1. Purpose of Retention

Natty Hatty retains documents to:

• Provide Organizations with legally required records

• Maintain compliance with e-signature laws (ESIGN, UETA, eIDAS)

• Support safety, legal, insurance, and audit requirements of Organizations

• Maintain document integrity and prevent tampering

• Provide access to signed waivers and agreements for verification

Natty Hatty does not use signed documents for advertising or training AI/ML.

2. What Documents Are Retained

Natty Hatty retains:

• Signed waivers

• Liability releases

• Medical or participation acknowledgments

• Policy agreements

• Registration-related documents

• Payment-linked signature documents

• Digital audit logs

• IP address, timestamp, and device metadata associated with signatures

• Hash values and verification receipts (“locking” the document)

Natty Hatty does not store the contents of handwritten signatures or biometric signatures.

3. How Long Documents Are Retained

Documents tied to a transaction or signature are retained for the period required by the Organization.

Organizations determine the legal or policy-based retention period.

Standard retention:

Up to 7 years (common in youth sports liability and insurance requirements)

However, Organizations may request shorter or longer retention to meet:

• State or federal laws

• Insurance carrier mandates

• Governing-body policies

• Internal legal requirements

Natty Hatty follows the Organization’s requirements unless restricted by law.

4. Signatures Are Permanent and Cannot Be Deleted

Once a document is signed:

• It becomes a permanent, immutable record

• It cannot be revoked or removed retroactively

• Refunds do not cancel or delete signed documents

• Editing requires issuing a new document

• The signed version is preserved in full

This ensures legal validity and compliance with ESIGN and UETA standards.

5. Audit Logs Are Retained With the Document

For every document that is signed, Natty Hatty retains:

• Time and date of signature

• Signer’s name (as entered)

• IP address

• Device and browser metadata

• Document version ID

• Organization requesting the signature

• Signature method

• Hash integrity record

• Consent confirmation

Audit logs are stored for the same duration as the signed document.

6. Who Can Access Retained Documents

Organizations

Organizations have full access to the documents they create and collect.

They may:

• Download

• Export

• Store offline

• Archive

• Share within their staff as permitted by law

Signers (Parents / Guardians / Adults)

may request a copy of their own signed documents by contacting the Organization directly.

Natty Hatty

may access documents only for:

• Platform support

• Legal compliance

• Security auditing

• Dispute investigation

• Fraud prevention

Natty Hatty does not read or interpret document content.

7. Secure Storage & Integrity Protection

All documents are stored using:

• AES-256 encryption at rest

• TLS 1.2+ encryption in transit

• AWS secure infrastructure

• Cloudflare protection for public accesses

• Tamper-evident hashing

• Immutable audit logs

Documents cannot be modified once finalized.

8. When Documents Are Deleted

Deletion may occur:

• When the Organization requests deletion and no legal or compliance restrictions apply

• When required by law (e.g., privacy rights requests)

• When retention periods expire

Natty Hatty may deny deletion requests if:

• The document is required for safety or liability reasons

• It is tied to a payment dispute or active issue

• It is required for legal compliance

• It involves a minor and must be retained under youth-protection rules

9. Relationship With Privacy Laws

Natty Hatty’s retention practices comply with:

• ESIGN

• UETA

• eIDAS (Standard Electronic Signatures)

• CPRA (California)

• COPPA (for minors)

• Applicable state youth-sports regulations

• General consumer privacy standards

Deletion requests from parents are routed through the Organization, not Natty Hatty.

10. Accuracy & Responsibility of Organizations

The Organization is solely responsible for:

• The content of the documents

• Legal sufficiency

• Retention period requirements

• Compliance with state youth-sports laws

• Ensuring that the correct document versions are issued

Natty Hatty is a technical provider, not a legal document author.

11. Contact Information

For questions about document retention:

For copies or corrections of signed documents:

Contact the Organization that created the document.