Hudl U.S. State Specific Privacy Policy

1. Introduction and Scope

This Hudl U.S. State-Specific Privacy Policy (“State Privacy Policy”) supplements the information contained in the Hudl Privacy Policy available at www.hudl.com/privacy (“Privacy Policy”) for residents of U.S. states with consumer state privacy laws (“State Privacy Law(s)”), including, as of the date below: California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, and any other U.S. state with a state privacy law that becomes effective after that date.

Throughout this State Privacy Policy, “you” or “your” refers to the residents of U.S. states with State Privacy Laws, while references to “we,” “us,” or “our” refer to Hudl, Inc. and its subsidiaries (“Hudl”). Any capitalized terms used but not defined in this State Privacy Policy are defined in our Privacy Policy.

Please read this State Privacy Policy in combination with our Privacy Policy for a complete understanding of how we collect, use, and disclose your personal information. The term “personal information” as used in this State Privacy Policy means personal information or personal data as defined under your applicable State Privacy Law.

Please Note: This State Privacy Policy does not apply to workforce-related personal information collected from California-based Hudl employees, job applicants, or similar individuals. If you apply for a job with Hudl or are a California-based Hudl employee, you will be provided with a separate privacy policy.

2. Privacy Rights

Depending on your applicable State Privacy Law and subject to certain exceptions under your applicable State Privacy Law, you may have some or all of the following rights:

• Right to Delete – The right to request we delete the personal information we have collected from or about you.
• Right to Correct – The right to request that we correct inaccurate personal information that we maintain about you.
• Right to Know/Access – The right to request we disclose to you the personal information we have collected about you, including the categories and specific pieces of personal information, the categories of sources, the purposes for which we collect, use, and disclose it, and the categories of third parties (or under certain State Privacy Laws, the specific third parties) to whom we disclose it.
• Right to Data Portability – The right to access your personal information in a portable format.
• Right to Opt Out of the Sale or Sharing of Your Personal Information – The right to “opt out” of the “sale” or “sharing” of your personal information. This includes the right to “opt out” of the processing of your personal information for “targeted advertising”.
• Right to Opt Out of the Processing of Personal Information for Profiling – The right to opt out of profiling (automated decision making) in furtherance of decisions that produce legal or similarly significant effects.
• Right to Limit (or Consent to) the Use and Disclosure of Sensitive Personal Information –
  • If you are a California resident - The right to direct us to limit our use and disclosure of your sensitive personal information to those uses necessary to provide the Services you requested, and other purposes permitted by law.
  • Depending on your applicable State Privacy Law, you may have the right to opt out of the processing of your sensitive personal information or we may be required to obtain your prior consent in order to process your sensitive personal information.

The exact scope of these rights may vary by state.

California Residents: The following rights are also available for California residents.

• Online Eraser Requests – California residents under the age of 18 may make requests to remove content under Cal. Bus. & Prof. Code § 22581.
• Shine the Light Requests – California’s “Shine the Light” law (Cal. Civ. Code § 1798.83) permits users of our websites that are California residents (using the websites in their personal or household capacity) to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

3. Exercising Your Privacy Rights

When making a request to exercise your rights under an applicable State Privacy Law, you have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise your rights. However, please note that depending on your data choices, certain Services may be limited or unavailable.

Making a Request to Delete, Correct, or Know/Access

To make a request to delete, correct, or know/access, please email support@hudl.com or use our request form, available at https://www.hudl.com/privacy/exercise-my-privacy-rights. To submit a request by phone, you may call +1 (402) 674-0499. If you are a parent or legal guardian (and in some cases, an authorized agent as noted below), you may also submit this request on the individual’s behalf. You do not need to have an account with us to submit a request.

Before completing your request, we may need to verify your identity. Verification is generally accomplished by matching the information you provide in your request against information already in our records, such as the email address associated with your Hudl account. We may also send you a link to verify your email address or request additional documentation or information solely for the purpose of verifying your identity. If we cannot verify your identity to the degree of certainty required by applicable State Privacy Law, we will notify you and explain why we are unable to act on the request.

To correct your information, we also encourage you to check the settings in our apps and websites, where some personal information can be directly changed or corrected by you.

To request deletion of your account, you may also be able to use the app settings in your mobile app for the Services.

Making Requests to “Opt Out” of the “Sale” or “Sharing” of Personal Information

To submit a request to “opt out” of the “sale” or “sharing” of your personal information (or the use of your personal information for “targeted advertising”), you may email support@hudl.com or use our request form, available at https://www.hudl.com/privacy/exercise-my-privacy-rights. If you are a parent or legal guardian (and in some cases, an authorized agent as noted below), you may also submit this request on the individual’s behalf.

