Privacy Policy

Effective date: April 10, 2026

This Privacy Policy explains how Get Recruited Hoops (“we”, “us”, “our”) collects, uses, shares and protects personal data when you use our websites, mobile applications, and related services (collectively, the “Services”), including https://players.getrecruitedhoops.com.

We are committed to processing personal data in accordance with the EU General Data Protection Regulation (“GDPR”), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (“CCPA/CPRA”), the Texas Data Privacy and Security Act (“TDPSA”), the U.S. Children’s Online Privacy Protection Act (“COPPA”) where applicable, and other applicable data protection laws.

1. Who we are (Data Controller)

Get Recruited LLC is the data controller for personal data processed through the Services.

Headquarters: 350 Broken Arrow, Floresville, Texas, 78114, United States

General privacy contact: support@getrecruitedhoops.com

Data Protection Officer / EU representative inquiries: support@getrecruitedhoops.com

2. Scope

This Policy applies to players, parents/guardians, college and club coaches, scouts, event staff, administrators, and visitors who interact with our Services. It does not apply to third-party websites or services we link to but do not operate.

3. Personal data we collect

3.1 Information you provide

  • Account data: name, username, email address, password (hashed), role (player, coach, admin, etc.).
  • Player profile data: date of birth, gender, nationality, country, club, school, graduation year/class, position, height, weight, wingspan, vertical leap, jersey number, languages, academic information (e.g., GPA, SAT/ACT, NCAA ID), and similar athletic and academic attributes.
  • Media: profile photos, highlight videos, full-game videos (uploaded directly or via Vimeo), and links you provide.
  • Coach profile data: institution, division, role, contact details, and recruiting preferences.
  • Communications: messages, shortlists, notes, recommendations, support requests, and email correspondence.
  • Event and booking data: event registrations, payments, jersey allocations, attendance, and consent forms.
  • Payment data: processed by our payment provider (Stripe). We receive limited transaction metadata; we do not store full card details.

3.2 Information collected automatically

  • Device and log data: IP address, browser type, operating system, device identifiers, referrer URLs, pages viewed, and timestamps.
  • Cookies and similar technologies: see Section 11.
  • Usage data: feature usage, clicks, search queries, and performance metrics.

3.3 Information from third parties

  • Authentication providers (e.g., Google) when you sign in via OAuth.
  • Coaches, clubs, event organizers, scouts, or parents who submit your information for legitimate recruiting purposes.
  • Public sources such as official statistics platforms (e.g., FIBA, Euroleague) where you have a public profile.
  • Payment and email infrastructure providers for delivery and fraud-prevention metadata.

4. How we use personal data and legal bases (GDPR Art. 6)

  • Provide, maintain and improve the Services — contractual necessity (Art. 6(1)(b)).
  • Create and manage your account, profile and bookings — contractual necessity.
  • Showcase player profiles to verified coaches and scouts for recruiting purposes — contractual necessity and, where required, consent (Art. 6(1)(a)).
  • Process payments and prevent fraud — contractual necessity and legitimate interests (Art. 6(1)(f)).
  • Send transactional emails (e.g., bookings, password resets, verifications) — contractual necessity.
  • Send marketing or promotional communications — consent or legitimate interests, with an opt-out in every message.
  • Comply with legal, tax, accounting and safeguarding obligations — legal obligation (Art. 6(1)(c)).
  • Protect the safety and rights of users, including minors — legitimate interests and, where applicable, vital interests (Art. 6(1)(d)).
  • Analytics, security monitoring, debugging and fraud prevention — legitimate interests.

5. Children and minors

  • Many of our users are youth athletes. We design the Services with safeguarding in mind.

    • We do not knowingly collect personal data from children under 13 without verifiable parental consent (COPPA).
    • For users under 16 in the European Economic Area (or the relevant national age threshold between 13–16), processing based on consent requires parental or guardian authorization.
    • Parents or guardians may contact us at any time to review, correct, or delete their child’s personal data.
    • Administrators may flag certain profiles as video-exempt for child-protection reasons; in those cases highlight video requirements are bypassed and additional restrictions apply.

6. How we share personal data

We do not sell personal data. We share information only as described below:

    • With verified coaches, scouts and recruiters: player profile information is the core purpose of the Services and is visible to authenticated users with appropriate roles and subscriptions.
    • With event organizers and partners: where you register for an event, your booking and relevant profile data is shared with the organizer.
    • With service providers (data processors) acting on our instructions, including hosting and database, email delivery, video hosting (Vimeo), payment processing (Stripe), notifications (e.g., ntfy, Slack), analytics, and customer support tools.
    • With professional advisors, auditors and insurers under confidentiality.
    • With law enforcement, regulators or courts when legally required, or to protect rights, safety, and to prevent fraud.
    • In connection with a corporate transaction (merger, acquisition, financing, reorganization, or sale of assets), subject to confidentiality.

