Privacy Policy

1. Introduction

Welcome to Raqball USA Federation ("we," "us," "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://raqballusa.com and use our services.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

Data Type	Required/Optional	Purpose
Email Address	Required	Account creation, login, communication
Full Name	Required	Certificates, account identification
Phone Number	Optional	Contact, order shipping notifications
City	Optional	Community building, local programs
Organization	Optional	Networking, professional connections
Profile Photo	Optional	Profile display, certificates (Coach L3)
Biographical Info	Optional	Profile enrichment, community
Shipping Address	Required for physical orders	Delivering physical certificates
Payment Information	Required for paid services	Processing payments (handled by Stripe)

2.2 Information Collected Automatically

When you use our services, we automatically collect certain information:

• Usage Data: Pages visited, time spent, features used, exam attempts
• Device Information: Browser type, operating system, device type, screen resolution
• IP Address: For security, fraud prevention, and analytics
• Cookies: Session cookies for authentication, preference cookies for user settings
• Log Data: Access times, errors, API requests

2.3 Information from Third Parties

• Stripe: Payment processing information (we do not store full card numbers)
• Google reCAPTCHA: Spam detection data (v2 checkbox)
• Azure Services: Email delivery status, storage access logs

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Delivery

• Create and manage your account
• Process certification exams and issue certificates
• Provide course materials and educational content
• Generate digital and physical certificates
• Process payments and fulfill orders
• Send service-related notifications (exam results, certificate issuance)

3.2 Communication

• Respond to your inquiries and support requests
• Send important updates about our services
• Notify you of policy or terms changes
• Send newsletter updates (only if you opt-in)
• Provide order status and shipping updates

3.3 Security and Fraud Prevention

• Detect and prevent fraudulent activities
• Verify exam integrity and prevent cheating
• Protect against security threats
• Enforce our Terms of Service
• Maintain audit logs for compliance

4. Information Sharing and Disclosure

We may share your information in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party service providers who help us deliver our services:

• Microsoft Azure: Cloud hosting, database, storage, email services
• Stripe: Payment processing (subject to Stripe's privacy policy)
• Google reCAPTCHA: Spam and bot protection
• Shipping Carriers: USPS, UPS, FedEx for physical certificate delivery

4.2 Public Certificate Verification

Our certificate verification system publicly displays the following information when someone verifies a certificate using a control number:

• Certificate holder's full name
• Certification type and level
• Issue date and expiration date
• Certificate number
• Verification status (active/expired/revoked)

Note: Email addresses, phone numbers, and other personal details are NOT displayed publicly.

5. Data Security

We implement industry-standard security measures to protect your information:

5.1 Technical Safeguards

• Encryption: HTTPS/TLS encryption for data in transit
• Password Security: BCrypt hashing with salt (12 rounds) for stored passwords
• Secure Storage: Azure Key Vault for secrets and sensitive credentials
• Database Security: PostgreSQL with access controls and encrypted connections
• File Storage: Azure Blob Storage with private access controls
• API Security: JWT tokens with 24-hour expiry, rate limiting

5.2 Payment Security

We use Stripe for payment processing. We do not store full credit card numbers on our servers. Stripe is PCI-DSS Level 1 certified, the highest level of payment security certification.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Information: Duration of account + 30 days after deletion
• Certification Records: Permanent (for verification purposes)
• Payment Records: 7 years (tax compliance, financial audits)
• Order History: 7 years (customer service, warranty claims)
• Access Logs: 90 days (security monitoring)

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Access and Update

• View your personal information in your profile settings
• Request a copy of your data in machine-readable format
• Update your profile information at any time
• Correct inaccurate information

7.2 Deletion

• Request deletion of your account and personal information
• Note: Certification records may be retained for verification purposes
• Contact us at privacy@raqballusa.com to request deletion

7.3 Opt-Out Rights

• Marketing Emails: Unsubscribe via link in emails or account settings
• Cookies: Disable in browser settings (may affect functionality)
• Newsletter: Opt-out at any time

8. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Authentication, session management, security (24 hours)
• Functional Cookies: Remember preferences, language settings (1 year)
• Analytics Cookies: Usage statistics, performance monitoring (90 days)

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features.

9. Third-Party Services

Our services integrate with the following third-party providers:

• Microsoft Azure: Cloud hosting, database, storage (Privacy Policy)
• Stripe: Payment processing (Privacy Policy)
• Google reCAPTCHA: Spam protection (Privacy Policy)

10. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@raqballusa.com, and we will delete the information.

11. Contact Us

By using Raqball USA Federation services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.