Natty Hatty honors all valid data-deletion requests while preserving legally required records for youth safety and financial compliance.

Natty Hatty, Inc. (“Natty Hatty”) is committed to protecting user privacy and giving organizations, parents, guardians, and participants control over their personal information.

This policy explains how account closures, data deletion requests, and retention requirements are handled across the Natty Hatty platform.

This policy applies to:

• Organizations

• Coaches and staff

• Parents and guardians

• Athletes

• Adult users

• Anyone with a Natty Hatty account

Because Natty Hatty is used for youth-sports operations, certain data cannot be deleted immediately due to legal, financial, and safety obligations.

1. How to Request Account Closure or Data Deletion

Users may request deletion by contacting:

Subject: Data Deletion Request or Account Closure Request

Natty Hatty may require:

• Identity verification

• Guardian verification for minors

• Organization confirmation (if applicable)

Requests are typically processed within 30 days, subject to required retention rules.

2. What Happens When You Close Your Account

When a user closes an account:

• The account is deactivated

• Login access is removed

• Profile data is queued for deletion

• Non-essential personal data is purged

• Stripe customer associations are removed (where allowed)

However, certain data must remain for legal, billing, safety, or operational reasons.

3. Data That Can Be Deleted

Natty Hatty will delete:

• Personal profile information

• Contact information

• Athlete profile details (unless needed by an Organization for legal records)

• Parent/guardian information

• Uploaded photos (non-essential)

• App settings and preferences

• Cookies and device metadata

• Communication preferences

• Non-essential logs older than retention thresholds

If a user is part of multiple organizations, each organization may have its own data retention obligations.

4. Data That Cannot Be Immediately Deleted

Some categories of data cannot be deleted upon request due to legal, financial, or operational obligations:

4.1 Payments & Financial Records (Mandatory Retention)

Due to tax, financial, and payment network rules:

• Stripe transaction data

• Payout records

• Invoice records

• Dispute history

• Refund logs

• Reconciliation logs

must be retained for 5–7 years depending on jurisdiction. Natty Hatty cannot delete Stripe-related financial records.

4.2 Signed Waivers & Legal Documents

Natty Hatty Signature creates legally binding audit trails. These:

• Cannot be altered

• Cannot be deleted

• Are required for liability and legal preservation

Audit trails include:

• Timestamp

• IP address

• Device fingerprint

• Document hash

• Signature metadata

These remain permanently or for the duration required by the Organization.

4.3 Safety, Incident, & Abuse-Prevention Records

To protect minors:

• Safety flags

• Incident reports

• Abuse allegations

• Fraud investigations

• Policy violation logs

may be retained as part of youth-sports legal obligations.

Natty Hatty follows a zero-tolerance policy for child endangerment and therefore preserves essential evidence.

4.4 Team, Program, and Event Records

If a user participated in:

• Teams

• Leagues

• Tournaments

• Tryouts

• Events

• Memberships

Organizations may require Natty Hatty to retain:

• Rosters

• Attendance logs

• Team communications

• Injury reports

• Program history

This is to support safety, roster eligibility, and compliance.

4.5 Organization-Level Data

If a user is part of an active Organization:

• The Organization—not Natty Hatty—may require data to remain online

• Deleting data may impact legal or operational requirements

• Natty Hatty honors Organization-level retention rules

• Natty Hatty cannot override legally required retention by Organizations

5. Organization Responsibilities (Business Center Accounts)

Organizations must:

• Remove all events before subscription cancellation (per Payments Policy)

• Comply with their own legal retention requirements

• Recognize that deleting coach, admin, or athlete data may create gaps in historical records

Organizations acknowledge that:

• Roster data

• Staff activity logs

• Signed waivers

• Payment logs

• Messages

may need to be retained even after an account is closed.

6. Deletion for Minors (COPPA Compliance)

Natty Hatty complies with COPPA.

Parents/guardians may request:

• Deletion of a minor’s data

• Review of information stored

• Removal of photos or profile details

However, due to youth-sports safety rules, Natty Hatty may retain:

• Team involvement history

• Injury reports

• Legal waivers

• Payment evidence

• Incident or safety-related logs

Deletions for minors are carefully reviewed for abuse-prevention purposes.

7. Stripe and Third-Party Data

Stripe retains payment and financial records under:

• PCI-DSS rules

• Banking regulations

• Federal recordkeeping rules

• Fraud and dispute requirements

Natty Hatty cannot alter or delete:

• Stripe Customer IDs

• Charge IDs

• Payment tokens

• Refund records

• Dispute evidence

These are stored by Stripe, not by Natty Hatty.

8. Post-Deletion Residual Backups

Like most cloud providers:

• Deleted data may persist temporarily in secure backups

• Backups rotate automatically and cannot be altered

• Data in backups is not used for any operational purpose

• Backup retention periods follow industry standards (typically 30–90 days)

9. Data Retention Timelines (General)

10. Account Deletion vs Account Deactivation

Deletion means:

• Personal info removed

• Access revoked

• Non-essential data purged

Deactivation means:

• Login disabled

• Data retained

• Organization or safety-related records preserved

Organizations often choose deactivation instead of deletion for compliance reasons.

11. Revoking Consent for Marketing or Notifications

Users may opt out of:

• Emails

• SMS

• Push notifications

• Marketing messages

This does not delete the account. This only updates communication preferences.