Privacy Policy and GDPR Statement

At Tall Timbers Group LLC, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our websites (AnyRegistration.com, TableRegistration.com, and TeamRegistration.com) and our Software-as-a-Service (SaaS) platform (collectively, the "Services"). This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

Tall Timbers Group LLC is the data controller responsible for your personal data. You can contact us at:

• Email: [email protected]
• Address: 123 Main Street, City, State, ZIP, USA

2. Personal Data We Collect

We collect the following types of personal data when you interact with our Services:

• Account Information: Name, email address, phone number, and billing details when you register for an account.
• Usage Data: Information about how you use our Services, such as IP address, browser type, device information, and pages visited.
• Customer-Provided Data: Data you or your users input into our platform, such as registration details for events or teams.
• Cookies and Tracking Technologies: Data collected via cookies and similar technologies to enhance your experience and analyze usage.

3. Legal Basis for Processing

We process your personal data under the following legal bases as per GDPR:

• Contractual Necessity (Art. 6(1)(b)): To provide and manage your account and deliver our Services.
• Consent (Art. 6(1)(a)): For optional features like marketing communications or certain cookies (you may withdraw consent at any time).
• Legitimate Interests (Art. 6(1)(f)): To improve our Services, prevent fraud, and ensure security, provided your rights are not overridden.
• Legal Obligation (Art. 6(1)(c)): To comply with applicable laws and regulations.

4. How We Use Your Data

• Provide, maintain, and improve our Services.
• Process payments and manage subscriptions.
• Communicate with you about your account, updates, or support inquiries.
• Send marketing communications (with your consent).
• Analyze usage to enhance functionality and user experience.
• Ensure the security of our Services and prevent fraud.

5. Data Sharing

We may share your personal data with:

• Service Providers: Trusted third parties who process data on our behalf under strict data protection agreements.
• Legal Authorities: When required by law or to protect our rights, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, with safeguards to protect your data.

We do not sell your personal data to third parties.

6. International Data Transfers

As a U.S.-based company, your data may be transferred to and processed in the United States or other countries. We ensure that any international transfers comply with GDPR requirements, such as using Standard Contractual Clauses (SCCs) or relying on adequacy decisions where applicable.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:

• Account data: For the duration of your account and up to 1 year after account closure, unless required by law.
• Usage data: For 2 years to analyze trends and improve Services.
• Legal obligations: As required by applicable laws (e.g., tax or accounting requirements).

8. Your GDPR Rights

If you are located in the European Economic Area (EEA) or other regions covered by GDPR, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal obligations).
• Restriction: Restrict processing of your data under certain conditions.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests, including marketing.
• Withdraw Consent: Withdraw consent at any time where processing relies on consent.

To exercise these rights, contact us at [email protected]. We will respond within one month, as required by GDPR.

9. Cookies and Tracking Technologies

Our Services use cookies and similar technologies to enhance functionality, analyze usage, and provide personalized content. You can manage your cookie preferences through our Cookie Consent Tool on our websites.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security assessments. However, no system is completely secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these websites. Please review their privacy policies before providing personal data.

12. Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware of such data, we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a notice on our websites. The updated policy will be effective as of the "Last Updated" date above.

14. Complaints

If you have concerns about our data practices, please contact us at [email protected]. You also have the right to lodge a complaint with a supervisory authority in your country of residence, such as the Information Commissioner's Office (ICO) in the UK or the Data Protection Commission (DPC) in Ireland.