Privacy Policy

Last Updated: March 19, 2026

1. WELCOME

ECD Lacrosse, Inc. (“ECDLAX,” “we,” “us,” or “our”), along with our subsidiaries and affiliates , including East Coast Dyes, Inc., operates the website https://ecdlax.com (the “Site”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information in compliance with the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Maryland Online Data Privacy Act (MODPA), and other applicable privacy laws. By accessing the Site on any computer, mobile phone, tablet, or other device (collectively, a “Device”) or otherwise interacting with ECDLAX, you agree to the terms of this Privacy Policy. By using our Site, you consent to the collection, use, and storage of information as outlined in this Privacy Policy. If you do not agree, please do not use the Site.

2. INFORMATION WE COLLECT

2.1 Automatically Collected Information

When you use our Site, we may collect certain information automatically, which may include device and usage information such as:

IP address
Browser and device characteristics
Operating system
Language preferences
Referring URL
Device name
Country or approximate location
Information about when and how you use our Site

When you access our Site through a mobile device, we may also collect certain mobile device information, including:

device type
mobile operating system
mobile browser type

2.2 Communications

We collect your email address if you sign up to receive emails, invites, program announcements, or newsletters from ECDLAX.

We may also collect information when you:

submit a contact form
communicate with us via email or other channels

2.3 Payment information

When you make a purchase, payment card information is generally processed by third-party payment processors and/or subscription platforms. We may receive limited information about the transaction (such as payment status and partial card metadata like card type and last four digits), but all transactions are processed by a third-party payment provider.

2.4 Automatically Collected Information

When you use our Site, we may collect certain information automatically from you, which may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about when and how you use our Services, and other technical information. When you access our Services through a mobile device, we also automatically collect certain mobile device information, including the type of device, your mobile operating system, and your mobile Internet browser.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the purposes described in this Privacy Policy, which may include to:

Process payments
Operate, maintain, and improve our Site
Respond to inquiries and requests for support
Send administrative communications such as confirmations, updates, policy notices, or security alerts
Enforce our policies and protect our organization, participants, and the public
Prevent, investigate, and respond to fraudulent or unlawful activity
Comply with legal obligations

We may communicate with you via email or other permitted channels to provide services and updates related to your interaction with ECDLAX. You may opt out of marketing communications at any time.

3.1 Photography, Video, and Media Content

ECDLAX may capture photographs, video recordings, or other media depicting participants and attendees at events or lacrosse games. These materials may be used for legitimate organizational purposes, including program documentation, website content, social media posts, highlight reels, or recruiting communications. To the extent such media constitutes personal information under applicable law, it will be processed in accordance with this Privacy Policy. Parents or legal guardians who wish to request the removal of specific media content may contact us using the contact information provided below.

Policy and govern the collection and use of information in connection with the applicable program or event.

4. LEGAL BASES FOR PROCESSING

Where applicable (including for users located in the EEA, Switzerland, or the UK), we process personal data only when we have a lawful basis to do so:

Performance of Contract. When you become a Member and subscribe, we will process your information to provide you with member benefits, including access to member-only content, and as necessary to fulfill those obligations.
Legitimate Interests. We may process personal data for organizational administration, alumni engagement, fraud prevention, security monitoring, analytics, and governance purposes, provided those interests are not overridden by your rights.
Consent. Where required, we rely on your consent (e.g., marketing communications, certain cookies). You may withdraw consent at any time.
Legal Compliance. We process personal data as necessary to comply with legal and regulatory obligations.

5. DISCLOSURE AND SHARING OF INFORMATION

We do not sell or rent your personal information. We may disclose personal information in accordance with this Section, including:

5.1 Service Providers

We may share personal information with service providers that help us operate the Services, such as:

Website hosting and infrastructure providers;
Email and newsletter delivery vendors;
Customer support tools;
Analytics and security vendors; and
Order and payment-related vendors.

These service providers are contractually required to use your information solely to provide services to us (and for no other purpose) and to comply with appropriate security measures.

5.2 Program Operations

Where necessary to administer ECDLAX programs, personal information may be shared internally with:

coaches
program administrators
event coordinators

Such sharing is limited to legitimate operational purposes.

5.3 Advertising, Sponsorship, and Measurement

ECDLAX may work with advertising services that use cookies or similar technologies to understand performance, measure ad impressions, and improve delivery. Depending on the tools used, these disclosures could be considered “sharing” for cross-context behavioral advertising under certain laws. If so, we provide opt-out mechanisms as described in the “Your Privacy Rights” section below.

5.4 Business Transfers

In the event of a merger, restructuring, or organizational transition, personal information may be transferred as part of that process, subject to continued protection consistent with this Privacy Policy.

5.5 Analytics Services

We use third-party web analytics services, including, but not limited to, YouTube and Attentive, in our online services. These providers help us analyze how users navigate our online platforms. Information collected through these analytic services is automatically sent to the analytics company, which may use cookies to assist with the analysis. Session User ID tracking and stitching may also be used to gain further insights into how our users access our websites from different devices.

5.6 Legal Requirements

We may disclose your personal data if required to do so by law (including responding to a subpoena or request from law enforcement, court, or government agency or other public authorities) or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect or defend our rights, interests, or property or that of other customers or users, (iii) act in urgent circumstances to protect the personal safety of users of the Services or the public, or (iv) protect against legal liability or potential fraud, as determined in our sole discretion.

5.7 With Your Consent

We may disclose your information for other purposes with your explicit consent.

6. INTERNATIONAL DATA TRANSFERS

We are based in the United States, and we and our service providers may process personal information in the United States and other countries. Sharing of information sometimes involves cross-border data transfers to the United States and other jurisdictions. ECDLAX may also subcontract processing to, or share your personal data with, third parties located in countries other than your home country or your country of residence. Your personal data, therefore, may be subject to privacy laws that are different from those in your country of residence.

Where our Services are available to users in the European Economic Area (“EEA”), UK, or Switzerland, and when we transfer their personal data to countries outside of these regions as processors, we do so in accordance with applicable privacy laws. This includes implementing appropriate contractual, technical, and organizational measures as outlined in the Standard Contractual Clauses approved by the EU Commission. Standard Contractual Clauses are commitments between companies transferring personal data, ensuring they protect your data’s privacy and security.

7. DATA RETENTION

We retain personal data only as long as reasonably necessary to fulfill the purposes described in this Privacy Policy. Typical retention periods include:

program registration records — duration of participation and reasonable archival period thereafter;
payment records — up to seven years for accounting purposes;
customer support communications — up to three years;
marketing data — until you opt out; and
analytics data — aggregated or anonymized in storage and transit.

Retention periods may be extended where required by law.

8. YOUR PRIVACY RIGHTS

8.1 Rights for All Users

Depending on where you live and subject to legal exceptions, you may have rights to:

Access. Request confirmation of whether we process your personal information and access to such information
Correction. Request correction of inaccurate personal information
Deletion. Request deletion of your personal information, subject to legal exceptions
Opt-Out of Marketing. Unsubscribe or opt-out from communications such as marketing emails by using the link in emails or adjusting account settings
Right to Limit Use of Sensitive Personal Information. Limit our use and disclosure of sensitive personal information to permitted purposes.
Non-Discrimination. We will not discriminate against you for exercising your privacy rights

8.2 United States Privacy Rights

If you are located in the United States, this Privacy Policy explains how we collect, use, and disclose your personal data under the privacy laws of various states, including California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia. Although we are not yet subject to all U.S. Privacy Laws, given our level of activity, our Privacy Policy describes rights similar to those afforded under these laws. While we disclose personal information to service providers for the business purposes described in Section 5, we do not “sell” your personal information, nor do we “share'” it for targeted advertising. We do not collect 'sensitive' personal information for purposes that would trigger additional consent requirements or a 'Right to Limit' under these laws, as our collection is limited to the organization's necessary business purposes.

8.3 Authorized Agents

California residents may designate an authorized agent to submit requests on their behalf by providing written authorization to support@ecdlax.com. We may require you to verify your identity directly with us and confirm that you authorized the agent to submit the request.

8.4 Response Time and Verification. We will confirm receipt within 10 business days and respond within 45 days (extendable by 45 days with notice). We will verify your identity before fulfilling your requests by comparing the information you provide with the information we have on file.

8.5 EEA, Switzerland, and UK Residents (GDPR/UK GDPR)

If you are located in countries that are within the European Economic Area (the “EEA”), Switzerland, or the UK, GDPR and its Swiss and UK GDPR counterparts provide you rights with respect to your personal data, subject to any exemptions provided by the law, including the following rights:

Right to Access. Request access to your personal data.
Right to Correction. Request correction or deletion of your personal data.
Right to Limit Use. Request that we limit our use and processing of your personal data.
Right to Data Portability. Request portability of your personal data.
Right to Withdraw Consent. Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
Right to Object. You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Right to Lodge a Complaint. Users located in EEA, United Kingdom, or Switzerland have the right to make a complaint to a government supervisory authority.

8.6 How to Exercise Privacy Rights

You can access, correct, or delete your personal data by contacting us as described below. We will consider all such requests and provide responses as soon as possible. Please note, however, that personal information may be exempt from such requests in certain circumstances, including when we need to continue processing your personal information for our legitimate interests or to comply with legal obligations.

Submitting a Request

To submit a privacy rights request, please email:

Email: support@ecdlax.com
Subject Line: “Privacy Rights Request – [Type of Request]”
Include: Your name, the email address associated with your account (if applicable), a description of your request, and your jurisdiction of residence.

We may take reasonable steps to verify your identity before processing your request.

Response Timeframes

We will respond to verified requests within the timeframes required by applicable law, including:

California residents: 45 days (extendable by an additional 45 days where permitted by law)
EEA / UK residents: 30 days (extendable by up to 60 days for complex requests)

8.7 Categories of Personal Information Collected (Last 12 Months)

Category	Examples	Collected	Business Purpose(s)
Identifiers	Name, email address, phone number, mailing address, IP address	Yes	Communications and security
Internet Activity	Browsing activity, device data, interaction with the Site	Yes	Analytics, website improvement and security
Internet or network activity	Browsing history, search history, interaction with Services	Yes	Analytics, service improvement, security
Payment and Transaction Data	Credit card/payment method data processed by the third-party payment processor.	Yes	Payment processing

8.8 No Sale or Sharing. We do not sell personal information. We have not sold personal information in the preceding 12 months. We do not share personal information for cross-context behavioral advertising purposes.

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 Overview

Cookies are small text files transferred to your computer or mobile device whenever you visit a website or app. We use them to remember your preferences, enhance your user experience, and understand how people use our Services so we can improve them. Cookies can be session cookies, which expire when you close your web browser. They can also be persistent cookies that remain on your device for a specified period or until you delete them.

9.2 Separate Cookie and Tracking Technologies Policy

For additional information about our use of cookies and tracking technologies, including detailed descriptions of specific cookies, third-party analytics tools, your choices and controls, and how to manage cookie preferences, please refer to our separate Cookie and Tracking Technologies Policy available Here.

9.3 Managing Cookies

It is also possible to use our Services without cookies. You can disable the storage of cookies in your browser, restrict them to certain websites, or configure your browser to notify you when a cookie is sent. You can also delete cookies from your device at any time. Please note that doing so may result in limited page display and reduced user guidance. To learn more about cookies, including how to see what cookies have been set and how to manage and delete them, visit http://www.allaboutcookies.org/

9.4 ePrivacy Compliance

For users in the European Economic Area and United Kingdom, we adhere to ePrivacy Directive requirements. Consent is needed for storing information on a device (such as cookies or local storage) or accessing existing information on the device. Our server-side event collection, which does not access or store information on your device, is allowed without consent.

10. SECURITY MEASURES

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. These measures are calibrated to the nature, scope, context, and purposes of processing, as well as the risks posed to individuals’ rights and freedoms. Our safeguards may include encryption, access controls, secure infrastructure, incident response procedures, and regular evaluation of our security practices.

You are responsible for maintaining the confidentiality of your account credentials and for any activity conducted under your account.

11. CHILDREN’S PRIVACY

Our services are intended for a general audience and are not designed for or meant to be used by children. We do not knowingly collect information from children under 13 without parental permission. If a parent or guardian learns that their child has provided us with information without their consent, they should contact us at support@ecdlax.com as soon as possible. We will delete such information from our records within a reasonable time. For users in the EU/UK, our services are not intended for children under 16. We comply with the Children’s Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under the applicable age.

12. THIRD-PARTY LINKS AND SERVICES

Users can follow ECDLAX on Facebook, Instagram, X (formerly Twitter), LinkedIn, TikTok, and other social media platforms as they become available. Users should review the privacy policies for each platform to understand what information is collected. We may provide links to third-party websites, apps, and services. This Privacy Policy does not cover the activities of third parties when they collect or use data for their own purposes. We are not responsible for the privacy practices or content of third-party services. We recommend reviewing their privacy policies before sharing your information.

13. DATA BREACH NOTIFICATION

In the event of a personal data breach, we will:

Notify Affected Individuals. If a breach is reasonably likely to result in a risk to your rights and freedoms (GDPR/UK GDPR) or requires notification under applicable law (e.g., California Civil Code § 1798.82), we will notify affected individuals without undue delay, and where feasible, within 72 hours of becoming aware of the breach.
Notify Supervisory Authorities. For GDPR/UK GDPR compliance, we will notify the relevant supervisory authority within 72 hours of becoming aware of a breach that poses a risk to individuals’ rights and freedoms, unless the breach is unlikely to result in such risk.
Notify California Attorney General. For breaches affecting more than 500 California residents, we will notify the California Attorney General as required by California Civil Code § 1798.82.

14. CHANGES TO THIS PRIVACY POLICY

If ECDLAX makes material changes to its Privacy Policy, it will notify you by: (i) updating the Last Updated Date at the top of the Privacy Policy, (ii) sending an email to its users, and/or (iii) adding a notice to the Site. Material changes include new categories of personal information collected, new purposes for processing, new categories of third parties with whom we share information, or substantial changes to your rights. Your continued use of the Services after notice indicates acceptance of the updated policy.

15. CONTACT INFORMATION

If you have any questions regarding privacy while using our Services or about our practices, please contact via the following:

For General Inquiries:

Email: support@ecdlax.com

Mailing Address: ECD Lacrosse, Inc.

8745 Mylander Lane

Towson, Maryland, 21286, United States

Supervisory Authorities:

United Kingdom:
Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane, Wilmslow
Cheshire SK9 5AF, United Kingdom
Tel: +44 303 123 1113
https://ico.org.uk

European Economic Area:
A list of EEA supervisory authorities is available at:
https://edpb.europa.eu/about-edpb/board/members_en

Cookie Policy