GOAT Gamers Lounge – Privacy Policy

Effective Date: April 1, 2025

Last Updated: March 1, 2026

This Privacy Policy explains how GOAT Gamers Lounge (“GOAT,” “we,” “us,” “our”) collects, uses, discloses, and safeguards personal information when you interact with our website(s), in-lounge systems, reservations, memberships, tournaments/events, and related services.

Notice at Collection (California)

This Privacy Policy also serves as GOAT Gamers Lounge’s “Notice at Collection” under the California Consumer Privacy Act (CCPA/CPRA). It describes the categories of personal information we collect, the purposes for which it is used, whether it is sold or shared, our retention practices, and the rights and choices available to California residents.

GOAT Gamers Lounge does not sell or share personal information, including for cross-context behavioral advertising, as defined by CCPA/CPRA. We only use service providers under contracts prohibiting them from using information for any purpose other than providing services to us.

This Privacy Policy explains how GOAT Gamers Lounge collects, uses, discloses, and safeguards personal information when you interact with our website(s), systems, reservations, memberships, tournaments/events, and related services.

Key Concepts and Definitions

Personal Information: Info that identifies, relates to, or could reasonably be linked with an individual or household.
Sensitive Personal Information (California): Government identifiers, precise geolocation, login credentials, etc.
CCTV: Video surveillance in public areas. Used solely for safety/security. GOAT Gamers Lounge does NOT use facial recognition, biometric analysis, or generate biometric identifiers.
Cross‑Context Behavioral Advertising: Advertising based on personal information from activity across businesses/apps.

Information We Collect

Identifiers/contact info: name, email, phone, date of birth (if required).
Account data: username, gamertag, preferences, membership tier, reservations.
Transaction data: purchases, time used, credits, refunds/chargebacks.
Device/network data: IP address, device IDs, browser/app info, logs.
Tournament/event data: brackets, results, eligibility checks.
CCTV footage (no biometric or automated facial analysis).
Event media: photos/videos, gameplay, streams/VODs used for documentation, competitive integrity, and promotional use unless a parent/guardian opts out for a Minor.

How We Use Information

Account creation and age verification.
Reservations, events, tournaments, prize fulfillment.
Payments, fraud prevention, dispute handling.
Safety/security, including CCTV review.
Communications (receipts, notices, updates).
Marketing (opt-outs available; parental controls for Minors).
Analytics and service improvements.

Audio and Recording Notice

Audio is recorded only where participants are notified or where recording is inherent to the service (e.g., live streams, tournaments, voluntary voice channels). GOAT Gamers Lounge does not make secret audio recordings. Participation constitutes consent under Pennsylvania two‑party consent law.

Payments and PCI Practices

Payments are processed by third‑party processors. GOAT Gamers Lounge does not store CVV or sensitive authentication data after authorization.

How We Disclose Information

Service providers for payments, email, analytics, reservations, and security.
Streaming/tournament platforms (e.g., Twitch, YouTube) and community platforms (e.g., Discord), governed by their own privacy policies.
Social login providers selected by you.
Law enforcement/regulators when required.

We do not disclose personal information for third‑party independent use except as described or with your consent.

Cookies, Analytics, and Advertising

Cookies support security, session functionality, analytics, and personalization. Non‑essential cookies may require consent.

We do not permit third‑party tracking for cross‑context behavioral advertising. Analytics tools operate solely as service providers.

California Privacy Rights (CCPA/CPRA)

California residents may have rights to:

Access specific pieces/categories of personal information;
Delete information (with exceptions);
Correct inaccurate information;
Opt out of sale/sharing (not applicable since we do not sell/share);
Limit sensitive personal information.

Right to Opt Out of Sale/Sharing: GOAT Gamers Lounge does not sell or share personal information. If practices change, we will update this Policy and provide required mechanisms.

Global Privacy Control (GPC): We honor browser‑based opt‑out signals where required by law.

GDPR/EEA/UK Notice (If Applicable)

If GDPR applies, GOAT Gamers Lounge acts as the data controller. Legal bases include contract, legitimate interests, legal obligations, and consent. Residents may request access, correction, deletion, portability, restriction, or objection and may contact their supervisory authority.

Children’s Privacy (COPPA and Minors)

GOAT Gamers Lounge does not knowingly collect personal information online from children under 13 without verifiable parental consent. Parents may request review/deletion via Support@GoatGamers.net.

Parents/guardians may request removal of event media depicting Minors when feasible unless retention is required for safety, competitive integrity, or legal obligations.

