Privacy Policy


Effective Date: September 1st, 2024

The Orange Airsoft Club at Oregon State University ("OAC," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with us through our website, Discord, events, or other services (collectively, the "Services").

OAC is a recognized student organization at Oregon State University ("OSU"). OAC is not OSU and operates independently, subject to OSU policies.


1. Data Controller


For purposes of the EU/UK General Data Protection Regulation ("GDPR") and similar laws, the data controller is:

Orange Airsoft Club at Oregon State University 📧 airsoft.clubs@oregonstate.edu

We do not currently appoint a Data Protection Officer (DPO) because we do not process data on a large scale or handle sensitive categories of data.


2. Information We Collect


We may collect the following types of information:

2.1 Personal Information You Provide

  • Identifiers: Name, email address, Discord username, OSU affiliation.
  • Participation Data: Event registrations, waiver acknowledgments, rental requests.
  • Emergency/Safety Information: Optional emergency contacts, incident reports.
  • Payment Data: Limited billing info (processed securely by third-party processors such as Stripe/PayPal; we do not store full card numbers).

2.2 Automatically Collected Information

  • Technical Data: IP address, browser/device type, operating system, access times.
  • Usage Data: Clickstream, page visits, Discord engagement.
  • Cookies/Similar Tech: Session identifiers, analytics cookies.

2.3 Third-Party Sources

  • OSU (when required by policy or insurance).
  • Ticketing/payment processors.
  • Platforms such as Discord.

3. How We Use Information


We process your personal data only for legitimate purposes, including:

PurposeLegal Basis (GDPR)Example
Event registration & participationContractProcessing waivers, confirming spots
Safety & compliance with OSU rulesLegal obligationIncident reporting, insurance
CommunicationConsent / Legitimate interestEmailing updates or reminders
Club administrationLegitimate interestMembership records, planning
Payments & rentalsContractHandling fees, rental reservations
Analytics & improvementsLegitimate interestReviewing attendance patterns

4. CCPA/CPRA Categories of Data Collected


The following table maps California Civil Code §1798.140 categories to what OAC collects:

CCPA CategoryExamples Collected by OACSold/Shared?
IdentifiersName, email, Discord IDNo
Customer RecordsEvent registration, rental historyNo
Protected Class InfoNot collected intentionallyNo
Commercial InfoEvent fees, rentalsNo
Internet/Network InfoSite logs, Discord interactionsNo
GeolocationApprox. IP-based locationNo
Audio/Visual DataPhotos/videos from events (with consent)No
Professional/EducationOSU affiliation (student/staff)No
Sensitive DataEmergency contact info (optional)No

OAC does not sell or share personal information as defined under CCPA/CPRA.


5. Your Rights


Under GDPR (EU/UK)

You may have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Request deletion ("right to be forgotten").
  • Restrict processing in certain circumstances.
  • Object to processing (e.g., marketing).
  • Data portability (receive a copy in machine-readable format).
  • Withdraw consent at any time, without affecting prior lawful processing.

Under CCPA/CPRA (California)

You may have the right to:

  • Know what categories and specific personal information we collect.
  • Request deletion of personal information (subject to exceptions).
  • Correct inaccurate information.
  • Opt out of the sale or sharing of personal information (OAC does not sell/share).
  • Limit the use of Sensitive Personal Information.
  • Be free from discrimination for exercising your privacy rights.

To exercise rights, contact us at 📧 airsoft.clubs@oregonstate.edu. We may verify your identity before fulfilling a request.


6. Data Retention


We retain personal information only as long as necessary for the purposes described in this Policy and as required by OSU policies, insurance, or law. When data is no longer needed, we securely delete or anonymize it.


7. Disclosure of Information


We may disclose personal information to:

  • OSU administration (compliance/safety).
  • Vendors/service providers (ticketing, hosting, payments, communications).
  • Insurance/venues (incident reporting).
  • Law enforcement/legal authorities (when required).

We do not disclose personal information for unrelated third-party marketing.


8. International Transfers


If you are outside the United States, your data may be transferred to and processed in the U.S. We rely on Standard Contractual Clauses (SCCs) or equivalent safeguards when required by GDPR.


9. Security


We use reasonable technical, organizational, and administrative measures to protect your information. However, no method of transmission or storage is completely secure.


10. Cookies & Tracking


We use cookies for essential site functionality and limited analytics. You can adjust your browser settings to block or delete cookies, though some Services may not function properly.


11. Children's Privacy


We do not knowingly collect information from children under 13 (U.S.) or the applicable age of digital consent in your jurisdiction, without parental consent. Minors must have guardian permission to participate in events.


12. Changes to this Policy


We may update this Policy periodically. The "Effective Date" above shows the latest version. Significant changes will be communicated via Club channels. Continued use of our Services constitutes acceptance of the updated Policy.


13. Contact Us


For questions or requests regarding this Policy: 📧 airsoft.clubs@oregonstate.edu

Accessibility: For alternative formats or accommodation, please contact Orange Airsoft Club at airsoft.clubs@oregonstate.edu.