THE FIFAS STORE PRIVACY NOTICE

Last Updated: June 9th, 2026

To see prior versions of this Privacy Notice, please click on the “Previous Privacy Notices” link in the footer of this website.

Welcome to the online store (the “Store”) through which you are accessing this Privacy Notice. The Store is operated by Legends Hospitality Parent Holdings LLC, its affiliates and subsidiaries (“Legends Global,” “we,” “us,” or “our”) on behalf of the organization identified on the Store (together with its affiliated companies, the “Organization”). This Privacy Notice applies to the Store and to our websites, mobile applications, and other offline, online, and mobile services that link to or post this Privacy Notice (collectively, the “Services”). When you engage with the Store, you provide personal data to the Organization and to Legends Global. This Privacy Notice explains how Legends Global collects, uses, and shares personal data when you interact with the Services.

If you also engage with the Organization’s websites or services, your personal data may also be processed in accordance with the Organization’s own privacy practices. For more information about the Organization’s privacy practices and rights the Organization makes available, please see www.fifas.us.

We may offer some Services in connection with our partners or a third party via the Store, a website, or mobile application. When you provide personal data to a website or mobile application that is provided with a third party (e.g., Shop Pay, Apple Pay, Google Pay), that personal data will generally be made available to both us and such third party. We encourage you to consult the third party’s privacy notice to ensure that you understand how it will use your personal data and how you may exercise control over it.

This Privacy Notice describes how we collect and use your personal data when you interact with our Services, correspond with Legends Global, interact with us as a representative of our partners or vendors online or offline (including at a venue), follow us or otherwise interact with us on social media platforms, or otherwise interact with Legends Global.

Legends Global is subject to multiple regional and local specific laws, some of which require us to provide extra information about how we use personal data. If this affects you, you can find this extra detail in the Region-Specific Disclosures section.

It also describes your privacy and data protection rights, including where applicable the right to object to some of Legends Global’s processing activities. More information about your rights and how to exercise them is in the Your Privacy Choices section below.

What Does This Privacy Notice Cover?

This Privacy Notice does not address Legends Global’s privacy practices relating to Legends Global job applicants, employees, and other employment-related individuals. It also does not address our use of data that is not subject to applicable data protection laws (such as anonymized or publicly available data). This Privacy Notice is not a contract and does not create legal rights or obligations not otherwise provided by law.

Legends Global' s Role in Processing Personal Data

Data protection laws sometimes differentiate between “controllers” and “processors” of personal data. A “controller” determines the purposes and means (the why and how) of processing personal data. A “processor,” sometimes referred to as a “service provider,” processes personal data on behalf of a controller and is subject to the controller’s instructions and direction on the management of personal data.

This Privacy Notice describes Legends Global’s privacy practices where we act as a controller in respect of our processing of your personal data in connection with the Services.

This Privacy Notice does not cover or address Legends Global’s processing of personal data in our capacity as a processor or service provider on behalf of the Organization, and we recommend you refer to the Organization’s privacy notice for information on how they process personal data. Any requests relating to personal data processed on behalf of the Organization in our capacity as a processor should be directed to the Organization and will typically be handled directly by the Organization (see their privacy notice, linked above).

If you access the Store or otherwise interact with us from the European Economic Area, United Kingdom, or Switzerland, please see the Who is Responsible for Your Personal Data section of our Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures set out below for more information about the legal entity operating as the controller of your personal data.

Personal Data We Collect

Personal Data You Provide to Us

We collect and process personal data about you that you provide directly to us when you interact with us, our partners, or our Services.

The categories of personal data we collect depend on how you interact us or with the Services. For example, you may provide us with your personal data directly when you communicate with us (such as by email or phone), report a problem or request support with a website, facilitate the relationship between us and the partner or vendor you represent, participate in partner or vendor events or surveys, or otherwise engage with the Services. Not all of the personal data listed in the table below applies to your engagement with the Store.