Privacy Rights Request Process

Submitting Requests. Email Support@GoatGamers.net with subject “Privacy Request.” Additional methods may be offered where required.
Verification. Verification may require confirming account details, transaction history, or email verification. Requests may be denied if identity cannot be verified.
Response Timelines. Responses issued within 45 days; may extend to 90 days with notice.
Frequency Limits. Up to two access requests per 12‑month period.
Grounds for Denial. May include fraud prevention, legal compliance, taxes/financial recordkeeping, internal uses, or inability to verify identity.
Deletion Requests. Certain data cannot be deleted if required for security, fraud prevention, taxes, or to complete a transaction.
Correction Requests. Corrections consider the nature and purpose of the information.
Sensitive PI Limitation. You may request limits on sensitive personal information.
Appeal Rights (CO/CT/VA). Appeal within 30 days by replying “Appeal Request.” May escalate to your state Attorney General.
Confirmation. We confirm request completion or explain inability to fulfill.
Authorized Agents. Agents may submit requests with proof of authorization.

Minor Requests

Parents/guardians may exercise privacy rights for Minors. Additional verification may be required.

Recordkeeping

GOAT Gamers Lounge maintains privacy request records for at least 24 months, as required by law.

Security Measures

GOAT Gamers Lounge uses reasonable administrative, technical, and physical safeguards to protect personal information. These measures include access controls, password standards, encryption of data in transit, network monitoring, restricted employee access, and vendor security assessments. No method of storage or transmission is 100% secure.

Employee Access and Data Minimization

Access to personal information is limited to personnel who need it to perform their job duties. Role‑based access controls and internal confidentiality and security policies are enforced.

Encryption and Segmentation

Where feasible, GOAT Gamers Lounge uses encryption for data in transit and segmentation of operational systems to reduce the scope of security incidents.

Incident Logging

Security events and suspected incidents are logged and reviewed. Logs are retained as required for legal, security, or audit purposes.

Breach Notification

If unencrypted personal information is involved in unauthorized access, acquisition, or disclosure, GOAT Gamers Lounge will provide notifications without unreasonable delay and consistent with applicable laws.

Risk of Harm Assessment. We may assess whether the incident poses a risk of harm. If harm is likely, notifications will be issued.

Third-Party Incidents. Service providers handling GOAT Gamers Lounge data must notify us promptly of security incidents. We will then notify individuals and regulators as required.

Notification Contents. Notices may include: a description of the incident; categories of affected information; steps we are taking; recommended protective measures; and contact options for more information.

Third‑Party Platforms, Service Providers, and Integrations

Processor vs. Controller. We act as a business/controller for our services and use service providers/processors to perform functions (payments, hosting, email, analytics, reservations, security). Providers are bound by contracts that restrict use and require appropriate security.
Tournament, Streaming, and Community Platforms. When you use Discord, Twitch, YouTube, or tournament tools, your interactions may be public and are governed by those platforms’ privacy policies. Linking or participating is voluntary and can be unlinked where supported.
Social Logins and SSO. If you choose Google or Facebook sign‑in, we receive profile information authorized by you via OAuth; we do not receive your password. You may revoke access in your social account settings.

International Transfers and Cross‑Border Safeguards

Personal information may be stored and processed in the United States and other countries. Where required, we use appropriate safeguards for cross‑border transfers, which may include the EU Standard Contractual Clauses, the UK IDTA/Addendum, the Swiss standard clauses, and supplementary technical and organizational measures. For providers that participate, transfers may also rely on the EU‑U.S. Data Privacy Framework or other adequacy mechanisms.

Sub‑processors and Updates

We may engage sub‑processors (e.g., cloud hosting, email delivery, analytics). Sub‑processors are contractually bound to equivalent confidentiality and security obligations. We maintain a current list of key service providers available upon request and will update this Policy if our practices materially change.

Data Location and Backups

Operational data and backups may be stored in multiple regions to ensure availability and recovery. Storage locations are subject to the same contractual and technical safeguards described above.

Law Enforcement and Legal Requests

We may disclose information when required by law, subpoena, or court order. Where legally permitted and feasible, we will notify affected users before disclosure and will limit the scope of information disclosed to what is legally required.

Updates

We may update this Policy and post a revised effective date. Material changes may include additional notice.

Contact

GOAT Gamers Lounge

4805 Penn Ave, Pittsburgh, PA 15224

Email: Support@GoatGamers.net