Privacy policy

Who we are

This policy covers Klyng, of Ontario, Canada ("Klyng", "we", "us"). It applies to klyng.ca (the Klyng gear store), klyngcup.com (Klyng Cup tournaments, leagues and The Kitchen blog) and klyngos.com, which share one Klyng account.

The person in charge of protecting personal information is our Privacy Officer. Reach them at support@klyng.ca with "Privacy" in the subject line.

What we collect

When you create an account or sign in:

• Your name, email address and sign-in details. Sign-in is handled by Clerk, our account provider.

When you build a player profile or register for an event:

• Your phone number, city, province or state, and country.
• Your gender, age or birthday, and a profile photo if you add one.
• Your DUPR ID and ratings, if you link your DUPR account, and when you're available to play.
• Your event registrations, teams, partners, results and standings.
• Your acceptance of the participant waiver, with the date, the version you accepted and your IP address.
• The email addresses of people you invite to play, to join a team or to be your partner.

When you shop on klyng.ca:

• Your name, email, billing and shipping addresses, phone number, what you ordered and any note you add.
• If you're signed in, your wishlist and saved address.
• If you arrived through a Klyng ambassador's link, that referral.

When you pay:

• Card payments are processed by Stripe. We never see or store your full card number.
• For team events where you agree to it, Stripe keeps your card on file so later team fees can be charged. You give that permission at registration and can ask us to remove it.

When you use chat, or apply for special programs:

• Messages and images you post in event chat.
• Information you give in wildcard applications.
• For travel programs: your date of birth, citizenship, passport validity, address and details of the person you'll room with. We collect only what the trip requires.

When you browse:

• Your IP address, device and browser type, the pages you visit and how you use them. We use this for security, to prevent abuse, and to understand and improve the sites.
• On some pages we record sessions (clicks, scrolling and page changes) to find problems. Anything typed into forms is masked and not recorded.

How we use it

• To create and run your account.
• To process orders, registrations, payments, refunds, shipping and returns.
• To run events: schedules, brackets, results, standings and team management.
• To submit match results to DUPR, if the event is rated, so your rating updates.
• To send you service messages, such as order confirmations, shipping updates, event details and schedule changes.
• To send event and club announcements. You can opt out at any time with the unsubscribe link or in your profile.
• To ask for a review of your purchase (see Google Customer Reviews below).
• To keep the sites secure, prevent fraud and abuse, and fix problems.
• To understand how the sites are used and improve them.
• To meet our legal, tax and accounting obligations.

What other people can see

Klyng Cup is a competition, so some information is public on klyngcup.com:

• Your name, team or club, results, standings and ratings for events you play in.
• Your age and location only if your profile settings allow it.

The participant waiver explains how photos and video taken at events may be used. Please read it before you register.

Who we share it with

We don't sell your personal information. We share it only with the companies that help us run Klyng, and only for that purpose:

• Clerk: accounts and sign-in.
• Stripe: payments and refunds, including payments to a club that runs its own event.
• WooCommerce on WP Engine: our store's order and product system.
• Vercel: hosting for our sites.
• Supabase: our Klyng Cup database, live updates and chat images.
• Resend and Google Workspace: email.
• PostHog: site analytics and session recordings.
• Upstash: security limits that protect our sites from abuse.
• Cloudflare: bot protection on sign-in.
• DUPR: match results for rated events. We send your DUPR ID and scores, not your name or contact details.
• Google Customer Reviews: see below.
• The club or organizer running an event you register for receives your registration details so they can run it.
• For travel programs: the licensed travel agency booking the trip.

We may also share information if the law requires it, to protect people's safety, or as part of a sale or merger of our business, under the same protections.

Google Customer Reviews

After you buy from klyng.ca, Google may ask whether you'd like to rate your purchase. To show that request, we share your order number, email, country and estimated delivery date with Google. If you agree, Google emails you a short survey after delivery. Google's own privacy policy applies to that survey.

Where your information is stored

Some of our providers store information outside Canada, mainly in the United States. There, it may be accessible to authorities under local law. We choose providers that protect personal information to a standard comparable to Canadian law.

Cookies and similar technology

We use cookies and browser storage to:

• Keep you signed in (Clerk).
• Remember your bag, your language, your wishlist and your last order, so we can show its confirmation.
• Credit an ambassador who referred you (30 days).
• Measure how the sites are used (PostHog).

Blocking cookies in your browser may stop sign-in, the bag or checkout from working.

How long we keep it

• Account and profile information: while your account is open. When you ask us to close it, we delete or anonymize it within 30 days, except as below.
• Orders, payments and refunds: as long as tax law requires, generally six years.
• Waiver acceptances: as long as they may be needed in a legal claim.
• Event results: these form part of the event's record and of DUPR ratings, so they may be kept after your account closes.
• Analytics and session recordings: up to 12 months.

Your rights

You can ask us to:

• Show you the personal information we hold about you, and give you a copy in a common format.
• Correct anything that's wrong or out of date.
• Delete your information or close your account.
• Stop sending you marketing email.
• Withdraw a permission you gave, such as a card kept on file.

Email support@klyng.ca with "Privacy" in the subject line. We reply within 30 days. We may need to confirm your identity first.

If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).

Children

Our sites are meant for adults. Players under 18 may take part in events only with a parent or guardian's consent, and a parent or guardian must accept the waiver for them. We don't knowingly collect information from children under 14 without a parent or guardian's consent.

How we protect it

We use encrypted connections, access controls, and providers with strong security. Payment details stay with Stripe, and links to your DUPR account are stored encrypted. No system is perfectly secure. If a breach creates a real risk of serious harm, we'll tell you and the privacy regulators, as the law requires.

Changes to this policy

We'll post any changes here and update the date at the top. If a change is significant, we'll tell you by email or on the site before it applies.

Contact

Questions about this policy or your information: support@klyng.ca, subject "Privacy".