Privacy Rights
PRIVACY RIGHTS
Website Privacy Policy (California CCPA/CPRA–aligned)
Last updated: November 6, 2025
San Diego Paragliding School / Max Acro Paragliding (“we,” “us,” “our”) provides paragliding instruction, clinics, and related services. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights available to California residents under the CCPA/CPRA.
Information We Collect
We collect the following categories of information:
We use personal information to:
We share information only as needed for the purposes above:
Our services are intended for adults. For students under 18, a parent/guardian must provide consent. We do not knowingly sell or share minors’ data.
Data Retention
We implement reasonable safeguards: HTTPS, account access controls, unique strong passwords, multi-factor authentication on admin accounts, least-privilege access, and encrypted cloud storage for exported rosters/waivers. No method of transmission or storage is 100% secure.
Your Privacy Rights (California)
California residents may:
Email maxacroparagliding@gmail.com with the subject “Privacy Request.” Tell us which right you wish to exercise and provide enough information to verify your identity (e.g., name, email used to register, course/date). We will confirm receipt within 10 days and respond within 45 days (extensions permitted by law).
International Transfers
Service providers may store data in the U.S. or other countries. We take reasonable steps to protect your information consistent with this Policy.
Changes to This Policy
We may update this Policy. The “Last updated” date reflects the latest version. Material changes will be posted on our website.
Contact
Questions or requests: maxacroparagliding@gmail.com
Last updated: November 6, 2025
San Diego Paragliding School / Max Acro Paragliding (“we,” “us,” “our”) provides paragliding instruction, clinics, and related services. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights available to California residents under the CCPA/CPRA.
Information We Collect
We collect the following categories of information:
- Identifiers: name, email address, phone number, postal address.
- Sensitive/High-risk identifiers: date of birth; emergency contact.
- Customer records & training data: course registrations, waivers, certifications, incident reports, progress notes.
- Commercial information: purchases, payment confirmations (processed by third-party processors; we do not store full payment card numbers).
- Internet or device data: basic analytics (pages visited, referrer, device/browser type, IP address).
- User-provided content: messages sent through forms or email, feedback, media uploads (if applicable).
- Directly from you (website forms, email, phone).
- Automatically from your browser/device (cookies/analytics).
- From service providers you interact with through us (payment processors, learning platforms).
We use personal information to:
- Register you for classes/clinics and manage schedules.
- Communicate about training, safety, logistics, and policy updates.
- Verify membership/ratings with relevant bodies (e.g., USHPA) when required.
- Process payments and issue receipts.
- Maintain safety, incident, and insurance records as required by law or contract.
- Improve our services, website functionality, and customer support.
- Comply with legal obligations and enforce our terms.
We share information only as needed for the purposes above:
- Website & hosting provider (Site123 or equivalent): site and form hosting.
- Payment processors (e.g., Stripe/Square/PayPal): to process transactions.
- Learning & membership platforms (e.g., USHPA, Sport80, eTrainu): if required for certification, membership, or course delivery.
- Email/communications & cloud storage providers (e.g., Gmail/Google Drive): to communicate and securely store records.
- Professional advisors & insurers: for compliance, insurance claims, and safety documentation.
We do not sell personal information and we do not share it for cross-context behavioral advertising.
Our services are intended for adults. For students under 18, a parent/guardian must provide consent. We do not knowingly sell or share minors’ data.
Data Retention
- Training/waiver and incident/safety records: up to 7 years (or longer if required by insurance or law).
- Routine registration/contact data: 3 years after last interaction.
- You may request deletion earlier (see “Your Privacy Rights”); some records may be retained to comply with legal or safety obligations.
We implement reasonable safeguards: HTTPS, account access controls, unique strong passwords, multi-factor authentication on admin accounts, least-privilege access, and encrypted cloud storage for exported rosters/waivers. No method of transmission or storage is 100% secure.
Your Privacy Rights (California)
California residents may:
- Know/Access the categories and specific pieces of personal information we collected about you.
- Correct inaccurate personal information.
- Delete personal information (subject to lawful exceptions, e.g., safety/insurance records).
- Limit use of sensitive information (we only use DOB and emergency contact for training/safety and do not use it for marketing).
- Opt-out of “sale”/“sharing” (we do not sell/share).
- Non-discrimination for exercising your rights.
Email maxacroparagliding@gmail.com with the subject “Privacy Request.” Tell us which right you wish to exercise and provide enough information to verify your identity (e.g., name, email used to register, course/date). We will confirm receipt within 10 days and respond within 45 days (extensions permitted by law).
International Transfers
Service providers may store data in the U.S. or other countries. We take reasonable steps to protect your information consistent with this Policy.
Changes to This Policy
We may update this Policy. The “Last updated” date reflects the latest version. Material changes will be posted on our website.
Contact
Questions or requests: maxacroparagliding@gmail.com