Privacy Policy

CG Goaltending LLC (“CGG,” “we,” “us,” or “our”) operates the website cggoaltending.com and related services including mobile applications, virtual training programs, and in-person goaltending instruction. We are committed to protecting the privacy of our clients, their families, and all visitors to our website.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding that information. Because our programs serve youth athletes ages 8–18, we take additional precautions to protect the data of minors.

By using our website or enrolling in our programs, you consent to the practices described in this policy. If you are a parent or guardian enrolling a minor, you consent on behalf of your child.

1. Information We Collect

Information You Provide Directly

• Enrollment information: Parent/guardian name, email address, phone number, child’s name, child’s age, and program selection
• Payment information: Processed securely through Stripe. CGG never receives, stores, or has access to your full credit card number, CVV, or bank account details. Stripe’s privacy policy is available at stripe.com/privacy
• Scheduling information: Booking details submitted through Acuity Scheduling for consultations and session management
• Medical disclosures: Health conditions, injuries, or allergies relevant to safe program participation, provided by the parent/guardian
• Communications: Emails, contact form submissions, and any other correspondence you send us
• Newsletter sign-up: Email address and first name when you subscribe to our mailing list

Information Collected Automatically

• Website analytics: Pages visited, time on page, scroll depth, click interactions, referral source, and browser/device type — collected through Google Analytics 4
• Cookies: See Section 5 (Cookie Policy) below for full details on what cookies we use and how to control them
• IP address: Collected by our hosting provider (Vercel) and analytics services for security, fraud prevention, and approximate geographic location
• Device information: Browser type, operating system, screen resolution, and language preference

Information from Third-Party Services

When you interact with our services through third-party platforms (Stripe for payments, Acuity for scheduling, Beehiiv for email), those platforms may share limited information with us as necessary to provide the service. We do not purchase or acquire personal information from data brokers.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Program delivery: Enrolling participants, managing schedules, communicating session details, and ensuring safe participation
• Payment processing: Processing enrollment fees, deposits, and refunds through Stripe
• Communication: Sending program-related updates, schedule changes, emergency notifications, and responding to your inquiries
• Marketing (with consent): Sending newsletters, coaching tips, program announcements, and educational content through Beehiiv. You may unsubscribe at any time.
• Website improvement: Analyzing usage patterns to improve our website, content, and user experience
• Safety and compliance: Using medical disclosures to ensure safe program participation and complying with applicable legal obligations
• Legal protection: Establishing, exercising, or defending legal claims, and protecting the rights and safety of CGG, our staff, and our participants

We will never sell, rent, or lease your personal information to third parties for their marketing purposes.

3. Children’s Privacy (COPPA Compliance)

CG Goaltending programs serve youth athletes ages 8–18. We take the protection of children’s data seriously and comply with the Children’s Online Privacy Protection Act (COPPA).

• Parental consent required: All enrollment and data collection for minors is initiated and authorized by a parent or legal guardian. We do not knowingly collect personal information directly from children without verifiable parental consent. Parental consent is verified through the enrollment process: the parent or guardian must provide their own identifying information, agree to the Terms of Service, and complete payment using a verified payment method — which together constitute verifiable parental consent under COPPA.
• Limited data collection: We collect only the minimum information necessary to safely deliver our programs — typically the child’s first name, age, and relevant medical information provided by the parent.
• Enhanced protections for under-13: For participants under 13, we apply enhanced safeguards. Their information is used solely for program delivery and safety. It is never used for marketing purposes and is never shared with third parties beyond what is necessary for program operation.
• Parental rights: Parents and guardians may review, update, or request deletion of their child’s personal information at any time by contacting us at info@cggoaltending.com.
• No child accounts: Children do not create accounts on our website. All accounts and interactions are managed through the parent or guardian.

If we discover that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly.

4. Third-Party Service Providers

We use the following third-party services to operate our business. Each service receives only the minimum information necessary to perform its function:

• Stripe — Payment processing. Handles all credit card and payment data. CGG never stores payment card information. Privacy Policy
• Beehiiv — Email newsletter and marketing communications. Receives email address, first name, and engagement data. Privacy Policy
• Acuity Scheduling — Consultation and session booking. Receives name, email, phone number, and scheduling preferences. Privacy Policy
• Google Analytics 4 — Website usage analytics. Collects anonymized browsing data subject to your cookie consent preferences. Privacy Policy
• Vercel — Website hosting and content delivery. Processes server logs including IP addresses. Privacy Policy
• YouTube — Embedded video content on select pages. Subject to Google’s privacy policy when interacted with.

We require all third-party service providers to handle your information in accordance with applicable data protection laws. We do not authorize them to use your information for their own marketing purposes.

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices, content, or security of any third-party sites. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

5. Cookie Policy

Our website uses cookies and similar technologies. We respect your choices about cookie usage through our consent banner.

Essential Cookies

These cookies are necessary for the website to function and cannot be disabled. They include cookies that maintain your cookie consent preferences and ensure website security.

Analytics Cookies

We use Google Analytics 4 to understand how visitors use our website. These cookies are disabled by default and are only activated if you explicitly consent through our cookie banner. When analytics cookies are denied, Google Analytics runs in a limited mode that does not store cookies or collect personally identifiable information.

