Privacy Policy
Privacy Policy
Last updated: December 20th, 2025
This Privacy Policy explains how Magasin Du Club De Natation Du Canada Swim Club Store INC., doing business as Xtreme Sports Uniforms®, XS Uniforms (“Xtreme Sports Uniforms”, “XS Uniforms|”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you visit our website www.xsuniforms.com (the “Site”), purchase our products, or otherwise interact with us online or offline (collectively, the “Services”).
We are committed to handling personal information in accordance with applicable privacy laws, including:
- Canadian privacy laws such as the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial privacy laws.
- Relevant U.S. federal and state privacy laws, including enhanced rights for residents of certain states (for example, California).
- The EU General Data Protection Regulation (GDPR) and the UK GDPR, where they apply to individuals in the European Economic Area (“EEA”), Switzerland, and the United Kingdom (collectively, “Europe”).
If anything in this Privacy Policy conflicts with mandatory requirements under the laws of your jurisdiction, those mandatory requirements will prevail.
By using our Site or Services, or by providing us with personal information, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are and How to Contact Us
The organization responsible for your personal information (the “controller” under GDPR/UK GDPR and the “organization” under Canadian law) is:
Magasin Du Club De Natation Du Canada Swim Club Store Ltd.
dba Xtreme Sports Uniforms®
5-145 ½ Church Street
Office 143
Toronto
M5B 1Y4
Email: privacy@xsuniforms.com
If you are located in Europe or the UK and have questions about how we handle your personal information or wish to exercise your rights, please contact us at the above email with the subject line “Privacy Request”. If we appoint a Data Protection Officer (DPO) or EU/UK representative, we will update this Privacy Policy.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal information we collect:
- Through the Site (including forms, checkout, account registration, chatbot, and contact pages).
- Through email, phone, or other communications with you or your organization/team.
- When you place orders for custom or standard products.
- When you subscribe to our marketing communications.
- In connection with our social media pages, digital advertising, and promotions.
This Privacy Policy does not apply to:
- Third-party websites, apps, or platforms that you may access via links from our Site (they are governed by their own privacy policies).
- Situations where we process personal information solely on behalf of another organization as their processor and their privacy policy governs.
3. Personal Information We Collect
The types of personal information we collect depend on how you interact with us.
3.1 Information You Provide Directly
We may collect:
- Account details
Name, email address, password, and profile information when you create an account. - Order and shipping information
Billing address, shipping address, phone number, and order history. - Team / organization information
Club or team name, league, role (e.g., coach, manager), and roster details you provide (which may include personal information about players). - Customization details
Player names, numbers, sizes, positions, and any artwork, logos, or written instructions you send to us (some of which may identify individuals). - Payment-related information
We typically use third-party payment processors and do not store your full credit or debit card numbers. We may receive limited information, such as the last four digits of a card, transaction IDs, and payment status. - Communications and support
Content of emails, messages, chats, reviews, survey responses, and other communications, including any personal information you choose to provide. - Marketing preferences
Your opt-in/opt-out choices regarding newsletters, promotions, and other marketing communications.
3.2 Information Collected Automatically
When you use our Site, we may automatically collect:
- Device and technical data
IP address, browser type, operating system, device identifiers, language settings, referring URLs. - Usage data
Pages viewed, time spent on pages, links clicked, search queries, navigation paths, and other interactions with our Site. - Cookies and similar technologies
Cookies, pixels, and local storage that help us remember your preferences and understand how you use the Site.
See Section 7 (Cookies and Similar Technologies) for more detail.
3.3 Information from Third Parties
We may receive personal information from:
- Payment processors (e.g., transaction confirmations, fraud screening signals).
- Shipping and logistics providers (e.g., tracking updates, delivery confirmations).
- Marketing, analytics, or advertising partners (e.g., aggregated analytics, campaign performance data).
- Social media log-in or integrations, if you choose to connect through such platforms (subject to your settings with those platforms).
We may combine information from third parties with information we collect directly and treat the combined information as personal information under this Privacy Policy.
4. How We Use Personal Information (Purposes and Legal Bases)
We use personal information for the following purposes:
4.1 To Provide and Manage Our Services
- Processing and fulfilling orders, including custom uniforms and accessories.
- Managing customer accounts and order histories.
- Providing customer service, technical support, and warranty assistance where applicable.
- Managing returns, replacements, and credits in line with our Terms & Conditions.
- Operating, maintaining, and improving our Site.
Legal bases (GDPR/UK GDPR):
- Performance of a contract (Article 6(1)(b)) – to process your orders and deliver products/services you request.
- Legitimate interests (Article 6(1)(f)) – to operate our business and provide efficient service.
4.2 To Communicate with You
- Responding to inquiries, requests, and complaints.
- Sending transactional emails such as order confirmations, shipping updates, and policy changes.
- Notifying you about important changes to our Services or to this Privacy Policy.
Legal bases:
- Performance of a contract.
- Legitimate interests – keeping you informed of important service-related information.
- Legal obligations where certain notifications are required by law.
4.3 Marketing and Promotions
- Sending newsletters, promotional offers, and updates about products, services, and events.
