1. Who We Are

Gilroy CHS Aquatics Center("we," "us," or "our") operates this site to manage swim lesson registration, facility passes, lane rentals, and related services. Our business address is 850 Day Rd, Gilroy, CA, 95020. You can reach us at gilroy@swanaquatics.com.

2. Information We Collect

We collect the following categories of personal information, using the CPRA categories from Cal. Civ. Code § 1798.140:

• Identifiers — name, email address, phone number, mailing address, and account credentials.
• Commercial information — records of your registrations, pass purchases, lane bookings, and payment history. Payment card details themselves are collected and stored by Stripe, our payment processor; we never see your full card number.
• Internet or other similar network activity — basic log data (IP address, browser type, pages visited) generated when you use the site. We do not use advertising or analytics trackers.
• Sensitive personal information — for participants you register (including minors under your care): date of birth, age, swimming level, medical allergies, medical conditions, current medications, physician name and phone, and emergency contact information. We treat this data as Sensitive Personal Information under CPRA § 1798.121 and use it only for the purposes listed below.
• Information about minors — the name, age, and medical details of children you enroll. This data is collected solely from the parent or guardian holding the account. We do not knowingly collect information directly from any child under 13 (see Children's Privacy below).

3. Where the Information Comes From

We collect personal information from:

• You, when you create an account, register a participant, sign a waiver, purchase a pass, or book a lane.
• Your device's interaction with our site (log data).
• Our payment processor (Stripe) when a transaction completes.

4. Why We Collect It

We use your information only for the following business purposes:

• To provide swim lessons, camps, passes, lane rentals, and related services you request.
• To process payments, issue refunds, and send receipts.
• To make medical and emergency-contact information available to lifeguards and instructors responsible for participant safety.
• To send transactional emails (confirmations, schedule changes, roster updates).
• To respond to your customer-service requests.
• To comply with legal obligations, including tax, recordkeeping, and subpoena response.

We do not use your information for targeted advertising, profiling, or automated decision-making.

5. Who We Share It With

We share personal information only with service providers who help us deliver the service, and only to the extent necessary for that purpose. Our service providers include:

• Supabase — database and authentication hosting.
• Stripe — payment processing. Stripe is subject to its own privacy policy.
• Vercel — hosting infrastructure.
• SendGrid (or equivalent) — transactional email delivery.

We do not sell or share your personal information for cross-context behavioral advertising as defined under CPRA § 1798.140(ad). We have not sold or shared personal information in the preceding 12 months, and we do not anticipate doing so.

6. How Long We Keep It

We retain personal information as follows:

• Account and registration records — for as long as your account is active, and up to 7 years afterward to comply with tax and financial recordkeeping requirements.
• Waiver signatures — for the longer of the applicable statute of limitations for personal-injury claims in California (typically 2 years) or as required by our insurance carrier.
• Medical and emergency-contact information — for the duration of the active registration plus 90 days, after which it is deleted or anonymized unless required for a pending claim.
• Server logs — typically 30 days.

7. Children's Privacy (under 13)

Our service is designed to be used by a parent or legal guardian on behalf of their child. We do not permit children under 13 to create their own accounts and we do not knowingly collect personal information directly from children under 13. When you, as the parent or guardian, enroll a child, you consent on the child's behalf to our collection and use of the information described in this policy, as permitted by the Children's Online Privacy Protection Act (COPPA) and California law.

A parent or guardian may review, delete, or refuse further collection of their child's information at any time by contacting us at gilroy@swanaquatics.com.

8. Your California Privacy Rights

If you are a California resident, you have the following rights under CCPA/CPRA:

• Right to Know — request a copy of the personal information we hold about you, including categories, sources, purposes, and recipients.
• Right to Delete — request that we delete personal information we collected from you, subject to legal exceptions (e.g., pending transactions, tax records, active claims).
• Right to Correct — request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing — we do not sell or share personal information, so there is nothing to opt out of. This right is listed here for completeness.
• Right to Limit Use of Sensitive Personal Information — you may direct us to limit our use of Sensitive Personal Information (e.g., medical data) to the minimum necessary to perform the service. Because we already do this by default, exercising this right does not change our handling — but you may still submit a request.
• Right to Non-Discrimination — we will not deny you service, charge you a different price, or provide a different level of service because you exercised any of these rights.

How to exercise a right. Email gilroy@swanaquatics.comwith the subject line "Privacy Request" and describe what you are asking for. We may need to verify your identity before we can process your request; typically we match the request against the email address on your account. We will respond within 45 days as required by CCPA § 1798.130.

Authorized agents. You may designate an authorized agent to submit requests on your behalf. The agent must provide written authorization signed by you, and we may still contact you directly to verify.

9. California Shine the Light

California Civil Code § 1798.83 permits California residents to request a list of third parties to whom we have disclosed personal information for those third parties' direct-marketing purposes in the preceding calendar year. We do not disclose personal information to third parties for their direct-marketing purposes. To make such a request, email gilroy@swanaquatics.com.

10. Data Security

We apply commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access or disclosure. No method of electronic transmission or storage is perfectly secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with a revised effective date. If a change materially affects your rights, we will provide additional notice by email or in-app banner.

12. Contact Us

Questions about this policy or your personal information? Contact gilroy@swanaquatics.com or write to Gilroy CHS Aquatics Center, 850 Day Rd, Gilroy, CA, 95020.