial, drop-in, or training pack
• Create an account or log in to manage sessions
• Contact us via web forms, email, or social media
• Participate in our sessions, camps, or events

3. Information We Collect

3.1 Information you provide to us

We may collect the following information directly from you:

• Account and profile details – parent/guardian name, athlete name, grade, email address, phone number, and login credentials.
• Registration & booking details – selected sessions, attendance history, waitlist status, and related notes.
• Health and safety information – injuries, medical considerations, or other notes you voluntarily provide so we can support your athlete safely.
• Payment information – payments are processed via third-party providers (such as Stripe). We do not store full card details on our servers.
• Communication content – messages you send via contact forms, email, or other channels.
• Consent preferences – marketing opt-ins/opt-outs, media consent, and cookie preferences.

3.2 Information we collect automatically

When you visit our website, we may automatically collect certain technical information using cookies and similar technologies, such as:

• IP address, browser type, and device information
• Pages viewed, links clicked, and time spent on the site
• Referring URLs and approximate location (e.g., city/region)

4. How We Use Your Information

We use personal information for the following purposes:

• To provide services – scheduling sessions, managing registrations, tracking attendance, and communicating logistics.
• To ensure safety and quality – understanding injuries or other considerations to adapt training appropriately.
• To process payments – via secure payment processors (e.g., Stripe) when you purchase drop-ins or packs.
• To communicate with you – sending confirmations, reminders, updates, and responding to inquiries.
• To send optional marketing – with your consent where required, we may send updates about new programs, camps, or offers.
• To improve our services – analyzing website and program usage to refine what we offer.
• To comply with law – keeping records required by tax, accounting, and child safety regulations.

5. Legal Bases for Processing (GDPR / UK GDPR)

If you are in the EEA, UK, or another GDPR region, we process your personal data on one or more of the following legal bases:

• Contract – to provide training sessions and manage your bookings at your request.
• Consent – for optional activities such as marketing emails, media capture/usage, and certain cookies.
• Legitimate interests – to improve our programs, keep sessions organized, and maintain reasonable records, provided your rights are not overridden.
• Legal obligations – to comply with tax, safety, and other regulatory requirements.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to run our website, maintain security, understand usage, and support basic analytics or marketing.

• Strictly necessary cookies – required for core site features (e.g., login, session booking).
• Performance/analytics cookies – help us understand which pages and programs families are interested in.
• Functional cookies – remember preferences such as saved details or settings.

Where required by law, we will request your consent for non-essential cookies and give you the option to withdraw consent at any time via your browser settings or our cookie notices.

7. How We Share Information

We do not sell your personal information. We may share information with:

• Service providers – website hosting, email services, analytics tools, and payment processors (e.g., Stripe) who process information on our behalf under contract.
• Coaches and staff – to manage attendance, safety, and athlete development.
• Legal/regulatory authorities – when required by law, court order, or to protect our rights or the safety of others.
• Other parties with your consent – if you ask us to share information or authorize a referral.

8. Data Retention

We keep personal information only for as long as reasonably necessary to provide services, meet legal and accounting obligations, resolve disputes, and maintain safety records. When information is no longer needed, we will securely delete, anonymize, or archive it in line with our retention practices.

9. International Data Transfers

Our website and primary operations are based in the United States. If you access our services from outside the U.S., your information may be transferred to, stored in, or processed in the U.S. or other countries that may have different data protection laws than where you live.

Where applicable, we will take steps to ensure an appropriate level of protection, such as using standard contractual clauses or equivalent safeguards recognized by relevant regulators.

10. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• Right to request access to the information we hold about you.
• Right to request correction of inaccurate or incomplete information.
• Right to request deletion of your information in certain circumstances.
• Right to object to or request restriction of certain processing.
• Right to data portability for certain information.
• Right to withdraw consent where processing is based on consent.

To exercise these rights, please contact us using the details in the Contact Us section below. We may need to verify your identity before fulfilling your request.

11. Additional Rights for California Residents

If you are a California resident, the CCPA/CPRA may give you additional rights, including:

• Right to know – to request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete – to request deletion of personal information, subject to certain exceptions.
• Right to correct – to request correction of inaccurate personal information.
• Right to opt out of sale or sharing – we do not sell your personal information. If that ever changes, we will provide a “Do Not Sell or Share My Personal Information” mechanism.
• Right to limit use of sensitive information – we only use sensitive information (such as health notes) to support training and safety, not for unrelated purposes.
• Right to non-discrimination – you will not be discriminated against for exercising your privacy rights.

12. Children’s Privacy

Our programs are designed for youth athletes, but our website and accounts are intended to be used by parents or legal guardians. We collect information about athletes (such as name, grade, and relevant health notes) from their parent/guardian to safely provide training.

If you believe we have collected personal information directly from a child without appropriate consent, please contact us and we will review and take appropriate action.

13. How We Protect Your Information

We use reasonable technical and organizational measures to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. No system can be guaranteed 100% secure, but we work to keep your information as safe as reasonably possible given the nature of our services.

14. Third-Party Websites & Services

Our website may contain links to third-party sites or services (for example, payment processors, facility sites, or social media). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Last updated” date below and, where appropriate, provide additional notice (such as via email or a site banner).

Last updated: November 2025

16. How to Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us at:

• Email: hello@gritandgracesports.com
• Website: https://gritandgracesports.com/contact/
• Mailing address: Grit + Grace Sports Academy, Oak Lawn, IL, USA.

This Privacy Policy is for general informational purposes and is not legal advice. Privacy laws and guidance change over time, so we recommend reviewing this policy periodically and consulting qualified counsel to confirm ongoing compliance with applicable regulations.