Privacy Policy - Shakhtar Academy Toronto

Website Legal Document — Publicly Available

This Privacy Policy is published on the Academy’s website for informational purposes and applies to all individuals whose personal information is collected by the Academy. It does not require a signature and should be linked in the website footer alongside the Cookies Policy and Terms & Conditions.

This Privacy Policy applies to Canada Football Sports Investment Inc., operating as Shakhtar Academy Toronto (the “Academy”, “we”, “us”, “our”). We are committed to protecting personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy principles.

This Policy explains what personal information we collect, when and why we collect it, how we use and protect it, and how you can access or correct it.

Our Cookies Policy and Terms & Conditions are published as separate documents on the Site. This Privacy Policy does not repeat those terms except where necessary to explain our privacy practices.

1. WHAT IS “PERSONAL INFORMATION”?

Under PIPEDA, “personal information” means any information about an identifiable individual. This includes information that can identify a person on its own or when combined with other available information.

The Academy collects personal information about both adults (parents and guardians) and minors (participants). Additional protections that apply to the collection of information about minors are addressed in Section 13.

2. WHAT PERSONAL INFORMATION DO WE COLLECT?

The following categories of personal information may be collected:

Participant — Identity: Full name, date of birth, gender (where required by governing body).
Participant — Safety: Emergency contact details, medical alerts, allergies, injury notes (voluntarily provided).
Parent / Guardian: Full name, email address, phone number, mailing address (where required).
Account / Registration: Login details, profile data via Playmetrics or website registration forms.
Payment: Transaction records and invoices. Full card numbers are not stored by the Academy — processed by third-party payment processor only.
Website / Technical: IP address, browser/device type, pages visited, analytics data. See Cookies Policy for full details.

We do not collect sensitive personal information (such as medical diagnoses or detailed health records) unless voluntarily provided by the Parent/Guardian for the safety and wellbeing of the Participant. Such information is used solely for emergency response and program safety purposes.

3. WHEN DO WE COLLECT PERSONAL INFORMATION?

We collect personal information when you:

Register for a program, camp, or Academy event
Create or update a participant profile in Playmetrics or on our website
Make a payment or request an invoice
Subscribe to Academy communications or newsletters
Complete a form or contact us by email, phone, or messaging
Visit and interact with our website (technical and analytics data collected automatically)

4. HOW DO WE USE YOUR PERSONAL INFORMATION?

We use personal information only for the purposes for which it was collected or for closely related purposes consistent with your reasonable expectations. Specifically, we use it to:

Register participants and administer Academy programs, camps, and events
Manage teams, rosters, schedules, attendance, and internal communications
Process payments and provide receipts and invoices
Support participant safety and emergency response
Meet insurance, legal, and regulatory requirements
Register participants with applicable soccer governing bodies where required
Communicate with parents and guardians about program operations
Improve our services, operations, and website performance

We do not sell, rent, or trade personal information to any third party for their own commercial purposes.

5. CONSENT

By registering for Academy programs, submitting forms, or using our services, you consent to the collection, use, and disclosure of personal information as described in this Privacy Policy.

For minors, consent is provided by the Parent or Legal Guardian on behalf of the Participant.
You may withdraw consent for non-essential uses (such as marketing communications) at any time, subject to legal or contractual obligations and reasonable notice. Withdrawal of consent does not apply retroactively.
Withdrawal of consent for operational data collection (e.g., registration and safety information) may affect the Academy’s ability to provide services.

6. MARKETING COMMUNICATIONS & CASL

The Academy complies with Canada’s Anti-Spam Legislation (CASL). Any marketing or promotional emails we send will include a clearly visible unsubscribe mechanism. Unsubscribe requests will be processed within 10 business days in accordance with CASL requirements.

Operational messages — including schedule updates, safety notices, payment confirmations, and program communications — are not subject to CASL unsubscribe requirements and may be sent as necessary for program administration.

7. WHO DO WE SHARE PERSONAL INFORMATION WITH?

We share personal information only as necessary to deliver Academy programs and services:

Playmetrics (program management platform): Registration, rosters, schedules, payments, communications.
Payment processors: Transaction processing only. No full card data stored by Academy.
Insurance providers: Participant details required for coverage and claims administration.
Ontario Soccer / governing bodies: Registration compliance where required by league or governing rules.
Website / email service providers: Hosting, analytics, and operational communications.

We do not share personal information with third parties for their own independent marketing or commercial purposes. We require all service providers to implement appropriate data safeguards and to use personal information only for the specific services they provide to the Academy.