- Running contests, surveys, and other promotional activities.
- Personalizing marketing communications based on your preferences or interactions.
We obtain consent where required by law (e.g., Canadian anti-spam laws, EU e-privacy rules). You can withdraw your consent or opt out from marketing at any time (see Section 11).
Legal bases:
- Consent (Article 6(1)(a); CASL where applicable).
- Legitimate interests – certain permitted marketing to existing business contacts where allowed.
4.4 Analytics and Site Improvement
- Monitoring and analyzing usage patterns and Site performance.
- Debugging and diagnosing issues.
- Improving our Site design, content, and user experience.
- Measuring and improving the effectiveness of marketing campaigns.
Legal bases:
- Legitimate interests – understanding how our Services are used and improving them.
- Consent – where required for non-essential cookies and tracking technologies.
4.5 Security, Fraud Prevention, and Legal Compliance
- Protecting the security and integrity of our Site, systems, and data.
- Detecting, preventing, and responding to fraud, abuse, security incidents, and other harmful activities.
- Complying with legal and regulatory obligations and responding to lawful requests from public authorities.
- Establishing, exercising, or defending legal claims.
Legal bases:
- Legal obligations (Article 6(1)(c)).
- Legitimate interests – protecting our business and our customers.
- Article 9(2)(f) (where special category data is incidentally involved in legal claims)
5. How We Share Personal Information
We do not sell personal information in the ordinary sense of “selling customer lists”. We may share personal information under the following circumstances:
5.1 Service Providers
We engage third-party service providers to perform services on our behalf, such as:
- Payment processing (e.g., card payments, fraud checks).
- Shipping, warehousing, and logistics.
- Website hosting and cloud storage.
- Email and marketing platforms.
- Analytics and advertising technology providers.
- Customer support tools (e.g., ticketing, chat).
Service providers are given access only to the personal information needed to perform their functions and are contractually required to protect and use it only for our specified purposes.
5.2 Team / Club / Organization Contacts
For team or organization orders:
- We may share order details, sizing lists, or fulfillment status with designated contacts, such as coaches or team managers, to coordinate group orders and deliveries.
- We may share aggregated purchasing information with organizations (e.g., total spend by a club) for budgeting or sponsorship discussions.
5.3 Business Transactions
In the context of a prospective or completed merger, acquisition, financing, sale of assets, reorganization, or similar corporate transaction, we may disclose personal information to advisors and counterparties, subject to confidentiality obligations and applicable laws. If there is a change in ownership or control, personal information may be transferred to the new owner, who will continue to use it in accordance with this Privacy Policy or a successor policy that is at least as protective, subject to applicable law.
5.4 Legal and Regulatory
We may disclose personal information if required or allowed by law, for example:
- To comply with subpoenas, court orders, or other legal processes.
- To respond to lawful requests from public or regulatory authorities, including for national security or law enforcement purposes.
- To protect our rights, property, or safety, or that of our customers, employees, or the public.
- To enforce our Terms & Conditions or investigate potential violations.
6. International Data Transfers
We are based in Canada and may store and process personal information in Canada, the United States, and other countries where our service providers operate.
- For individuals in Europe/UK: Canada is recognized by the European Commission as providing an adequate level of protection for personal data for organizations subject to PIPEDA. Where we transfer personal data to other countries (such as the U.S.), we will implement appropriate safeguards (for example, Standard Contractual Clauses and contractual obligations for our service providers) as required by law.
By using our Services or providing personal information, you acknowledge that your information may be transferred to countries with different data protection laws than those in your home jurisdiction, but we will take appropriate steps to protect it consistent with this Privacy Policy and applicable laws.
7. Cookies and Similar Technologies
We use cookies and similar technologies to:
- Enable core Site functionality (e.g., shopping cart, secure login).
- Remember your preferences (e.g., language, region, cookie choices).
- Understand how visitors use the Site and improve performance.
- Support marketing and advertising (including retargeting and digital campaigns, where used).
You can control cookies through your browser settings and, where required by law, through a cookie banner or preference manager on the Site. If you disable some cookies, certain Site features may not function correctly.Where required (for example, in parts of Europe), we will request your cons ent before placing non-essential cookies or using them for analytics or advertising.
8. Retention of Personal Information
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including:
- As long as your account is active or as needed to provide Services.
- For the period needed to complete transactions and provide customer support.
- For legal, tax, and accounting purposes (often a fixed number of years, depending on jurisdiction).
- For periods required to establish, exercise, or defend legal claims.
When personal information is no longer required, we will take reasonable steps to anonymize or securely destroy it in accordance with our data retention practices and applicable law.
9. Security Measures
We implement appropriate technical and organizational measures to protect personal information against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.
These measures may include:
- Use of HTTPS/TLS encryption in transit.
- Access controls, authentication, and role-based permissions.
- Secure configuration, patching, and monitoring of systems.
- Contracts requiring service providers to implement comparable security measures.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to mitigate risks. You are responsible for keeping your account credentials confidential and for promptly notifying us if you suspect unauthorized access to your account.
