Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy applies to the AlliedRowing website located at www.alliedrowing.com and any subdomains operated by Evosys LLC. It does not apply to any third-party websites, services, or applications that may be linked to or from our Site. We encourage you to review the privacy policies of any third-party sites you visit.

2. Information We Collect

Information You Provide Directly

When you create an account or submit forms, we collect the following information you choose to provide:

• Name — so we know how to address you
• Email address — so we can communicate with you and verify your account
• Phone number — for emergency contact and account recovery
• Date of birth — for age verification and roster eligibility

Information Collected Automatically

When you visit the Site, certain technical information is collected automatically by our hosting infrastructure (Cloudflare, Inc.). This may include:

• IP address and derived general geographic location (city/country level)
• Browser type, version, and language settings
• Operating system and device type
• Referring URL (the page you came from)
• Pages visited and date/time of your visit
• HTTP request metadata (method, status code, bytes transferred)

This information is collected through standard web server logs and Cloudflare's network infrastructure as part of normal internet operations.

Cloudflare Turnstile

Our forms use Cloudflare Turnstile, a privacy-preserving bot-detection service, to protect against spam and automated abuse. Turnstile analyzes behavioral signals (such as mouse movements and interaction patterns) to determine whether a visitor is a human. Turnstile is designed to work without cookies and without collecting or storing personal data beyond what is necessary to complete the challenge. Please review Cloudflare's Privacy Policy for more information on how Turnstile processes data.

3. How We Use Your Information

We use the information we collect for the following purposes:

To Provide Our Services

We use your account information to authenticate you, manage your club memberships, and provide the rowing management features you access through the platform.

To Operate and Improve the Site

Automatically collected technical information helps us understand how the Site is used, diagnose technical problems, and improve the performance and reliability of the Site.

To Protect Against Abuse

We use information collected — including IP addresses and Turnstile challenge results — to detect, investigate, and prevent fraudulent, unauthorized, or illegal activity, including spam submissions and denial-of-service attacks.

To Comply with Legal Obligations

We may process your information as necessary to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

4. How We Share Your Information

We do not sell, rent, trade, or otherwise share your personal information with third parties for their own marketing or commercial purposes.

Service Providers

We work with a limited number of trusted third-party service providers who assist us in operating the Site:

• Cloudflare, Inc. — provides our web hosting, content delivery network (CDN), DDoS protection, and the Turnstile bot-detection service. See Cloudflare's Privacy Policy.

These service providers are permitted to use your information only to perform services on our behalf and are required to maintain the confidentiality and security of your data.

Legal Disclosures

We may disclose your information if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law or respond to a court order, subpoena, or legal process; (b) protect the rights, property, or safety of Evosys LLC, our clients, or the public; or (c) enforce our terms and agreements.

Business Transfers

If Evosys LLC is involved in a merger, acquisition, reorganization, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via a prominent notice on this page if such a transfer occurs and your information becomes subject to a materially different privacy policy.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account data — retained for as long as your account is active and thereafter in accordance with our record-keeping obligations.
• Server and access logs — retained according to Cloudflare's default log retention schedules, typically for a limited number of days, after which they are automatically deleted.

When personal information is no longer needed, we take reasonable steps to delete or anonymize it.

6. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information, subject to certain exceptions
• Restriction — request that we restrict the processing of your information in certain circumstances
• Objection — object to our processing of your information where we rely on legitimate interests
• Portability — request a copy of your information in a portable, machine-readable format

To exercise any of these rights, please contact us at privacy@evosysllc.com. We will respond to verifiable requests within the timeframes required by applicable law. We may ask you to verify your identity before processing your request.

We will not discriminate against you for exercising any of your privacy rights.

7. Security

We implement reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data in transit
• Hosting on Cloudflare's secure, enterprise-grade infrastructure
• Rate limiting and bot-detection controls on forms
• Access controls limiting who can view personal information

No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

If you believe your personal information has been compromised, please contact us immediately at privacy@evosysllc.com.

8. Children's Privacy

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@evosysllc.com and we will take steps to delete such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the Site after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@evosysllc.com
• Web: www.evosysllc.com

We will make every effort to respond to your inquiry promptly and to resolve any privacy concerns you may have.