Privacy Policy

NXT Basketball ("we," "us," or "our") operates the website northkitsapnxt.com and provides youth sports programs in Poulsbo, WA, Washington. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or participate in our programs. Please read this policy carefully. By using our website or registering for our programs, you consent to the practices described herein.

1. Information We Collect

We may collect the following types of personal information:

• Contact Information: Names, email addresses, phone numbers, and mailing addresses of parents, guardians, and players.
• Player Information: Player names, dates of birth, grade levels, school names, jersey sizes, and other details relevant to program participation and team placement.
• Payment Information: Credit card numbers, billing addresses, and other financial data necessary to process registration fees and payments. Payment processing is handled securely by Stripe and we do not store full credit card numbers on our servers.
• Photos and Videos: Images and videos of players, teams, and events captured during practices, games, tournaments, and other activities.
• Account Information: Usernames, passwords, and profile details created when registering for an account on our website.
• Automatically Collected Information: IP addresses, browser type, device information, pages visited, and other usage data collected through cookies and similar technologies.

2. How We Use Your Information

We use the information we collect to:

• Manage program registration, team placement, and roster assignments.
• Process payments for registration fees, tournament fees, and other program costs.
• Communicate with parents, guardians, and players about schedules, events, updates, and program-related announcements.
• Promote NXT Basketball through photos and videos on our website, social media accounts, and marketing materials.
• Comply with eligibility and registration requirements.
• Improve our website, programs, and overall experience.
• Respond to inquiries, support requests, and other communications.

3. Third-Party Services

We use the following third-party services to operate our website and programs. Each service has its own privacy policy governing the use of your information:

• Stripe: Secure payment processing for registration fees and other charges. Stripe is PCI DSS compliant and handles all sensitive payment data.
• Vercel: Website hosting and deployment platform.
• Cloudflare: Domain management, DNS, and content delivery services.
• Neon: Secure database hosting for application data.
• Resend: Transactional email delivery for account notifications and program communications.

We do not sell, trade, or otherwise transfer your personal information to outside parties beyond what is necessary to operate our programs and website.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. These may include:

• Essential Cookies: Required for website functionality, user authentication, and session management.
• Analytics Cookies: Help us understand how visitors use our website so we can improve the experience.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

5. Children's Privacy (COPPA Compliance)

NXT Basketball is a youth sports organization that serves children under the age of 13. We comply with the Children's Online Privacy Protection Act (COPPA), as amended by the 2025 COPPA Rule, and applicable state laws regarding children's privacy.

Information Collected from Children Under 13

We may collect the following information about children under 13 through their parent or guardian's account:

• First name and last initial (full last name stored securely, shown as initial in public contexts)
• Date of birth (used solely for age verification and COPPA compliance)
• Jersey number and position (for team management)
• Game performance statistics (practice attendance, skill assessments)
• In-app activity data (educational quiz scores, game progress, character customization)

We do not collect: location data, persistent device identifiers (beyond authentication), photographs or videos directly from children, or any third-party advertising identifiers from children under 13.

Parental Consent

• All accounts for children under 13 require verifiable parental consent before activation.
• When a coach invites a player under 13, an email is sent to the parent or guardian explaining what data is collected and requesting consent.
• The child's account remains inactive until the parent provides consent.
• Parents may revoke consent at any time, which will deactivate the child's account.

Parental Rights

Parents and guardians of children under 13 have the right to:

• Review all personal information collected about their child through the parent dashboard.
• Request deletion of their child's personal information at any time.
• Revoke consent, which deactivates the child's account and prevents further data collection.
• Control which features their child can access through parental controls.
• Refuse further collection of their child's information without penalty.

To exercise any of these rights, use the parental controls in your dashboard or contact us at info@northkitsapnxt.com.

Public Profiles for Minors

• Children under 13 are blocked from public recruiting profiles.
• Public highlight reels display first name and last initial only, never full names.
• Making a highlight public requires a signed media release waiver on file.
• Forum access requires users to be 13 or older.

Coach-to-Player Communication

All digital messages between coaches and players under 18 are automatically copied to the player's parent or guardian. Parents can view the full message history in their dashboard. This "two-deep" digital communication policy ensures parental visibility and child safety.

If you believe we have inadvertently collected information from a child without proper parental consent, please contact us immediately so we can remove it.

5a. SMS/Text Message Privacy (TCPA)

If you opt in to receive SMS/text messages from NXT Basketball:

• We will only send messages you have consented to receive.
• Transactional messages (password resets, waiver reminders, payment confirmations) may be sent without marketing consent.
• Promotional messages (feature announcements, challenge notifications) require explicit opt-in consent.
• You may opt out at any time by replying STOP to any message or updating your SMS preferences in account settings.
• We store consent records including who consented, when, and the consent text shown.
• Message and data rates may apply. Message frequency varies.

6. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information. These include encrypted data transmission (SSL/TLS), secure hosting environments, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention and Deletion

We retain personal information for as long as necessary to fulfill the purposes described in this policy, maintain program records, and comply with legal obligations. Specifically:

• Active account and player data is retained for the duration of program participation and a reasonable period thereafter.
• Payment records are retained as required for financial and tax reporting purposes.
• Signed waivers and liability releases are retained for a minimum of 16 years from the date of signature to comply with statutes of limitations for claims involving minors. Medical information in waiver responses is encrypted at rest using AES-256-GCM encryption.
• COPPA consent records are retained for the duration of the child's account plus 3 years.
• SMS consent records are retained for 5 years or as required by TCPA regulations.
• You may request deletion of your personal information at any time by contacting us or using the self-service deletion option in your account settings. We will process deletion requests promptly, subject to any legal retention requirements.
• When a program cancels its subscription, account data is preserved for a reasonable period to allow reactivation, then archived. Waiver data subject to retention holds is preserved regardless of account status.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• The right to access and receive a copy of your personal data.
• The right to correct inaccurate or incomplete information.
• The right to request deletion of your personal information.
• The right to opt out of promotional communications.

To exercise any of these rights, please contact us using the information below.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our website or programs after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: