Privacy Policy

At Canoe, we fully respect your fundamental right to privacy as enshrined in the Charter of Fundamental Rights of the European Union and governed by the General Data Protection Regulation (Regulation (EU) 2016/679). We are committed to strict GDPR compliance and the protection of personal data of all individuals who interact with us.

  1. Our formal company name is Canoe LTD, with the registration number HE 361592 and registered address Griva Digeni 51, ATHINEON COURT Flat/Office 202, 8047 Paphos Cyprus (hereinafter "Company," "we," "us," or "our").
  2. Scope of this Privacy Policy This Privacy Policy applies to the personal data of the following categories of data subjects: application users of our HopShots application (“the App”), including registered users and those in the process of registering. It also applies to users who access the App as guests and later decide to create or link an account.
  3. Login and Registration via Third‑Party Providers You may choose to sign up for or log into the App using an account from a third‑party service provider, such as Google, Apple, Facebook, or other identity providers (each a “Third‑Party Provider”). When you do so, we receive certain information about you from that Third‑Party Provider. This typically includes your name, email address, and a unique identifier associated with your account at that provider, as well as any other information you agree to share with us. We use this information to create and manage your account in the App, to authenticate you when you log in, and to link your viewing history, in‑app progress, and purchases to your account so that you can access them across devices. We do not receive or store your password for any Third‑Party Provider; authentication is handled directly by that provider. The processing of your personal data in connection with Third‑Party Providers is based on your choice to use those services and on our legitimate interest in providing a convenient and secure login method. You can stop sharing data from a Third‑Party Provider with us at any time by disconnecting the integration in the App settings (where available) and/or in your Third‑Party Provider account settings. However, if you disconnect a Third‑Party Provider that you use to log in, you may lose access to your account unless you add another login method. Your use of a Third‑Party Provider is also governed by that provider’s own terms of service and privacy policy. We encourage you to review the applicable policies of any Third‑Party Provider you use to understand how they process your personal data.
  4. Legal Bases for Processing In compliance with the GDPR, processing personal data requires both a defined purpose and a lawful basis. For users located in the European Economic Area, the United Kingdom, or where the GDPR applies, we process personal data based on one or more of the following legal bases: Performance of a contract: where processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract (for example, to create and manage your App account and provide access to content and features you request). Compliance with a legal obligation: where we need to process your personal data to comply with legal obligations, such as tax, accounting, or regulatory requirements. Legitimate interests: where processing is necessary for our legitimate interests, provided that such interests are not overridden by your interests or fundamental rights and freedoms. These interests may include ensuring the security of the App, preventing fraud and abuse, improving and personalizing your experience, and providing convenient login methods via Third‑Party Providers. In exceptional cases, we may process your personal data on the basis of your explicit consent (for example, for certain types of marketing communications or optional data uses). Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  5. We process personal data for the following purposes, each supported by a corresponding lawful basis under the GDPR:
    1. Provision of services, including access to the App This covers creating and managing user accounts, delivering the streaming service, and providing customer support related to these services. Legal basis: Performance of a contract. Processing personal data is essential to fulfill our contractual obligations and deliver the agreed services.
    2. Compliance with legal obligations We process personal data to fulfill our legal and regulatory obligations, including accounting, tax reporting, and other statutory requirements. Legal basis: Legal obligation. These processes are mandatory under applicable laws.
    3. Legal claims We may process data to assess, defend, or pursue legal claims and to reorganize or scale our business operations. Legal basis: Legitimate interest. Protecting our legal rights and ensuring business continuity is essential for our operations and your service stability.
  6. We start processing personal data about you directly and information received from Third-Party Providers when you interact with us, such as by signing up for our services, contacting us or providing technical support. We also process personal data that accumulates from your use of our App or services.
  7. We process the following categories of personal data, depending on your relationship with us:
    1. (i) Contact Information Includes your name, email address. Data subjects: Application users, including guest users who later register or link accounts.
    2. (ii) Support Communication Personal data which you may include in email to our support. Data subjects: Application users, including guest users who later register or link accounts.
    We do not knowingly collect personal information from anyone under 16 or allow them to use our Service. If you are under 16, please do not submit any personal details such as your name, address, phone number, or email. If we discover that we have collected information from a child under 16, we will delete it promptly.
  8. To provide and maintain our services and the App we share certain personal data with trusted third-party partners who process personal data on our behalf. These partners include, but are not limited to: Suppliers of IT systems and cloud hosting services, who process data on our behalf as data processors; Payment service providers, who act as independent data controllers for the personal data they collect and process in connection with payment transactions. Communication systems providers, who facilitate the exchange of information through email, messaging, and other communication channels on our behalf. We conduct thorough due diligence to ensure that all such partners meet stringent data protection standards and comply fully with the requirements of the General Data Protection Regulation (Regulation (EU) 2016/679) and applicable EU data protection laws. We have entered into binding data processing agreements with these partners, which require them to handle your personal data in strict accordance with our instructions and to implement appropriate technical and organizational measures to protect your data. In some instances, our partners may operate or store data outside the European Economic Area (EEA). In those cases, we ensure that all international transfers of personal data are conducted in compliance with the GDPR’s cross-border data transfer requirements. This primarily involves using the European Commission’s approved Standard Contractual Clauses (SCCs), supplemented by additional safeguards where necessary to guarantee an adequate level of protection for your personal data.
  9. We retain your personal data for the purposes described above throughout our contractual relationship with you, as well as for any additional period during which we maintain meaningful contact, or as required by applicable law. Once the reasons for processing your data no longer apply, we will discontinue processing and securely delete your personal data.
  10. Under the GDPR, you have the following rights regarding the personal data we process about you:
    • Access: You can request a copy of the personal data we hold about you.
    • Rectification: You can ask us to correct or complete any inaccurate or incomplete information.
    • Erasure: You may request that we delete your personal data when there is no valid reason for us to keep it, if you have withdrawn your consent, if you object to the processing, if we have processed it unlawfully, or if the law requires deletion.
    • Restriction: You can ask us to limit how we use your data, for example, if you dispute its accuracy while we verify the information.
    • Objection: You have the right to object to our processing based on legitimate interests. If you do, we will stop processing unless we can demonstrate compelling reasons that override your interests or if processing is required to protect legal claims.
    • Data Portability: Where applicable, you can request a copy of your data in a common, machine-readable format and have it transferred to another service provider.
    • You can exercise these rights at any time by contacting us through your account settings or via contact@canoeband.com. We are committed to respecting your privacy and responding promptly to your requests.
  11. If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state where you usually reside, work, or where the alleged infringement occurred.
  12. We may update this privacy policy from time to time in response to changing legal, technical or business developments. Whenever we make changes, we will notify you by revising the date at the top of this privacy policy. You might also receive updates through the App. To stay informed about how we process your data and your rights, please review this privacy policy regularly.