7. International data transfers

International data transfers

Our headquarters is in Texas, United States, while many of our users and operations are in the European Union and other regions. Personal data may therefore be transferred to, stored in, or processed in the United States or other countries that may not provide the same level of data protection as your country of residence.

Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, the EU–U.S. Data Privacy Framework (where applicable), and supplementary technical and organizational measures.

You may request a copy of the relevant safeguards by emailing support@getrecruitedhoops.com.

8. Data retention

We keep personal data only as long as necessary for the purposes described in this Policy, to provide the Services, and to comply with our legal obligations.

  • Account and profile data: for the life of your account and up to 24 months after closure, unless a longer period is required by law.
  • Event bookings and payment records: typically retained for 7–10 years to meet tax and accounting obligations.
  • Communications and support records: up to 36 months after the last interaction.
  • Analytics and security logs: up to 24 months in identifiable form.
  • Backups: deleted on a rolling basis according to our backup rotation schedule.

9. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

  • Access — obtain confirmation of whether we process your data and a copy of it.
  • Rectification — correct inaccurate or incomplete information.
  • Erasure (“right to be forgotten”) — request deletion in certain circumstances.
  • Restriction — limit how we process your data.
  • Portability — receive your data in a structured, commonly used and machine-readable format.
  • Objection — object to processing based on legitimate interests, including profiling and direct marketing.
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.
  • Lodge a complaint — with your local supervisory authority (in the EU/EEA) or the UK Information Commissioner’s Office.
  • S. state-specific rights (CCPA/CPRA, TDPSA, VCDPA, CPA, etc.) — right to know, delete, correct, opt out of “sale” or “sharing” for cross-context behavioral advertising, and limit use of sensitive personal information. We do not sell personal data and do not engage in cross-context behavioral advertising.
  • Non-discrimination — we will not discriminate against you for exercising your rights.

To exercise any of these rights, email support@getrecruitedhoops.com. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law (generally 30 days under GDPR; 45 days under CCPA, extendable as permitted).

10. Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include encryption in transit (TLS), encryption at rest, hashed passwords, role-based access controls, row-level security, audit logging, least-privilege access for staff, secure development practices, and ongoing monitoring.

No system is 100% secure. If we become aware of a personal data breach affecting your data, we will notify you and the relevant supervisory authorities as required by law.

11. Cookies and similar technologies

We use strictly necessary cookies and local storage to operate the Services (e.g., authentication, session management, theme and sidebar preferences). We may also use analytics and performance cookies, subject to your consent where required.

You can control cookies through your browser settings and, where shown, through our cookie banner. Refusing non-essential cookies will not prevent you from using core features of the Services.

12. Marketing communications

We may send you newsletters, product updates, event invitations and promotional content. You can opt out at any time by clicking “unsubscribe” in the email or contacting us. Transactional and account-related emails are not marketing and cannot be opted out of while you have an active account.

13. Automated decision-making

Some features (such as player matching, recommendation, and shortlist suggestions) use automated logic to surface relevant profiles to coaches. These tools assist human decision-making and do not, by themselves, produce legal or similarly significant effects on you. You can request human review by contacting us.

14. Public profiles and user-generated content

Player and coach profiles are intended to be visible to other authenticated users of the platform within the appropriate role and subscription. Information you choose to publish (e.g., highlight videos, social media links, statistics) may also be visible. Please consider carefully what you submit.

15. Third-party links and services

The Services may link to or embed third-party content (e.g., Vimeo videos, statistics providers, social media). Their privacy practices are governed by their own policies, which we encourage you to review.

16. Changes to this Policy

We may update this Policy from time to time. The updated version will be indicated by a revised “Effective date” and will be effective when posted. If changes are material, we will provide additional notice (e.g., by email or in-product notice).

17. How to contact us

If you have questions, requests, or complaints about this Policy or our processing of your personal data, please contact:

Get Recruited LLC

350 Broken Arrow, Floresville, Texas, 78114, United States

Email (general privacy): support@getrecruitedhoops.com

Email (Data Protection / EU representative): support@getrecruitedhoops.com

18. EU/UK Representative

GDPR or UK GDPR, we have appointed a representative in the European Union and the United Kingdom. To request representative details, email support@getrecruitedhoops.com.