You may also enable online, where available, a Global Privacy Control (“GPC”) signal via your browser. If you enable the GPC signal, we will treat it as an opt-out of the “sale” and “sharing” of your personal information under applicable State Privacy Laws for that browser or device.

You do not need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request. You may change your mind and opt back in to the sale or sharing of your personal information at any time by submitting a request to support@hudl.com.

Making Requests to Limit the Use and Disclosure of Sensitive Personal Information

To request to limit our use and disclosure of your sensitive personal information to the purposes permitted by law, you may email support@hudl.com or use our request form, available at https://www.hudl.com/privacy/exercise-my-privacy-rights.

We do not require you to verify your identity to submit this request, but we may need to confirm certain details to locate and apply it. This right is available to California residents where we use or disclose sensitive personal information beyond the purposes permitted under California law.

Other Rights

To make a request to us regarding any other right you may have (as described above) under your applicable State Privacy Law, you may email support@hudl.com or use our request form, available at https://www.hudl.com/privacy/exercise-my-privacy-rights.

Authorized Agents

Your applicable State Privacy Law may permit you to use an authorized agent to submit a request to exercise a right under such laws on your behalf. When submitting a request on behalf of someone, an authorized agent must identify themselves as an authorized agent — whether submitting via our request form or by emailing support@hudl.com. As permitted or required by the applicable State Privacy Law, we may require verification of your identity and confirmation that you provided the agent authority to act on your behalf before processing the request.

Right to Appeal

Under your applicable State Privacy Law, you may have the right to appeal a decision we have made in connection with your privacy rights request. To appeal, you may email us at support@hudl.com with “Privacy Rights Appeal” in the subject line. If you are unsatisfied with the way that we have handled your appeal, you may have the right to complain to your state’s Attorney General.

California Residents

Online Erasure Requests: California residents under the age of 18 may make requests to remove content by sending an email with a detailed description of the specific content or information to be removed to support@hudl.com. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

Shine the Light Requests: To make a request under the Shine the Light Act, California residents should send an email to support@hudl.com or write to us at: Hudl, Attn: Legal Dept., 600 P Street, Suite 400, Lincoln, NE 68508.

Additional Methods for Requests: In addition to the methods for making requests described in this Section 3, California residents may make requests by writing to us at: Hudl, Attn: Legal Dept., 600 P Street, Suite 400, Lincoln, NE 68508.

4. Notice at Collection

This Notice at Collection provides certain disclosures about the categories of personal information, sources of personal information, purposes for collecting, processing, and sharing personal information, and retention of personal information over the past 12 months. This Notice at Collection supplements the information found in our Privacy Policy.

Categories of Personal Information

The personal information we collect is described fully in Section 2 of our Privacy Policy. In particular, we may collect the following categories of personal information from consumers, and have collected such information within the past 12 months, depending on which of our Services were used:

• Identifiers, such as name, email address, unique personal identifier, postal address, phone number, signature, Athlete Profile information, Social Media handle, relationship information (for family members), birthdate, gender, or other similar identifiers. We may collect certain information from third party platforms, such as Facebook, Google, or Apple, if you log into our Services using their single sign-on feature to log into your Hudl account.
• Customer Records, such as name, physical characteristics or description, address, telephone number, and limited education and employment information included in your user profile information. We collect and store your purchase history with us. However, we do not directly collect credit or debit card information. All credit and debit card data is provided directly to our PCI-compliant, third-party payment processor.
• Characteristics of Protected Classifications, such as age, gender, race, color, ancestry, national origin, citizenship, marital status, disability, or medical condition, for example where such information is voluntarily disclosed in a user profile, entered by you or other users of our Services, or can be determined from content available on or captured by our Services.
• Commercial Information, such as purchase/subscription history and content streaming history/event ticket purchase history; content of texts, chats, emails, or survey answers you send us; messages with our support team; or purchases you made in connection with the Services.
• Internet Activity, such as browsing, viewing, and search history on the Services, the source of the request, the type of browser making the request, the preceding page view and other information about your engagement with our Services. We may also collect your IP address and your device identifier, date and time you visited our websites, computer identity, device type, operating system, IP address, livestream or video viewing history, and other information about your actions on the Services or the device or browser you use to access the Services.
• Geolocation Data, such as imprecise geolocation data which may include the city, state, or zip code associated with your IP address when using our Services, and such as precise geolocation data, such as GPS and positioning information, that is captured when you use a wearable device with our Services or when you use our Services that rely on or use precise location, which may be collected when using Services for coupon books you have purchased or when you are using the Services with certain devices, including ticket scanners, Hudl Focus cameras, and wearable devices.
• Audio and Visual Information, such as photos and videos of athletes and teams (including the metadata associated with those videos or photos), any audio associated with a livestream or video, and telephone call recordings with support, including our support chatbot (available via phone), or other voice recordings. When you communicate with our sales and support teams or our support chatbot (available via phone), we may record the call and messages.
• Professional and Employment Information, such as, if you are a school admin, coach, recruiter, or a professional athlete, your organization’s/employer’s name, your title or position, and other organization/employer details including address and phone number.
• Education Information, such as education records where provided by our educational organization customers or where using the Services for our educational organization customer’s purposes, which may include personal information related to athletes who use Hudl as part of a school team or whose personal information is provided by an educational organization customer of ours.
• Biometric Information, such as Wearable Data and personal information derived from videos, where such personal information is considered biometric information under applicable State Privacy Law.
• Sensitive Personal Information, such as Wearable Data that is health information or biometric information, precise geolocation data (described above), health information, biometric information, account login credentials in combination with a password or other access credential, or the content of messages you send and receive with other users of our Services, in all cases where it is sensitive personal information under applicable State Privacy Law. This further includes the personal information of minors where it is sensitive personal information under applicable State Privacy Law (including personal information of any consumer under age 16 in California).
• Inferences, based on the above personal information, to determine interests or preferences so that we may provide you with advertising for products or services we believe may be of interest to you. For example, recommending streaming content.

Categories of Sources of Personal Information

The sources from which we collect personal information include: directly from: you (including through account creation, registrations, surveys, and your use of the Services); Customers and their coaches, admins, and other users, including athletes and parents with respect to fundraising; parents/legal guardians of athletes; Combine Partners; third-party platforms you link with your account (such as Facebook, Google, or Apple); analytics tools; content rights providers; advertising networks; and other third-party services that update or supplement information we hold about you. For a detailed description of the sources from which we collect personal information, see Section 2 of our Privacy Policy.

Categories of Third Parties to Whom We Disclose Personal Information

In the past 12 months, we have disclosed personal information to the following categories of third parties, as described more fully in Section 8 of our Privacy Policy: our affiliates, subsidiaries, and companies under common control; our agents, representatives, resellers, and independent contractors; our service providers, contractors, and subprocessors (including cloud storage and hosting, payment processing, analytics, fraud-prevention, age-verification, AI service providers, and professional and legal services); our Customers (the teams, schools, universities, colleges, clubs, and organizations you may be affiliated with or who offer registrations, fundraising opportunities, livestreams or archived content, or event tickets and related custom items); recruiters; Combine Partners; our licensees; our marketing and advertising partners (including Social Media platforms and advertising networks); sponsors and co-branded or branded program partners; other users of the Services, where you make information public or use sharing features; parties involved in a merger, financing, or other business transaction; and government authorities or other parties in connection with legal obligations, safety, or the protection of our rights.

In the past 12 months, Hudl disclosed to service providers and contractors (as those terms are defined under your State Privacy Law) the following categories of personal information for the business purposes described in this section: Identifiers; Customer Records; Commercial Information; Characteristics of Protected Classifications; Internet Activity; Geolocation Data; Audio and Visual Information; Professional and Employment Information; Education Information; Biometric Information; Sensitive Personal Information; and Inferences. Service providers and contractors are contractually prohibited from retaining, using, or disclosing personal information for any purpose other than performing the services specified in Hudl’s written contract with them.

Purposes for Which Personal Information is Collected, Processed, and Disclosed

We collect the above categories of information so that we can best serve you and operate our business effectively. The table below maps the specific business purposes for collection to the categories of personal information collected. The collection and use of this information are described more fully in our Privacy Policy.

If we sell or share your personal information, you have the right to opt out. For information about how to exercise your opt-out rights, including how to submit a Do Not Sell or Share request, see Section 3 of this State Privacy Policy.

Categories of Personal Information We “Sell”, “Share”, or Process for "Targeted Advertising”

Certain data collection and disclosures related to you and your activity on our Services may be considered a “sale” or “sharing”, or constitute the processing of your personal information for “targeted advertising”, under applicable State Privacy Laws. As defined by State Privacy Laws, we “sold” or “shared” or processed for “targeted advertising” certain data elements within the following categories of personal information: Identifiers; Commercial Information; Internet Activity; Imprecise Geolocation Data; Audio and Visual Information; Professional and Employment Information; Education Information; Biometric Information; Sensitive Personal Information; and Inferences. We “sold,” “shared,” or disclosed for the purpose of “targeted advertising,” each category to business partners and other third parties as described in Section 8 of our Privacy Policy.

