Stansbury Swim Privacy Policy

Stansbury Swim ("us", "we", or "our") operates stansburyswim.com (the "Site") and the swim lesson scheduling, registration, and payment service offered through it (the "Service"). This Privacy Policy describes the information we collect from users of the Service, how we use it, and the choices you have. By using the Service, you agree to the collection and use of information in accordance with this policy. Terms used here have the same meanings as in our Terms of Service.

Information We Collect

We collect information that you provide to us directly when you create an account, register a swimmer, schedule a lesson, sign a waiver, or pay for lessons. This includes your name, email address, postal address, phone number, the names and ages of swimmers you register, swimmer skill levels and notes relevant to lesson planning, electronic signatures on liability waivers, and account credentials. When you make a payment, the payment amount and a transaction reference are recorded by us; the full payment card or bank account details are entered into and handled by our payment providers (PayPal and Apple Pay) and are not stored on our systems.

We also automatically collect certain information when you use the Site, including your Internet Protocol ("IP") address, browser type and version, the pages you visit, the time and date of your visit, the time spent on those pages, and similar diagnostic data ("Log Data"). This information is used for security, debugging, and to improve the Service.

Sign-In with Google and Use of Google User Data

We offer the option to create an account or sign in using Google. When you choose to sign in with Google, Google sends us a signed identity token that we verify to confirm your identity. From that token, we read and store your email address, your Google account identifier, and your first and last name. The identity token may also contain a profile picture URL; we do not store or display it. We do not request, obtain, or store a Google access token, and we do not access any other Google services on your behalf — we do not read your Google contacts, calendar, drive files, photos, or any other Google product data.

We use the information received from Google solely to: (a) verify your identity and authenticate you to the Service; (b) create your Stansbury Swim account; and (c) pre-fill your name on your Stansbury Swim profile. If you sign in with Google using an email address that already has a Stansbury Swim password account, we will not link the two automatically — you will be asked to sign in with your password first to confirm ownership of the account. This data is stored in our user database alongside your other account information for as long as your account is active.

Stansbury Swim's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell or transfer Google user data to third parties for advertising, retargeting, credit-worthiness decisions, or any other purpose unrelated to providing the Service. We do not allow humans to read Google user data except (i) with your affirmative consent for specific messages, (ii) where necessary for security purposes such as investigating abuse, (iii) to comply with applicable law, or (iv) where the data has been aggregated and anonymized for internal operations. We do not use Google user data to serve advertisements, and we do not transfer it to data brokers, ad networks, or information resellers.

You can revoke Stansbury Swim's access to your Google Account at any time by visiting your Google Account permissions page. Revoking access will not delete an account you have already created with us; to delete the account itself and the associated data, contact us using the address below.

How We Use Your Information

We use the information we collect to: create and authenticate your account; register swimmers and schedule lessons; communicate with you about lessons, schedule changes, payments, and Service announcements; process payments and provide receipts; produce and retain liability waivers; respond to support requests; detect, investigate, and prevent abuse, fraud, or security incidents; and operate, maintain, and improve the Service. We do not use your information for advertising or sell it to third parties.

How We Share Your Information

We share information only as needed to operate the Service or as described below:

Instructors and staff: Information about a registered swimmer (name, age, skill notes, scheduled lessons, parent/guardian contact information) is made available to the Stansbury Swim instructors and administrators responsible for delivering and coordinating that swimmer's lessons.

Service providers: We share information with third parties that help us operate the Service, including payment processors (PayPal and Apple Pay) for processing transactions, transactional email providers (Resend) for sending account and lesson-related emails, hosting and infrastructure providers (Vercel, MongoDB Atlas, Supabase, and Google Cloud), error monitoring (Sentry), and analytics (Vercel Analytics). These providers are permitted to use the information only to perform services for us and are bound by confidentiality obligations.

Legal and safety: We may disclose information if we believe in good faith that it is necessary to comply with a legal obligation, enforce our Terms of Service, protect the rights, property, or safety of Stansbury Swim, our users, or others, or in connection with a government or law enforcement request.

Business transfers: If Stansbury Swim is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice on the Site if such a transfer occurs and will require the recipient to honor this Privacy Policy.

We do not sell your personal information, and we do not share Google user data with any third party for advertising purposes.

Data Retention and Deletion

We retain your account and swimmer information for as long as your account is active or as needed to provide the Service. After account closure, we may retain certain records (such as signed waivers, payment history, and transaction logs) for the period required to comply with our legal, accounting, and recordkeeping obligations, and we may retain limited information for fraud prevention. You can request deletion of your account and associated personal information by contacting us at the address below; we will honor verified deletion requests subject to the limited retention obligations described above.

Children's Information

The Service is intended for parents and legal guardians, who use it to register minor swimmers for lessons. We do not knowingly allow children under 13 to create their own accounts. Information we collect about minor swimmers (such as name, age, and skill notes) is collected only from a parent or legal guardian who has agreed to these practices when registering the swimmer. Parents and guardians may review, update, or request deletion of their child's information at any time by contacting us.

Cookies and Local Storage

We use cookies and browser local storage to keep you signed in, remember your preferences, and operate the Site. We use a session cookie containing an authentication token after you sign in. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent; if you do, some portions of the Site (including signing in) will not function.

Security

We use commercially reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit (HTTPS), hashed passwords, scoped access controls for staff, and reputable hosting providers. No method of transmission over the Internet or method of electronic storage is 100% secure, however, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you and the appropriate authorities as required by law.

Your Choices and Rights

You can review and update the information in your Stansbury Swim account at any time through your dashboard. Depending on where you live, you may have additional rights under applicable privacy laws, including the right to access, correct, or delete your personal information, the right to object to or restrict certain processing, and the right to data portability. To exercise any of these rights, contact us at the address below; we will respond within the period required by applicable law.

Links to Other Sites

The Service may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. Stansbury Swim has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

Stansbury Swim may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on the Site and updating the "Last modified" date above. You are advised to review this Privacy Policy periodically for changes.

Contact Us

If you have any questions about this Privacy Policy or our handling of your information, including any request to access, correct, or delete your data, please contact us at info@stansburyswim.com.