Privacy Policy

1. Who is responsible

Richo Sports operates this website and its stringing and inquiry services in Montreal, Quebec. Richo is the person responsible for the protection of personal information. For access, correction, deletion, portability, consent questions or a privacy complaint, email richo@bellnet.ca.

This policy covers information handled for these services, including historical records added or linked to an account. Quebec’s private-sector privacy law applies, and federal privacy law may also apply, including to certain commercial information flows across provincial or national borders.

• Email Richo Sports

2. Information and purposes

The website does not ask for a shipping address, card number or bank-login credentials. Fields identified as optional are not needed merely to make an inquiry. If you do not provide information needed for a requested feature, we may be unable to provide that feature; you can contact Richo to discuss another way.

• Accounts: name, nickname, email, member identifier, contact phone number and any optional profile photo you provide. The member directory and profiles are stored in Cloudflare D1. Email sign-in uses a short-lived, hashed 6-digit code rather than a password. If you choose Google sign-in, we process the provider account identifier and profile and email information needed to identify or connect your account. Members whose mobile number is not yet verified are asked to verify it when they next visit the website. These details identify your account, confirm number ownership and support communication about your requests.
• Stringing and saved rackets: racket model and optional serial/specifications, string, colour, tensions, pre-stretch, hand-off selection, notes, photo link, presets, job dates/status, discounts and payment method/status/amount. These support the requested work, tracking, repeat setups, billing and administration.
• Historical jobs: records entered by Richo or imported from past business records may be linked to your account to show your service history. Tell Richo if a linked record is not yours or is inaccurate.
• Inquiries: name, email, phone/contact preference if supplied, message and any selected products, quantities and quoted estimates. These are used to answer you and arrange a purchase or meeting.
• Security and operations: IP address, browser/device information, sign-in and last-activity dates, session identifiers, and operational/error or notification-delivery records. These help operate and troubleshoot the site, manage sessions and deliver service messages. Admin statistics use service records to summarize job volume and revenue.

3. Optional photos and notes

Profile and racket photos are stored in Cloudflare R2 and receive a publicly accessible media URL. The account and order pages are access-controlled, but a person who has the image URL may view the image without signing in. Upload only an image you are comfortable sharing in this way.

Avoid identity documents, banking details, medical information, addresses, faces of other people and unnecessary personal details in photos or notes. Removing a photo reference or deleting a saved racket does not necessarily delete the uploaded file or past job records. Contact Richo about removal from the relevant systems.

Administrators may keep a short recognition note and a reference photo provided or approved by the customer to associate an account with the person they know. These remarks and photos are stored privately in the service database and are accessible through the website only to administrators; they do not use the public media URLs used for public profile and racket photos. Contact Richo at richo@bellnet.ca to request access, correction or removal.

4. Browser storage and service messages

Cookies remember your selected language and display theme for up to one year. Secure HttpOnly cookies support your sign-in session; login credentials are not stored in browser local storage. Browser storage also keeps the site’s device history identifier and inquiry list. Social sign-in uses temporary state information to complete the return to the site. Clearing or blocking cookies and browser storage can sign you out or reset these choices; it does not delete server records. Email sign-in codes expire after 10 minutes; the service stores a hash of the code, along with verification and rate-limit records.

The site does not currently include advertising pixels or a newsletter signup. Hosting and authentication providers still process technical information to operate and protect their services. External social links and sign-in providers have their own privacy practices when you use them.

Stringing progress emails are enabled by default for accounts and can be changed in Profile notification settings. These are service updates, not consent to marketing. SMS delivery requires a verified number and confirmation of the notification choice; any applicable message charges are set by your carrier. When automatic billing emails are enabled, monthly bill copies are emailed through Resend to your account email address, with Richo in CC, independently of your racket progress notification settings. Richo can also send a bill copy to another email address provided for billing; this does not change your account email.

Verification texts confirm that a mobile number belongs to you; they do not replace email or social sign-in. We record the verified number, verification time, challenge identifiers, rate limits and your agreement to receive verification texts, but do not store the code. Pickup texts are selected by default for existing and new accounts. The verification form clearly shows that choice and lets you decline; sending starts only after number verification and confirmation of the notification choice. The default setting is not itself recorded as consent. We record the confirmed choice with its time and verified number. You can turn pickup texts off in Profile or reply STOP. Carrier message and data charges may apply.

Authorized administrators can separately opt in to text alerts for new racket submissions, sent to their verified mobile number through Twilio Messaging. These alerts may contain the customer’s account name, private administrator remarks, drop-off location, racket model and customer notes. Remark photos are not included. Message contents are processed by Twilio and mobile carriers and may appear in notification previews on the administrator’s device. Administrator SMS consent is recorded separately and can be withdrawn in Profile or by replying STOP.

• Open your profile

5. Access, providers and processing locations

Richo and authorized administrators use the information needed to manage jobs, inquiries, payments and support. Technical personnel or providers may access information as needed to maintain and protect the service. Personal records are not published as part of the public racket counter or availability calendar.

Cloudflare Workers hosts and protects the website, APIs and account service. Cloudflare D1 stores accounts, member profiles, catalog and inquiry records, stringing, saved rackets, billing, preferences, sessions, verified phones, verification challenges, consent and private administrator remarks. Cloudflare R2 stores public profile, racket and catalog images. Resend delivers email sign-in codes and service email, including monthly bills. Google processes sign-in information when you choose that option. Twilio Verify handles one-time mobile number verification; Twilio Messaging delivers optional ready-for-pickup texts and new-submission alerts to verified recipients who have confirmed their notification choice. Banking or e-Transfer services operate separately from the website.

These providers may process or store information outside Quebec and Canada. Information outside Quebec can be subject to another jurisdiction’s laws and lawful access by its authorities. Contact Richo for questions about providers and safeguards.

We do not sell or rent personal information. Other disclosures are limited to the purposes described, your authorization or circumstances permitted or required by law. Using a provider does not remove Richo Sports’ responsibility for the information it entrusts to that provider.

6. Retention and protection

Retention depends on the continuing account or service relationship, the necessity of keeping requested service history, accounting and legal obligations, complaint or dispute handling, and security needs. Completing a job, signing out or deleting a saved preset does not automatically erase the related records. Once the purposes are fulfilled and legal retention requirements end, we will securely destroy the information or anonymize it where the law permits.

You may ask Richo to review information that is no longer needed and request its correction or deletion. Some records may need to be retained by law; if so, we will explain the applicable limits. Removal from active systems and expiry of provider backups may happen at different times. This website does not promise a fixed automatic deletion period.

The service uses HTTPS and account and administrator access checks. No storage or transmission method eliminates every risk. Report a suspected privacy incident to Richo; incidents must be assessed and handled, including notices where required by law.

7. Your choices and privacy rights

• View or edit available profile details, notification choices and saved rackets in Profile. Contact Richo to correct job history or a mistaken account link.
• Make a written request for access to or correction of your personal information. We respond in writing with diligence and within 30 days as required by Quebec law. We may need proportionate information to verify your identity; do not send identity documents unless a secure and necessary process has been agreed.
• Request qualifying computerized information collected from you in a structured, commonly used technological format, and its transmission to an authorized recipient where the law provides this right. The legal exceptions for information created or inferred by the business may apply.
• Withdraw consent where applicable or request deletion/account closure by contacting Richo. We will explain any effect on the requested service and any legal reason information must be kept. There is currently no whole-account deletion or export button.
• Send a privacy complaint to Richo, describing the concern and the result you seek. You may also contact the Commission d’accès à l’information du Québec, or the federal Privacy Commissioner where federal law applies. Contacting us does not limit your rights to a regulator.

• Commission d’accès à l’information du Québec
• Office of the Privacy Commissioner of Canada

8. Children and policy changes

A parent or tutor should manage a request involving a child under 14 and contact Richo before providing the child’s personal information. We do not use an age-verification system. If you believe information about a child was provided without the required authorization, contact the privacy officer.

The dates above identify this version. We will draw material changes to affected users’ attention and seek fresh consent when a new use or disclosure requires it. Posting a new policy does not by itself supply that consent.