Menu Close
Close

1.Introduction

The 303 League, operating out of Denver, Colorado, is dedicated to elevating the region’s basketball culture while maintaining an uncompromising commitment to data privacy. We recognize the profound responsibility of managing personal data for our athletes, parents, and fans.

This Privacy Policy defines our strict protocols for the collection, processing, and protection of data across our digital infrastructure, registration funnels, and ticketing platforms. By accessing our platforms or utilizing our services, you acknowledge and consent to the data governance practices outlined in this document.

2.Enterprise Data Segregation Architecture (COPPA 2.0 & CCPA Compliance)

Because our operations encompass youth camps, tryouts, and family-oriented events, our digital architecture has been expressly engineered to enforce strict segregation between adult purchaser data and minor participant data.

Adult Purchaser Data (CCPA/CPRA Compliant)

When an adult registers a player, purchases a ticket, or buys merchandise, we collect requisite transactional information (Name, Email, Phone Number, Billing Zip Code).

  • Operational Processing: This data is strictly utilized to process your transaction, verify legal purchasing authority, and provision your “303 Fan Account.”

  • Analytics & Anonymization: To protect your privacy while improving league operations, purchaser demographic data (such as zip codes and transaction history) is cryptographically hashed, mathematically anonymized, and stripped of all Personally Identifiable Information (PII). This sanitized, aggregated data is managed by our principal technical agency, New Guard Sports, LLC. In addition to architecting our website, payment routing, and streaming infrastructure, they construct the internal analytics dashboards utilized by our executive team for regional reporting and sponsorship acquisition.

Minor Participant Data (COPPA 2.0 Compliant)

When a parent or legal guardian registers a minor for a camp, tryout, or league event, we collect vital participant data (Athlete Name, Date of Birth, Medical Waivers, Emergency Contacts).

  • Strictly Operational Mandate: This data is siloed and routed to an encrypted, access-restricted “Front-Office Hub.” It is accessible exclusively by authorized 303 League Athletic Directors, coaching staff, and emergency medical personnel for the sole purposes of roster management, age verification, and player safety.

  • The Zero-Monetization Guarantee: The 303 League strictly prohibits the commercialization of youth data. Under no circumstances will we sell, license, broker, or monetize the direct personal data of any minor participant.

3.General Data Collection Protocols

  • Data Storage & Localization: We operate utilizing highly secure, enterprise-grade cloud infrastructure (including Google Cloud Platform) hosted within the United States. All data is stored in strict adherence to US privacy frameworks and security standards.

  • Account Registration Data: If you provision an account on our platform, we securely store your authenticated credentials and profile inputs. You maintain the right to view, modify, or delete your personal profile data at your discretion.

  • Payment Security: All financial transactions are executed through verified, PCI-DSS compliant third-party payment gateways (e.g., Stripe). The 303 League does not capture, process, or store full credit card numbers on our local servers.

  • Customer Support: Inquiries submitted via our contact portals are routed to our official administrative channels. This communication is retained strictly for support resolution and quality assurance; it is never repurposed for unauthorized marketing.

  • Google Analytics 4 & Consent Mode: We deploy Google Analytics to monitor platform performance. Utilizing Google Consent Mode v2, personalized tracking is strictly contingent upon your explicit, opt-in consent. Users may globally opt-out of Google Analytics monitoring via the Google Analytics Opt-out Browser Add-on.

5.Cookie Governance

Our digital platforms utilize cookies—small encrypted text files stored on your device—to ensure core website functionality, secure authenticated sessions, and provide anonymized performance metrics.

  • Strictly Necessary Cookies: Tokens such as wp-auth and wordpress_logged_in are mandatory for authenticating secure sessions and preventing unauthorized account access.

  • E-Commerce Cookies: Tokens such as woocommerce_cart_hash ensure the integrity of your shopping cart during the checkout lifecycle.

  • User Control: You retain full autonomy to disable non-essential cookies via your browser’s security settings.

 

4.Third-Party Embedded Content

Specific pages on our platform may feature embedded multimedia (e.g., YouTube highlights, social media integrations). Embedded content operates independently and behaves exactly as if you visited the host platform directly. These external entities may deploy their own cookies and tracking parameters.

