Privacy Policy

Effective Date: This policy is effective immediately upon publication

1. INTRODUCTION AND SCOPE

This Privacy Policy describes how Canada Hockey Arenas ("we," "our," "us," or "the Company") collects, uses, processes, discloses, and protects information about you when you access or use our website located at canadahockeyarenas.com and any related services, features, content, or applications we offer (collectively, the "Services").

This Privacy Policy applies to all users of our Services worldwide. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, you must not access or use our Services.

We are committed to protecting your privacy and ensuring compliance with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), the ePrivacy Directive, and other relevant international privacy regulations.

2. DATA CONTROLLER INFORMATION

The Data Controller responsible for your personal data is:

Owner (PSC): Nataliia Ofitserova

Company Address (Registered Office): 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Company Country: United Kingdom (England and Wales)

As the Data Controller, we determine the purposes and means of processing your personal data in accordance with applicable data protection laws.

3. DEFINITIONS

For the purposes of this Privacy Policy:

  • "Personal Data" means any information relating to an identified or identifiable natural person ('Data Subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
  • "Processing" means any operation or set of operations performed on Personal Data or sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
  • "Data Subject" means the individual to whom Personal Data relates.
  • "Cookies" means small text files placed on your device when you visit a website that enable various features and functionality.
  • "Third Party" means any natural or legal person, public authority, agency, or body other than the Data Subject, Controller, Processor, and persons who, under the direct authority of the Controller or Processor, are authorized to process Personal Data.

4. CATEGORIES OF INFORMATION WE COLLECT

4.1 Information You Provide Directly

  • Contact Information: When you contact us through our contact forms, email, or other communication channels, we collect your name, email address, and the content of your communication.
  • User Submissions: Information you provide when submitting arena information, reviews, comments, or other content to our Services.
  • Newsletter Subscriptions: Email address and name when you subscribe to our newsletters or updates.
  • Survey Responses: Information you provide when participating in surveys, questionnaires, or feedback forms.

4.2 Information Collected Automatically

  • Device Information: Hardware model, operating system and version, unique device identifiers, mobile network information, and device settings.
  • Log Information: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
  • Usage Data: Pages visited, time and date of visit, time spent on pages, unique device identifiers, clickstream data, and other diagnostic data.
  • Location Information: General location information based on IP address (country, region, city level).
  • Cookie Data: Information collected through cookies, web beacons, and similar tracking technologies as detailed in our Cookie Policy.

4.3 Information from Third Parties

  • Analytics Providers: We receive information about your activities on our Services from third-party analytics providers such as Google Analytics.
  • Social Media Platforms: If you interact with our content on social media platforms, we may receive limited information from those platforms.
  • Public Sources: We may collect publicly available information about hockey arenas from public databases, websites, and other public sources.

5. LEGAL BASIS FOR PROCESSING

We process your Personal Data on the following legal bases:

5.1 Consent (Article 6(1)(a) GDPR)

Where you have given clear consent for us to process your Personal Data for specific purposes, such as newsletter subscriptions or marketing communications.

5.2 Contract (Article 6(1)(b) GDPR)

Processing necessary for the performance of a contract to which you are party or to take steps at your request prior to entering into a contract.

5.3 Legal Obligation (Article 6(1)(c) GDPR)

Processing necessary for compliance with legal obligations to which we are subject, including tax and regulatory reporting requirements.

5.4 Legitimate Interests (Article 6(1)(f) GDPR)

Processing necessary for our legitimate interests or those of third parties, including:

  • Improving and optimizing our Services
  • Understanding how users interact with our Services
  • Preventing fraud and enhancing security
  • Marketing our Services to existing users
  • Responding to user inquiries and providing support

6. PURPOSES OF PROCESSING

We use the information we collect for the following purposes:

6.1 Service Provision and Improvement

  • To provide, maintain, and improve our Services
  • To personalize your experience and deliver content relevant to your interests
  • To develop new features, products, or services
  • To process and respond to your inquiries and requests

6.2 Communication

  • To send administrative information, including updates to our terms and policies
  • To respond to your comments, questions, and provide customer service
  • To send marketing communications (with your consent where required)
  • To notify you about arena updates and new features

6.3 Analytics and Performance

  • To monitor and analyze usage patterns and trends
  • To measure the effectiveness of our content and Services
  • To conduct research and analysis for business intelligence purposes

6.4 Legal and Security

  • To detect, prevent, and address technical issues
  • To protect against fraudulent, harmful, or illegal activity
  • To comply with legal obligations and enforce our terms and policies
  • To protect the rights, property, and safety of our users and the public

7. DATA SHARING AND DISCLOSURE

We may share your information in the following circumstances:

7.1 Service Providers

We engage third-party companies and individuals to facilitate our Services ("Service Providers"), including:

  • Web hosting and infrastructure providers
  • Analytics and performance monitoring services
  • Email delivery services
  • Customer support tools
  • Payment processors (if applicable)

7.2 Legal Requirements

We may disclose your information where required to do so by law or in response to valid requests by public authorities, including:

  • Court orders, subpoenas, or other legal processes
  • Government or regulatory requests
  • Law enforcement agencies for the prevention and detection of crime

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

7.4 Consent

We may share your information with third parties when we have your consent to do so.