We may also use automated technologies, such as AI-powered phone outreach and AI chatbots, to communicate with you and facilitate interactions on the Store. These technologies may collect and process personal data as described below:

Personal Data Category	Details
Identifiers	name, mailing address, email address, phone number, social media account names, unique device identifiers, date of birth, government identifiers (driver’s license, passport numbers, Social Security numbers, and similar identifiers).
Account Information	name, username, and password for your account on the Store, gender, and age / date of birth
Customer Records	mailing address, email address, or telephone number.
Communications Between You and Us	details of any communications you may make to us, including through customer messages sent through forms, emails, AI chatbots, AI-powered agents, or other contact information we make available, including call recordings and chat logs where permissible.
Transaction Information	products or services that you purchase from us, amount spent, the date / time of your purchase, how frequently you purchase from us, payment method, whether you have used any discount or gift card codes or other offers. This may also include purchases made at our venues or private events, to the extent we are able to associate those purchases with you. We use third-party payments providers, such as Shop Pay, Apple Pay, and Google Pay, to process payments made to us. The information that you share with the payments provider will be treated in accordance with their privacy notice.
Product Returns and Complaints	details of any requests to return products, the reason for the return (including any faults) and refunds processed.
Payment Information	credit or debit card information.
Communication Preferences	your preferences in receiving marketing information from us, and your communication preferences.
Sensory Information	recordings of any audio communications between you and Legends Global (where permitted by law).
Professional Information	your job title, company name, professional background, and the nature of your relationship with us or the partner / vendor you represent.
Inferences	predictions about interests and preferences and related information.
Biometric Information	biometric information, such as when you use biometric authentication at stadiums or venues that offer this functionality for entry or other relevant functionality governed by this Privacy Notice. Where required by law, we collect this information pursuant to your consent and may provide additional notice about relevant data handling practices.
Medical and Special Assistance Information	information about any relevant health conditions, religious or dietary requirements, or any other information required to accommodate any special requests, accessibility requirements or to provide assistance (including medical assistance) at our venues. This information may include sensitive or special category data, including information relating to your health, race, ethnicity, religious or philosophical beliefs.
Complaints	information that you submit to us in connection with any complaints. This information may include sensitive or special category data, including information relating to your health, race, ethnicity, religious or philosophical beliefs, sexual orientation, and political opinions.
Market Research Information	information collected in the course of carrying out market research, including your responses to surveys
Engagement Information	information you provide or that we create when you engage in competitions or feedback, including entries to events, contests or promotions and feedback and ratings you provide relating to the Store or its products.
Criminal Offence Information	criminal conviction and offence data relating to criminal activity or suspicions or allegations of criminal or terrorist activity.
Sensitive Information	including information relating to your health, race, ethnicity, religious or philosophical beliefs, sexual orientation, and political opinions.
Other Personal Data	details of any communications you may make to us, including through messages sent through forms, emails, or other contact information we make available, communications preferences, attendance at events, feedback and ratings you provide relating to our Services, comments and content in response to surveys or other market research, and any other inquiries, requests, interactions with, or comments you choose to send us or post on social media, including our social media pages on services such as X, LinkedIn, or Instagram, among others. We may also collect user-generated content, including any files, documents, audio, videos, images, data, reviews, or communications you choose to input, upload, or transmit to our Services, or any embedded social media posts featuring our products.

Personal Data We Receive from Third Parties

Sometimes, we receive information about you from third parties. In particular:

• Partners and Vendors: If you interact with us or our Services in your capacity as a representative of one of our partners or vendors, we may obtain personal data about you from the partner or vendor you represent. For example, we may obtain your contact information from another partner or vendor as a part of a referral. We may also obtain information from the Organization to help us tailor our Services to you, ensure you have access to certain services or goods you are entitled to, or to send you direct marketing that may be of interest to you. (Identifiers, Professional Information, Other Personal Data)

• Social Media Sites: If you interact with us on social media, such as if you “follow” us, “tag” us or participate in an online event, community or forum that we operate on the relevant social media platform, we may receive information from or access information about you and your profile on that social media platform that you choose to share in accordance with your settings. (Identifiers, Internet/Network Information, Other Personal Data)

• Advertisers, Influencers, and Publishers: We advertise on our Services and through third-party services. Advertisers, influencers, and publishers may share personal data with us regarding our advertising efforts. For example, we may obtain information about whether an advertisement on a third party’s services led to your interaction with a Legends Global website. (Identifiers, Internet/Network Information)

• Market Research Firms, Survey Companies, and Event Organizers: We may receive information about you from market research firms, survey companies, and event organizers, for example, in connection with trade shows or conferences we attend. This information may include your contact details, information about your professional affiliations and employment, and information relating to your use of our Services and Websites. (Identifiers, Professional Information, Internet/Network Information, Other Personal Data)