10. Children’s Privacy
Our Services are primarily directed at teams, clubs, schools, and adult purchasers (e.g., parents, coaches, administrators). We do not knowingly collect personal information directly from children under the age of 13 (or the equivalent minimum age in your jurisdiction) without verifiable parental consent.
- Where an adult provides minor-related data (e.g., player names, jersey numbers, sizes) for uniform customization, we rely on that adult to ensure that sharing such information is lawful.
- If you are a parent or guardian and believe your child has provided personal information directly to us without your consent, please contact us using the details in Section 1. We will review the situation and delete such information where required by law.
11. Your Rights and Choices
Your privacy rights depend on where you live and which laws apply. We will respect the rights you have under applicable law.
11.1 Rights Under European Data Protection Laws (GDPR/UK GDPR)
If you are located in the EEA, Switzerland, or the UK, you may have the following rights:
- Right of access – to obtain confirmation of whether we process your personal data and to receive a copy.
- Right to rectification – to have inaccurate or incomplete personal data corrected.
- Right to erasure (“right to be forgotten”) – to request deletion of your personal data in certain circumstances.
- Right to restriction of processing – to request that we limit the processing of your personal data in certain circumstances.
- Right to data portability – to receive personal data you provided to us in a structured, commonly used, machine-readable format and to request that we transmit it to another controller where technically feasible.
- Right to object – to object to processing based on our legitimate interests and to object at any time to processing for direct marketing.
- Right to withdraw consent – where processing is based on your consent, you can withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise these rights, contact us using the details in Section 1. We may need to verify your identity before fulfilling your request. We will respond in accordance with applicable law. You also have the right to lodge a complaint with your local data protection authority or the supervisory authority where you live or work.
11.2 Rights Under Canadian Privacy Laws
Under Canadian law (PIPEDA and similar provincial laws), you may have rights to:
- Request access to the personal information we hold about you, subject to limited exceptions.
- Request correction of inaccurate or incomplete information.
- Withdraw consent to certain processing, subject to legal or contractual restrictions and reasonable notice.
To exercise these rights, contact us using the details in Section 1. We may request identification to verify your identity. We will respond within the time periods required by law. You may also have the right to complain to the Office of the Privacy Commissioner of Canada or the applicable provincial privacy commissioner.
11.3 Rights Under U.S. State Laws (e.g., California)
Certain U.S. states grant residents specific rights regarding their personal information. Depending on your state, you may have rights such as:
- The right to request access to and details about the personal information we have collected about you.
- The right to request deletion of your personal information, subject to certain exceptions (e.g., where we need the data to comply with law or complete a transaction).
- The right to request correction of inaccurate personal information.
- The right to opt out of certain uses or disclosures that may be considered “selling” or “sharing” under state law, including certain targeted advertising activities.
- The right to be free from discrimination for exercising your privacy rights.
At this time, we do not knowingly sell personal information as that term is commonly understood. If we use third-party advertising or analytics tools that could be interpreted as a “sale” or “share” under some state laws, we will provide appropriate opt-out mechanisms and update this Privacy Policy and our Site notices to reflect those requirements. If you are a resident of a U.S. state that grants privacy rights and you wish to exercise them, contact us using the details in Section 1 and indicate your state of residence in your request.
11.4 Marketing Choices
- You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in our emails or by contacting us.
- Even if you opt out of marketing, we may still send you transactional or service-related messages (e.g., order confirmations, shipping updates).
11.5 Cookie and Tracking Choices
- You can control cookies through your browser settings (including deleting existing cookies).
- In jurisdictions where required, we will provide a cookie banner or preferences tool that lets you accept or reject certain categories of cookies (e.g., analytics, advertising).
12. Additional Information for California Residents
If you have significant California customer volume, you may want to add a dedicated “California Privacy Notice” summarizing the categories of personal information collected, sources, purposes, and disclosures in the format required by California law. This section is optional and can be tailored with counsel.
For now, we note:
- We do not knowingly sell personal information of consumers, including minors, as “sale” is commonly understood.
- If we engage in activities that are considered “selling” or “sharing” under California law (e.g., certain targeted advertising), we will provide a clear “Do Not Sell or Share My Personal Information” mechanism and update this Privacy Policy accordingly.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
- The “Last updated” date at the top of this Privacy Policy indicates when it was last revised.
- We will post the updated Privacy Policy on the Site.
- Where required by law, we will notify you of significant changes (for example, by email or a prominent notice on the Site) and, if necessary, obtain your consent.
Your continued use of the Site or Services after any changes to this Privacy Policy constitutes your acknowledgment of the updated policy, subject to applicable law.
14. How to Contact Us and How to Complain
If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact:
Magasin Du Club De Natation Du Canada Swim Club Store Ltd.
dba Xtreme Sports Uniforms®
5-145 ½ Church Street
Office 143
Toronto
M5B 1Y4
Email: privacy@xsuniforms.com
If you are not satisfied with our response, you may have the right to lodge a complaint with:
- The Office of the Privacy Commissioner of Canada or your provincial privacy commissioner (for Canadian residents).
- Your local data protection authority (for residents of the EEA, Switzerland, or the UK).
- Your state Attorney General or relevant privacy regulator (for U.S. residents in states with applicable privacy laws).
