Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), Natty Hatty is required to inform California residents of the personal information we collect and the purposes for which we use it at or before the point of collection.

1. Categories of Personal Information We Collect

Natty Hatty may collect the following categories of personal information:

• Identifiers: name, email address, phone number, account credentials.

• Commercial Information: payment history, transactions (processed via Stripe).

• Internet/Device Information: IP address, device ID, browser type, login logs.

• Profile Information: team affiliations, roles, roster assignments.

• Protected Classifications: age (to determine youth sports eligibility).

• Documents & Signatures: waivers, contracts, e-signatures, audit trails.

• Parent/Guardian Data: information necessary to register minors.

• Minor Information: player name, age group, team/league placement (provided by the parent/guardian/organization).

We do not collect:

• Sensitive biometric data

• Geolocation tracking

• Social Security numbers

• Advertising identifiers

• Data from third-party trackers

2. Purposes for Collecting Personal Information

We collect personal information for the following purposes:

• Creating and managing user accounts

• Registering athletes for teams, tryouts, leagues, and programs

• Processing waivers, consent forms, and signatures

• Facilitating payments through third-party processors (Stripe)

• Maintaining secure platform access and fraud prevention

• Managing rosters and coach/organization operations

• Communicating updates related to youth sports participation

• Providing customer support and resolving account issues

• Ensuring child safety and COPPA compliance

• Maintaining audit logs and legal compliance

• Improving platform security and stability

We do not use personal information for:

• Behavioral advertising

• Selling or sharing data with third parties

• Profiling outside core sports functionality

• AI/ML training or automated decision-making

3. Retention Periods

Natty Hatty retains personal information only as long as necessary for legitimate business or legal reasons:

• Waivers & signed documents: 7 years

• Account data: while the account remains active

• Minor roster data: while tied to an active organization

• Payment data: managed by Stripe and retained per Stripe’s policies

• Audit logs: retained for compliance up to 7 years

When data is no longer needed, it is securely deleted.

4. Selling or Sharing of Personal Information

Natty Hatty does NOT sell or share personal information for cross-context behavioral advertising.

To exercise your right to opt-out (even though we do not sell/share data), visit:

👉 Do Not Sell or Share My Personal Information

5. Your Privacy Rights (California Residents)

California consumers may:

• Request to know what data we collect

• Request deletion of personal data

• Request correction of inaccurate information

• Access a copy of their information

• Limit use of child data

• Opt-out of sale/share (we do not sell/share data)

• Not be discriminated against for exercising privacy rights

You may submit requests at:

📧 legal@nattyhatty.com