6.Internal Access Controls & User Hierarchy

To ensure absolute data security and compartmentalization, our database utilizes a strictly defined hierarchy of user roles. Access to personal and operational data is governed by the principle of least privilege.

Public & Fan Roles (Frontend Access Only)

These roles are assigned to the general public and only grant users access to their own personal information via our secure frontend portal. They do not have access to backend league data.

  • Customers: Fans purchasing merchandise, camp registrations, or event tickets. Access is strictly limited to viewing their personal order history, payment methods, and account details.

  • Subscribers: Fans registering for free access to our gated live stream broadcasts. Access is limited to managing their own basic user profile.

Internal League Roles (Backend Access)

Backend system access is strictly limited to authorized 303 League personnel and our technical agency, New Guard Sports, LLC. These roles are compartmentalized to prevent cross-contamination of data:

  • SportsPress Roles (League Managers, Team Managers, Event Managers): Granted exclusively to internal league operations staff, coaches, and official scorekeepers. These users can only access operational data (game statistics, rosters, schedules) and are strictly locked out of purchaser demographic or financial data.

  • WooCommerce Roles (Shop Managers): Granted exclusively to internal merchandising and ticketing staff. They can process refunds and view sales data but are locked out of operational roster data and core site configurations.

  • WordPress Core Roles (Administrators, Editors): Granted exclusively to 303 League executive leadership and New Guard Sports, LLC to maintain overarching site architecture, manage data routing protocols, and publish official media content.

7.Authorized Third-Party Processors

We explicitly do not sell or indiscriminately share personal data. We enforce strict Data Processing Agreements with a limited scope of essential infrastructure partners required to operate the league:

  • Stripe: For PCI-compliant payment and transaction processing.

  • TicketSpice: For secure event ticketing and box office logistics.

  • Google Cloud / Zapier: For maintaining our secure data routing infrastructure and server hosting.

  • New Guard Sports, LLC: Acting as our primary technical partner and agency. They engineered our digital infrastructure—including our website, data routing, payment systems, and streaming—and are strictly limited to processing anonymized, non-PII data when maintaining our secure executive reporting dashboards.

8.Data Retention Policies

  • Adult Account Data: Retained actively while your 303 Fan Account remains in good standing.

  • Minor Operational Data: Medical waivers and specific minor roster details are retained strictly for the duration necessary to ensure operational safety during an active season or camp. Upon completion of the operational requirement, this data is securely archived or systematically purged.

  • Anonymized Analytics: Fully anonymized, aggregated demographic data—permanently severed from any individual identity—may be retained indefinitely for historical league analysis.

9.Your Privacy Rights

Depending on your jurisdiction, including rights afforded to California residents under the CCPA/CPRA, you possess comprehensive rights regarding your data. These include the Right to Know (access), the Right to Correct, the Right to Delete, and the Right to Non-Discrimination for exercising these privacy protections.

To exercise your privacy rights, or to submit an official data inquiry, please send your request directly to our compliance team at privacy@303league.com.

 

10.Release of Your Data for Legal Purposes

While we fiercely protect your privacy, the 303 League reserves the right to disclose personal data when strictly necessary to comply with the law, enforce our policies, or protect the rights, property, or safety of our organization, our participants, and the public.

We may release your information under the following specific circumstances:

  • Legal Compliance & Law Enforcement: If compelled by a valid subpoena, court order, warrant, or similar legally binding process issued by a court of competent jurisdiction or authorized government agency.

  • Protection of Rights & Safety: If we believe in good faith that disclosure is absolutely necessary to prevent imminent physical harm or financial loss, investigate suspected illegal activity, or protect the physical safety of our athletes (particularly our minor participants), staff, or attendees.

  • Enforcement of Terms: To enforce our terms of service, operational protocols, or strictly to defend the 303 League or our designated agency, New Guard Sports, LLC, against legal claims or proceedings.

Whenever legally permissible and practically feasible, we will make reasonable efforts to notify affected users of any requests for their personal information before disclosing it.