Privacy Policy

Effective date: 2025-09-09

Introduction

NightSet Athletics (“we”, “us”) respects privacy and protects personal data processed through our website and related services. This document explains what we collect, why, how long, and the rights available to individuals.

Data categories

• Contact data: name, email, message content, and subject.
• Transactional metadata: item interest, pricing tier, and order notes.
• Technical data: IP address, device, browser user agent, and pages visited.
• Cookie data: consent choice and site preferences (non-essential only with consent).

Purposes and legal bases

• Respond to inquiries and provide quotes: contract or pre-contract steps (GDPR Art. 6(1)(b)).
• Operate and secure the site, prevent abuse: legitimate interests (Art. 6(1)(f)).
• Analytics and improvements (if enabled): consent (Art. 6(1)(a)).
• Legal obligations: invoicing, accounting, tax (Art. 6(1)(c)).

Cookies and tracking

We use essential cookies for core functions and a single preference cookie to store your consent choice (accepted or essential-only). Non-essential analytics or marketing cookies are disabled until consent is granted. SameSite=Lax is used for the consent cookie to balance usability and security. See Cookie Policy for details.

Retention

• Contact submissions: 24 months unless a customer relationship continues.
• Server logs: 12 months, unless required for security investigations.
• Consent records: 24 months to evidence preferences.

Sharing and transfers

We may share data with vetted processors for hosting, form handling, and support under data processing agreements. If data leaves the EEA/UK, safeguards such as SCCs and supplementary measures will be applied where required.

Data subject rights

Depending on jurisdiction, rights may include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent without affecting prior processing. A complaint can be lodged with a supervisory authority.

Security

We implement encryption in transit, strict access controls, least-privilege roles, and periodic reviews. No internet service is perfectly secure, but we strive to minimize risk with layered defenses.

Children

Our site and products are not directed to children under 16. We do not knowingly collect data from children; requests for deletion will be honored.

Changes

Policy updates may occur to reflect operations or legal requirements. Material updates will be announced on this page with a new effective date.

Contacts

For privacy requests, email [email protected] or write: Privacy, NightSet Athletics, 22 Arcade Row, Eclipse Park.