7.5 Aggregated or De-identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction.

If you are located outside the United Kingdom and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United Kingdom and process it there.

Where we transfer Personal Data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission or UK Information Commissioner's Office
  • Adequacy decisions recognizing certain countries as providing adequate protection
  • Other legally approved transfer mechanisms

9. DATA RETENTION

We retain Personal Data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

9.1 Retention Criteria

We determine appropriate retention periods based on:

  • The purpose for which the information was collected
  • The nature and sensitivity of the information
  • Legal, regulatory, tax, accounting, or other requirements
  • Statute of limitations periods
  • Legal claims or litigation holds

9.2 Specific Retention Periods

  • Contact form submissions: 3 years from last interaction
  • Newsletter subscriptions: Until unsubscribe request or 3 years of inactivity
  • Analytics data: 26 months
  • Cookie data: As specified in our Cookie Policy
  • Legal and tax records: 7 years or as required by law

10. DATA SECURITY

We implement appropriate technical and organizational security measures designed to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

10.1 Security Measures

Our security measures include:

  • Encryption of data in transit using SSL/TLS protocols
  • Regular security assessments and vulnerability testing
  • Access controls and authentication mechanisms
  • Employee training on data protection and security practices
  • Incident response procedures for data breaches
  • Regular backups and disaster recovery procedures

10.2 Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and, where feasible, no later than 72 hours after becoming aware of the breach, unless the breach is unlikely to result in risk to your rights and freedoms.

11. YOUR PRIVACY RIGHTS

Under applicable data protection laws, including GDPR and UK GDPR, you have the following rights regarding your Personal Data:

11.1 Right of Access (Article 15 GDPR)

You have the right to obtain confirmation as to whether we process Personal Data concerning you and, if so, to request access to such Personal Data and receive a copy of it.

11.2 Right to Rectification (Article 16 GDPR)

You have the right to request that we correct any inaccurate Personal Data concerning you and to have incomplete Personal Data completed.

11.3 Right to Erasure / "Right to be Forgotten" (Article 17 GDPR)

You have the right to request the deletion of your Personal Data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected.

11.4 Right to Restriction of Processing (Article 18 GDPR)

You have the right to request that we restrict the processing of your Personal Data in certain circumstances, such as when you contest the accuracy of the data.

11.5 Right to Data Portability (Article 20 GDPR)

You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

11.6 Right to Object (Article 21 GDPR)

You have the right to object to the processing of your Personal Data based on legitimate interests or for direct marketing purposes.

11.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

11.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular the UK Information Commissioner's Office (ICO) at ico.org.uk.

Exercising Your Rights

To exercise any of these rights, please contact us using the contact information provided in Section 16. We will respond to your request within one month, unless the request is complex or we receive multiple requests, in which case we may extend the response time by two additional months.

12. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to collect and use information about you and your use of our Services. For detailed information about the types of cookies we use, the purposes for which we use them, and how you can control cookies, please see our separate Cookie Policy.

12.1 Types of Technologies

  • Cookies: Small data files stored on your device
  • Web Beacons: Small graphic images or other web programming code
  • Local Storage: Browser-based storage mechanisms
  • Session Storage: Temporary storage that expires when you close your browser

12.2 Managing Tracking Technologies

You can manage your cookie preferences through your browser settings or through our cookie consent tool when you first visit our website. Please note that disabling certain cookies may limit the functionality of our Services.

13. CHILDREN'S PRIVACY

Our Services are not directed to children under the age of 16, and we do not knowingly collect Personal Data from children under 16 years of age. If you are under 16, please do not provide any Personal Data through our Services.

If we become aware that we have collected Personal Data from a child under 16 without verification of parental consent, we will take steps to delete that information as quickly as possible.

If you believe we might have any information from or about a child under 16, please contact us immediately using the contact information provided below.

14. THIRD-PARTY LINKS AND SERVICES

Our Services may contain links to third-party websites, services, or applications that are not operated by us. If you click on a third-party link, you will be directed to that third party's site.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

The inclusion of any link does not imply our endorsement of the linked site or service.

15. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or change this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated Privacy Policy on our website, unless otherwise specified.

We will notify you of any material changes by:

  • Posting a prominent notice on our website
  • Sending an email to registered users (where we have email addresses)
  • Updating the "Effective Date" at the top of this Privacy Policy

Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of such changes.

16. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at:

Data Controller: Nataliia Ofitserova

Address: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Email: privacy@canadahockeyarenas.com

For data protection inquiries specific to GDPR or UK GDPR, you may also contact our Data Protection Officer at the above address.

Supervisory Authority: You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

17. ADDITIONAL RIGHTS FOR SPECIFIC JURISDICTIONS

17.1 European Economic Area (EEA) and United Kingdom

If you are located in the EEA or UK, you have additional rights under GDPR and UK GDPR as outlined in Section 11 above.

17.2 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to:

  • Know what personal information is collected about you
  • Know whether your personal information is sold or disclosed and to whom
  • Say no to the sale of your personal information
  • Access your personal information
  • Request deletion of your personal information
  • Not be discriminated against for exercising your privacy rights

17.3 Other Jurisdictions

If you are located in other jurisdictions, you may have additional rights under local data protection laws. Please contact us for more information about your specific rights.

← Back to Home