8. CROSS-BORDER PROCESSING

Some of the service providers we use (including Playmetrics and certain analytics or email platforms) may store or process personal information outside Canada, including in the United States. Where this occurs, personal information may be subject to the laws of the jurisdiction where it is processed, including laws that may permit government access to personal information.

We take reasonable steps to ensure appropriate protection through contractual commitments and by selecting providers with established data security and privacy practices.

9. HOW DO WE PROTECT YOUR PERSONAL INFORMATION?

We implement reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold. These measures may include:

Access controls: personal information is accessible only to authorised Academy personnel who require it to perform their role.
Secure systems: our program management and payment platforms use industry-standard security practices including encryption.
Vendor standards: we require service providers to maintain appropriate security measures.

No method of electronic transmission or storage is completely secure. While we work to protect personal information using commercially reasonable safeguards, we cannot guarantee absolute security.

10. RETENTION OF PERSONAL INFORMATION

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law, insurance obligations, or regulatory requirements. When personal information is no longer required, it is securely destroyed, deleted, or anonymised.

Retention periods may vary depending on the nature of the information. For example, safety-related medical information and incident records may be retained for a longer period to meet insurance and legal requirements.

11. PRIVACY BREACH NOTIFICATION

Under PIPEDA, organisations are required to report to the Office of the Privacy Commissioner of Canada and to notify affected individuals of any breach of security safeguards that poses a real risk of significant harm.

If a breach occurs, the Academy will:

Take immediate steps to contain the breach and assess the risk
Notify affected individuals and the Office of the Privacy Commissioner as required by law
Maintain a record of the breach in accordance with PIPEDA requirements

12. ACCESS, CORRECTION & INDIVIDUAL RIGHTS

Under PIPEDA, individuals have the right to:

Request access to the personal information the Academy holds about them
Request correction of inaccurate or incomplete personal information
Withdraw consent for non-essential uses of their personal information

Requests should be submitted in writing to our Privacy Officer (see Section 17). We will respond within a reasonable timeframe, typically within 30 days, and may require identity verification before releasing or amending personal information.

13. CHILDREN’S PRIVACY

Important — Youth Sports Organisation

The Academy is a youth sports organisation. The majority of participants are minors under the age of 18. The collection and handling of personal information about minors is subject to heightened care and specific obligations under PIPEDA and applicable Ontario law.

Collection of Minors’ Information

The Academy collects personal information about minors solely for the purposes of program administration, participant safety, and legal and insurance compliance. We do not collect personal information about minors for marketing, profiling, or commercial purposes.

Parental / Guardian Consent

All consent for the collection and use of a minor’s personal information is obtained from the Parent or Legal Guardian. By completing registration on behalf of a minor, the Parent/Guardian confirms their authority to provide such consent and represents that the information submitted is accurate.

Safety-Related Medical Information

Where a Parent/Guardian voluntarily provides medical alerts, allergy information, or injury notes for a participant, this information is used exclusively for participant safety and emergency response. It is not disclosed beyond the Academy personnel who require it for this purpose.

Access by Parents / Guardians

Parents and Guardians may request access to, or correction of, personal information held about their minor child by contacting the Academy’s Privacy Officer. Requests will be handled in accordance with Section 12.

Media & Photography

The Academy’s Media Consent provisions for minors are addressed separately in the Participant Waiver, Release of Liability & Indemnity Agreement. Parents and Guardians who do not wish to grant media consent must notify the Academy in writing at info@shakhtaracademy.ca prior to the commencement of participation.

14. EXTERNAL LINKS

Our website may include links to third-party websites, including governing body websites, facility partners, or social media platforms. The Academy is not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

15. BRAND & LEGAL RESPONSIBILITY NOTICE

Shakhtar Academy Toronto is operated by Canada Football Sports Investment Inc. under a licensed brand and program arrangement. The Academy is solely responsible for the operation of its programs and the collection and handling of personal information in connection with those programs.

FC Shakhtar Donetsk and its affiliated entities do not assume legal responsibility for the Academy’s operations, and this Privacy Policy does not create rights or obligations between such entities and third parties.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in legislation, our operational practices, or the services we provide. The most recent version will always be posted on the website with an updated “Last Updated” date.

Continued use of our services or website following any update constitutes acceptance of the revised Policy. Where changes are material, we will take reasonable steps to notify registered families directly.

17. CONTACT US — PRIVACY OFFICER

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, please contact our Privacy Officer:

Organisation: Canada Football Sports Investment Inc., operating as Shakhtar Academy Toronto

Privacy Officer Email: privacy@shakhtaracademy.ca General Enquiries: info@shakhtaracademy.ca Address: 18 King St E, Suite 1400, Toronto ON M5C 1C4

Effective Date: January 30th, 2026 Last Updated: January 30th, 2026