GLSM — Gignac Lajoie Sport Management
Legal

Privacy Policy

Last updated: November 2025

Gignac/Lajoie Sport Management ("GLSM", "we", "us", "our") is the data controller responsible for personal information processed through the website located at glsportmanagement.ca (the "Site") and our related services (the "Client Portal", player-development registration, booking, and communications). This Privacy Policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have.

1. Information we collect

  • Identity and contact data — name, email address, phone number, mailing city/country, and (where relevant) parent or guardian contact details.
  • Player profile data — date of birth, position, shot, team, league, level, hometown, playing history, and information you choose to include in registrations, bookings, or contact forms.
  • Account and authentication data — email address, hashed password, and session tokens for the Client Portal.
  • Transaction data — order and subscription records (plan, price, status, renewal dates) and metadata returned to us by our payment processor. Full card details are handled by Paddle and never stored on our systems.
  • Usage and device data — pages viewed, actions taken in the Client Portal, IP address, browser type, operating system, and approximate location derived from IP.
  • Support and communications — the content of messages you send us and records of our correspondence with you.

2. How we use your information

  • Create and manage your account and Client Portal access.
  • Provide advisory services, respond to inquiries, and schedule consultations.
  • Process registrations and payments for the Client Portal and player-development sessions.
  • Send transactional communications (receipts, session confirmations, account and security notices).
  • Operate, secure, monitor, and improve the Site and our services, including fraud prevention and abuse detection.
  • Comply with legal, tax, accounting, and regulatory obligations.
  • Send occasional marketing about our services where you have opted in, with an unsubscribe option in every message.

3. Legal bases

Where applicable data-protection law requires a legal basis, we rely on: performance of a contract with you (to provide the Service you signed up for), our legitimate interests (to secure the Service, prevent fraud, improve our offering, and communicate about your account), consent (for optional marketing emails and non-essential cookies), and legal obligation (to keep records required by tax, accounting, and other applicable law).

4. Who we share it with

We share personal information only with the following categories of recipients:

  • Merchant of Record — Paddle. Paddle.com Market Ltd and its affiliates act as reseller and Merchant of Record for our paid products, and process payment, billing, tax, invoicing, refunds, and subscription lifecycle events on our behalf. See Paddle's privacy policy.
  • Service providers and subprocessors — hosting and application infrastructure (Lovable, Cloudflare), our managed database and authentication provider (Supabase), scheduling (Calendly), email delivery (managed email through our platform), and analytics/error monitoring tooling used to operate the Site.
  • Professional advisers — legal, accounting, and insurance advisers where necessary.
  • Authorities — where required by law, legal process, or to protect our rights, users, or the public.
  • Business transfers — a successor entity in the event of a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

We do not sell or rent your personal information.

5. International transfers

Some of our service providers are located outside Canada, including in the United States and the European Economic Area. Where personal data is transferred outside your jurisdiction, we rely on appropriate safeguards such as data-processing agreements and, where required, Standard Contractual Clauses.

6. Data retention

We keep personal information only as long as needed for the purposes described above. Typical retention periods:

  • Account and Client Portal data — for the life of the account and up to 24 months after closure.
  • Player-development registrations — up to 24 months after the session date.
  • Contact-form and inquiry messages — up to 24 months after last contact.
  • Order and tax records — as required by applicable tax and accounting law (typically 6–7 years).
  • Server, security, and abuse-prevention logs — up to 12 months.

When no longer required, personal data is deleted or irreversibly anonymised.

7. Your rights

Subject to applicable law you have the right to (a) access the personal data we hold about you, (b) request correction of inaccurate data, (c) request deletion of your data, (d) request restriction of, or object to, certain processing, (e) request a portable copy of data you provided, (f) withdraw consent where processing is based on consent, and (g) lodge a complaint with your local privacy or data-protection authority (in Canada, the Office of the Privacy Commissioner). To exercise any of these rights, contact us at glsportsmgmt@gmail.com. We will respond within the period required by applicable law (typically 30 days).

8. Security

We use appropriate technical and organisational measures to protect personal information, including encryption of data in transit (HTTPS/TLS), encryption at rest for our managed database, access controls and role-based permissions, secure authentication, and regular review of our providers. No system is perfectly secure — if you believe your account has been compromised, please contact us immediately.

9. Cookies

We use a small number of essential cookies and similar technologies to keep you signed in, remember preferences, and secure the Site. Where we use analytics or performance cookies they are limited to understanding how the Site is used. You can control cookies through your browser settings; disabling essential cookies may affect Site functionality.

10. Children

The Client Portal and paid services are intended for use by adults or by minors with the involvement of a parent or guardian. We collect information about minor athletes only with parental or guardian consent through our registration and booking forms.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be highlighted on the Site or communicated by email where appropriate.

12. Contact

Gignac/Lajoie Sport Management · glsportsmgmt@gmail.com.