Privacy Policy

This Privacy Policy explains how The PoolZones ("we", "us") collects, uses, and shares personal information. We are based in Ontario, Canada and comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the California Consumer Privacy Act (CCPA) for California residents.

1. Information we collect

• Account: email address, optional display name, hashed password, sign-in provider (e.g. Google).
• Payment: billing name, billing address, country, and card details. Card numbers are collected and stored by our payment processor (Stripe); we never see or store your full card number.
• Product usage: pages viewed, reports opened, watchlist items you save, unsubscribe status.
• Technical: IP address, browser type, and device information collected via first-party cookies and standard server logs.

2. How we use it

• Deliver daily reports and operate your subscription.
• Authenticate you and prevent fraud.
• Send transactional emails (receipts, cancellation confirmations, service updates).
• Improve our models and features using aggregated, non-identifying usage data.
• Comply with legal obligations (tax, accounting, responding to lawful requests).

3. Sharing & processors

We do not sell personal information. We share limited data with vendors who process it on our behalf under contract:

• Stripe — payment processing, tax calculation and remittance.
• Cloud infrastructure provider — hosting, database, authentication.
• Email delivery provider — sending reports and transactional emails.

We may disclose information if required by law, court order, or to protect our rights or the safety of users.

4. Cookies

We use first-party cookies strictly necessary for authentication and session management. If we add analytics in the future, it will be privacy-preserving and aggregated, and we will update this policy.

5. Data retention

We retain account data while your account is active and for up to 24 months after deletion for accounting, tax, and fraud-prevention purposes, or longer if required by law. Payment records are retained by Stripe according to their retention policy.

6. Your rights

You have the right to access, correct, delete, or port your personal information, and to withdraw consent to marketing communications at any time. California residents have additional rights under the CCPA, including the right to know, delete, and opt out of sale (we do not sell personal information). To exercise any right, email hello@thepoolzones.com.

7. International transfers

The PoolZones is operated from Canada and uses processors in the United States and the European Union. By using the Service you consent to your data being processed in these jurisdictions.

8. Children

The PoolZones is 19+/21+ and is not directed to anyone under the applicable minimum age. We do not knowingly collect information from minors.

9. Security

We use TLS in transit, encrypted storage at rest, and least-privilege access controls. No system is 100% secure. In the event of a data breach affecting your personal information, we will notify you and applicable regulators as required by law.

10. Changes

Material changes will be announced by email or on the Service before taking effect.

11. Contact

Privacy questions and requests: hello@thepoolzones.com

This Policy is a starting-point template. Have it reviewed by a Canadian privacy lawyer before public go-live.