The purposes for which we "sell," "share," or process your personal information for "targeted advertising" are to serve, deliver, and measure advertising on our Services and on third parties' services; to offer Services that include registrations, event tickets and related custom items, livestreams and archived content, and fundraising opportunities on behalf of a Customer; to provide our Services requested by you; to provide scouting tools; to market our and our partners' products and services to you; and to provide an enhanced experience that integrates with Social Media and other third-party services, as further described in Sections 1 and 8 of our Privacy Policy.

Where applicable law requires opt-in consent before we “sell” or “share” the personal information of a known minor, we obtain that consent as described in Sections 3 and 9 of our Privacy Policy.

For California residents: if you are age 16 or older, you have the right to direct us not to "sell" or "share" (as either term is defined in your applicable State Privacy Law) your personal information at any time (the “right to opt-out”) using the methods described in Section 3 of this State Privacy Policy. If we actually know you are aged 13 to 15, you must give us affirmative authorization (the “right to opt-in”) in order for us to "sell" or "share" your personal information. If we actually know you are under age 13, you must have your parent or guardian give us affirmative authorization (the “right to opt-in”) on your behalf in order for us to “sell” or “share” your personal information. California residents who opt-in to personal information sales or shares may opt-out of future sales or shares at any time. We handle the personal information of children under 13 as described in Section 9 of our Privacy Policy, consistent with the Children's Online Privacy Protection Act (COPPA).

If you would like to opt out of the processing of your personal information for “targeted advertising” or the “sale” or “sharing” of your personal information, you may click the “Your Privacy Choices” link in our website footer or use our request form, as further described in Section 3 of this State Privacy Policy.

You do not need to create an account to exercise your opt-out rights.

We will only use personal information provided in an opt-out request to review and comply with the request. You may change your mind and opt back in at any time by emailing support@hudl.com.

Sensitive Personal Information

Some of the personal information we collect is "sensitive personal information" or "sensitive data" under the State Privacy Laws. This may include certain Wearable Data (as defined in our Privacy Policy), the personal information of minors (including the personal information of minors under age 16 in California), health information, biometric information, the contents of communications you send and receive through the Services where we are not the intended recipient, and your account log-in credentials in combination with a password or other access credential.

Depending on your applicable State Privacy Law, you may have the right to limit our use and disclosure of your sensitive personal information to those purposes necessary to provide the Services and other purposes permitted by law (sometimes called the right to "opt out" of certain uses of sensitive data). To exercise this right, you may submit a request using our request form, or contact us using the methods in Section 3 of this State Privacy Policy.

Where a State Privacy Law requires your consent before we process sensitive personal information or data, we obtain that consent before processing, including, where required, the consent of their parent/legal guardian. Where we rely on your consent, you have the right to withdraw it at any time. To withdraw your consent, please contact support@hudl.com. Withdrawing consent will not affect processing we carried out before you withdrew it, and may affect your ability to use features that depend on that data. You do not need to create an account to exercise these rights.

De-Identified Data

In some cases, we de-identify or aggregate personal information so that it can no longer reasonably be linked to you or your household, and we may use and disclose that de-identified or aggregated data for any lawful business purpose, such as analytics, research, benchmarking, product development, and improving our Services, among other purposes. Where we maintain data in such de-identified or aggregated form, we take reasonable measures to ensure it cannot be associated with you or your household, we maintain and use the data only in de-identified or aggregated form, and we do not attempt to re-identify it (except as permitted by applicable law). Any such de-identified or aggregated information is not "personal information" or "personal data" as defined under applicable State Privacy Laws and is therefore not subject to the rights and disclosures described in this State Privacy Policy.

Timeframe for Retaining Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this State Privacy Policy and our Privacy Policy. We determine the appropriate retention period using criteria such as the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we use it and whether we can achieve those purposes by other means; and applicable legal, contractual, accounting, and reporting requirements. For a full description of how we retain and delete personal information, see Section 15 of our Privacy Policy.

5. Contact Us

If you have any questions about this State Privacy Policy, please contact us using the methods described in Section 22 of our Privacy Policy or email support@hudl.com.

6. Changes

Hudl may periodically update this State Privacy Policy. The most current version of this State Privacy Policy will govern our use of your information and will be available at https://www.hudl.com/privacy/us-states. By using our Services, you acknowledge that you have read and understood this State Privacy Policy. For details on how we notify you of material changes to this State Privacy Policy or our Privacy Policy, please see Section 23 of our Privacy Policy.