Managing Your Preferences

You can manage your cookie preferences at any time through our cookie consent banner. You may also configure your browser to block or delete cookies, though this may affect website functionality. To clear your consent preference, delete the “ga-consent” entry from your browser’s local storage.

Do Not Track Signals

Our website respects your cookie consent preferences as set through our consent banner. Because there is no industry-standard way to honor “Do Not Track” (DNT) browser signals, we do not currently respond to DNT signals separately. However, our analytics cookies are disabled by default and require your explicit opt-in, which provides equivalent or greater protection than DNT compliance.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy:

• Enrollment and program records: Retained for 3 years after the participant’s last program enrollment, or until the participant reaches age 21, whichever is later. This retention period accounts for potential legal claims involving minors.
• Payment records: Retained by Stripe in accordance with their retention policies and applicable tax/financial regulations. CGG retains transaction summaries (amount, date, program) for 7 years for tax purposes.
• Medical disclosures: Retained only for the duration of active enrollment. Deleted within 90 days after the participant’s last program ends, unless retention is required for an active legal matter.
• Email marketing data: Retained until you unsubscribe, at which point your email is removed from active mailing lists. Suppression records (to prevent re-subscription) may be retained indefinitely.
• Analytics data: Google Analytics data is retained for 14 months per our GA4 configuration.
• Communications: Emails and contact form submissions are retained for 2 years.

When retention periods expire, personal information is securely deleted or anonymized.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Right to access: Request a copy of the personal information we hold about you or your child
• Right to correction: Request that we correct inaccurate or incomplete personal information
• Right to deletion: Request that we delete your personal information, subject to legal retention requirements
• Right to opt-out of marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us directly
• Right to withdraw consent: Withdraw consent for analytics cookies at any time through our cookie banner

To exercise any of these rights, contact us at info@cggoaltending.com. We will respond to verified requests within 30 days. We may ask you to verify your identity before processing your request.

Texas Residents (TDPSA)

If you are a Texas resident, you have rights under the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024:

• Right to confirm whether we are processing your personal data and to access that data
• Right to correct inaccuracies in your personal data
• Right to delete your personal data
• Right to obtain a portable copy of your personal data in a readily usable format
• Right to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects

CGG does not sell personal data, does not use personal data for targeted advertising, and does not engage in profiling that produces legal or significant effects. To exercise your rights under the TDPSA, contact us at info@cggoaltending.com. We will respond within 45 days. If we deny your request, you have the right to appeal by contacting us with “TDPSA Appeal” in the subject line.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to data portability — receive your data in a readily usable format
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your privacy rights

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Canadian Residents (PIPEDA)

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act, including the right to access your personal information, request corrections, and withdraw consent for its collection and use. Canadian participants in cross-border hockey programs should be aware that their data is processed and stored in the United States.

8. International Data Transfers

CG Goaltending LLC is based in the United States. All personal information we collect is processed and stored in the United States through US-based service providers (Vercel, Stripe, Beehiiv, Google). If you are accessing our website or services from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

By using our services, you consent to the transfer of your information to the United States.

9. Biometric Data

CG Goaltending does not currently collect, capture, or store biometric identifiers (such as fingerprints, facial geometry, voiceprints, or retina scans) as defined under the Texas Capture or Use of Biometric Identifier Act (CUBI) or similar state laws.

Video recordings of training sessions are used solely for coaching review and are not processed through facial recognition, biometric analysis, or automated identification systems. If our practices change in the future to include biometric data collection, we will update this policy and obtain explicit informed consent before collecting any biometric identifiers.

10. Photography and Video

Training sessions, camps, and CGG events may be photographed or video recorded for the following purposes:

• Coaching review and athlete development feedback
• Marketing, social media, and website content for CG Goaltending
• Educational content and training materials

By enrolling in a CGG program, you consent to the capture and use of photographs and video of the participant during CGG activities, as described in our Terms of Service. You may opt out of future marketing use of your child’s image at any time by submitting a written request to info@cggoaltending.com.

Regarding opt-out scope: Upon receiving a valid opt-out request, we will make commercially reasonable efforts to remove identifiable images from future marketing materials and social media posts within 30 days. Content already published on third-party platforms (Instagram, YouTube, etc.) prior to the opt-out request may not be removable due to platform caching, resharing, or archiving by third parties. We will remove content from platforms we directly control. Opt-out does not apply to incidental or unidentifiable appearances in group training footage where the participant is not the primary subject.

11. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, or destruction. These measures include:

• HTTPS encryption for all data transmitted through our website
• PCI-DSS compliant payment processing through Stripe (CGG never handles raw payment card data)
• Access controls limiting who within CGG can view personal information
• Secure, authenticated access to all third-party service provider accounts

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

12. Data Breach Notification

In the event of a data breach that compromises personal information, we will:

• Notify affected individuals within 72 hours of discovering the breach
• Describe the nature of the breach, the types of information involved, and the steps we are taking to address it
• Provide guidance on steps you can take to protect yourself
• Notify relevant regulatory authorities as required by applicable law

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Notify enrolled families by email of any material changes affecting their data
• Post the updated policy on our website at least 30 days before material changes take effect

Your continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how your information is handled, please contact us: