Privacy Policy

Last updated: October 24, 2026

This Privacy Policy explains how the Teddy Dupay Basketball Academy ("TDBA," "we," "us") collects, uses, and protects information at basketballcoachingcertification.com (the "Site") and the TDBA Certified Coach program (the "Service"). By using the Service you agree to this policy. Our users are adult coaches; this Service is not directed to children and we do not knowingly collect information from anyone under 16.

1. Information we collect

Account information — your email address (used as your passwordless sign-in), and the name and city you choose to add for your certificate and directory profile.
Course and assessment data — your module progress, quiz and exam attempts and scores, and the results of your road-test review.
Uploaded documents and video — the safety credentials you upload (background check, abuse-prevention certificate, CPR/First-Aid card) and your road-test video, submitted so a reviewer can verify or score them.
Payment information — payments are processed by Stripe. We receive a confirmation and limited billing details from Stripe; we do not store your full card number.
Inquiry information — details you submit through the organization-interest form, the gift form, or the free mini-course sign-up.
Basic technical data — standard server logs (such as IP address and browser type) used to operate and secure the Site.
Advertising click data — if you arrive from one of our adverts, the click identifier the advert platform put on the link, plus a random identifier for your browser. Section 8 explains what we do with it.

2. How we use it

To deliver the course, run the exams, review your road test, verify your safety credentials, and issue and maintain your certification.
To send you transactional email — sign-in codes, receipts, review results, and credential-expiry reminders.
To publish your certification status on the public directory and QR-verification page (name, city, level, status, and Safety Cleared badge). You control the name and city; you may ask us to reduce what is shown.
To respond to organization and gift inquiries, and to send you news and offers about the certification and other Teddy Dupay Basketball Academy (TDBA) programs and products. Every marketing email has an unsubscribe link; after you unsubscribe we stop sending you marketing email.
To operate, secure, and improve the Service, and to comply with law.

3. How your information is shared

We never sell your data. We share it with service providers who help us run and promote the Service, under agreements to protect it:

Stripe — payment processing.
Cloudflare — hosting, database, and file/video storage.
Brevo (Sendinblue) — sending our transactional and opt-in email.
Google and Meta (Facebook/Instagram) — measuring which of our adverts actually leads to an enrolment. See section 8 for exactly what goes to them and how to switch it off.

We may disclose information if required by law, to protect the safety of a child or any person, or in connection with a business transfer of the Academy or this program (in which case this policy travels with the data).

The public directory. Certification is a public credential — its value is that a parent or league can verify it. An active certification appears in our directory and at its verification URL with your name, city, level, status, and Safety Cleared badge. A lapsed certification stays on file and is shown as "inactive", so a scan of an old badge shows the truth. If you have a safety concern about your listing, contact us.

4. Your uploaded safety documents and video

Your background check, abuse-prevention certificate, CPR card, and road-test video are stored privately and are viewable only by you and authorized TDBA reviewers/administrators — not public and not shown in the directory. We keep them while your certification is active and for a reasonable period afterward for audit and dispute purposes, then delete them on request or per our retention schedule.

5. Data retention

We keep account and certification records for as long as your credential exists (active or lapsed) so the public register stays accurate. You may request deletion of your account and personal data; we will honor it except where we must keep certain records (for example, to maintain the integrity of an issued or revoked credential, or to meet a legal or tax obligation).

6. Security

We protect your information with encrypted connections (HTTPS), signed session cookies, access-controlled storage for uploaded documents, and administrative safeguards. No online system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data — especially your safety documents.

7. Your rights and choices

Access & correction — view and update your name and city in your dashboard; email us for anything else.
Deletion — request deletion of your account and personal data (subject to the record-keeping exceptions above).
Email choices — transactional messages are part of the Service; any marketing or mini-course email includes an unsubscribe link.
Depending on where you live, you may have additional rights under laws such as the Florida privacy laws, the CCPA/CPRA, or the GDPR; contact us to exercise them.

8. Cookies, analytics and advertising

Essential. One signed cookie keeps you signed in. Nothing about the course works without it.

Analytics. We use Google Analytics and Cloudflare Web Analytics to see which pages people read and where they get stuck.

Advertising. We advertise this certification, so we also use the Meta (Facebook/Instagram) pixel and the Google Ads tag. When you arrive from an advert we keep the click identifier that advert platform added to the link, along with a random identifier for your browser, so that if you later enrol we can tell which advert paid for itself. We share that with Meta and Google — including your email address in a one-way scrambled (hashed) form that they can match but nobody can read back — and we keep it for two years.

Turning it off. Your browser's tracking-protection settings, an ad blocker, or your Google and Meta ad-settings pages all switch this off, and none of it affects your access to the course. You can also email us and we will delete the advertising record attached to your purchase.

Matching for our ads. We may also match your email address, in scrambled (hashed) form, with Meta and Google so you can see our ads there. Email us and we will stop matching yours.

9. Changes to this policy

We may update this policy; the "last updated" date will change and, for material changes, we will make reasonable efforts to notify you.

10. Contact

Questions or requests: [email protected] · Teddy Dupay Basketball Academy, Tampa, Florida.