Scope and organisation
This notice applies to personal information handled by Harborview Operations LLC through Harborview-operated websites, platforms and services, including technology, sports-management, broadcasting, project, CRM and related operating systems where Harborview determines how and why information is used.
Some Harborview-owned or customer-facing businesses may provide supplemental notices for their specific services. Where Harborview processes information only on documented instructions from a business customer, that customer may be the controller and Harborview may act as processor/service provider.
Information we may use
- Identity and contact information, including name, email, phone, organisation and account identifiers.
- Account, authentication, role and security information.
- Customer, athlete, sponsor, partner, vendor, prospect and relationship-management records.
- Contracts, rights, opportunities, schedules, invoices, transaction records and service history.
- Event, ticketing, credential, access and operational information.
- Communications and support requests.
- Technical and security information such as IP address, browser/device data, logs, fraud-prevention signals and session identifiers.
- Sensitive information only when necessary for a defined service and subject to additional safeguards and lawful conditions.
Why we use information
We use personal information to provide and secure services; administer accounts and transactions; manage athletes, clients, partners and commercial relationships; provide support; perform accounting and legal obligations; detect abuse or fraud; improve systems; and communicate about services or opportunities where permitted.
Harborview applies purpose limitation and data minimisation: information should be collected for a defined purpose and limited to what is reasonably necessary for that purpose.
Conditions and legal bases
Depending on the service and jurisdiction, processing may rely on performance of a contract, steps requested before entering a contract, legitimate interests, consent, legal obligations, protection of legal rights, or another lawful condition. Where consent is the basis, it may be withdrawn subject to lawful retention requirements.
Special-category or sensitive information receives additional controls and is used only where an applicable legal condition permits it.
International and overseas transfers
Harborview operates internationally. Personal information may be processed in Bermuda, the United States, Europe or other locations used by authorised service providers. Before regulated transfers, Harborview assesses the recipient, purpose, information involved and applicable transfer mechanism and uses contractual or other safeguards where required.
Retention and deletion
We keep personal information only for the period reasonably required for the stated purpose, contractual obligations, accounting, security, dispute resolution or legal requirements. Retention periods are maintained by record category and information is deleted, anonymised or securely archived when it is no longer required.
Security safeguards
Harborview uses administrative, technical and operational safeguards appropriate to the sensitivity and risk of the information. These include access controls, TLS encryption in transit, restricted private storage, logging, backups, vulnerability and patch management, network controls, authentication protections and incident-response procedures. No system can be guaranteed completely secure.
Payment-card data is intended to be handled by authorised payment providers rather than stored as full card data in Harborview application databases.
Your privacy rights
Depending on applicable law, individuals may have rights to obtain information about processing, access personal information, correct inaccuracies, request deletion, receive portable information, object to or restrict certain processing, withdraw consent, opt out of applicable sale/sharing or targeted advertising, limit certain uses of sensitive information, and complain to a regulator.
Harborview provides a unified request process. We may verify identity before disclosing or changing personal information and may retain information where the law permits or requires it.
Children and minors
General Harborview business services are not directed to young children. Where a sports or event service involves a minor, information must be handled through an authorised parent, guardian or appropriate organisational process and subject to additional protections required by applicable law.
Privacy contact
Harborview Operations LLC — Privacy Office
Bermuda
privacy@harborviewopps.com
Harborview maintains a designated Privacy Officer role for Bermuda PIPA governance. The formal named appointment is maintained in the organisation's governance record and will be published here once executive designation is completed.