• Service Providers: Our service providers that perform services on our behalf, such as analytics, collect personal data and often share some or all this information with us. For example, we receive personal data you may submit in response to requests for feedback. (All categories otherwise listed in this notice)

• Law Enforcement Authorities and Security Providers: To ensure the safety and security of our venues, we may receive information from law enforcement, third-party security providers, or in connection with criminal enforcement proceedings. (Criminal Offence Information)

• Other Sources: We may also collect personal data about you from other sources, including publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions. (All categories otherwise listed in this notice)

Personal Data We Receive or Generate Automatically

We may also collect the following personal data automatically when you interact with the Services:

Category	Details
Information About Your Device and Network (Internet/Network information)	This may include the device type, manufacturer, and model, operating system, IP address, browser type, Internet service provider, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier or advertising ID). We employ third-party technologies designed to recognize when two or more devices are likely being used by the same individual and may leverage these technologies (where permitted) to link information collected from different devices.
Information About the Way You Use the Store and Interact with Us (Internet/Network Information)	This may include the site from which you came, the site to which you are going when you leave the Store, how frequently you access the Store, whether you open emails or click the links contained in emails, whether you access the Store from multiple devices, and other browsing behaviour and actions you take on the Store site (such as the pages you visit, the content you view, the communications you have through the Store site, and the content, links and ads you interact with). We employ third-party technologies designed to allow us to collect detailed information about browsing behaviour and actions that you take on the Store site, which may record your mouse movements, scrolling, clicks, and keystroke activity on the Store site and other browsing, search or purchasing behaviour. These third-party technologies may also record information you enter when you interact with the Store or engage in communication features, we provide.
Information About Your Location (Geolocation data)	This may include approximate geographic location that we or our third-party providers (such as the Organization) and their partners may derive from your IP address.
Audio, Electronic, Thermal, or Visual Information	We may also collect audio, electronic, thermal, or visual information from you automatically, such as information collected from CCTV cameras or similar devices and when we film or photograph you in a public location at a venue, or from telephone recordings with our customer service representatives, including AI-powered agents.
Automated Interaction Data	We may collect metadata and content from your interactions with our Services, AI-powered chatbots and automated phone outreach systems. This may include call recordings, transcripts, chat logs, amount of time spent engaging with the Services, the features interacted with, and information about the frequency and nature of your communications.

We may use the above information to operate the Services, to enhance and personalize your user experience, to monitor and improve the Services, to offer communications features, and to enhance the effectiveness of our Services, offers, communications, and customer service.

We may also use this information to (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Services; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our Services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and other patterns on the Services; (f) diagnose or fix technology problems; (g) engage in conversion tracking and other digital marketing-related purposes; and (h) otherwise to plan for and enhance our products and Services.

We typically collect this information through the use of a variety of our own and our third-party partners’ and promoters’ automatic data collection technologies (such as Shopify, TikTok, Google, Snapchat, LinkedIn, Klaviyo, and Meta, among others), including (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies.

For additional details about the cookies, pixels and other technologies we may use on the Services and to adjust your preferences about those cookies, please click the “Cookie Preferences” link in the footer of the Services where applicable.

Information we collect automatically about you may be combined with other personal data we collect directly from you or receive from other sources, where permitted by applicable law. We may share a common account identifier (such as a hashed email address or user ID) with third-party advertising partners to help link the personal data we, and our third-party partners, collect about the same person and target advertising to that individual on a third-party website or platform.

We may anonymize and aggregate any of the personal data we collect (so that it does not directly or indirectly identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the service and developing new services and features. We may also share such anonymized and aggregated information with others.

We may also generate or collect information about you ourselves without your input. We may generate inferences or predictions about you and your interests and preferences based on the other personal data we collect and the interactions we have with you.

How We Use Your Personal Data

Personal Data and How We Use It	Our Lawful Basis (European Privacy Disclosures Only)
Fulfilling a contract with you We may use your personal data as required to deliver the services requested and otherwise fulfil our obligations under our agreement with you. This means that we collect and use your personal data to:  communicate with you in connection with the provision of our Services to you; provide customer service and arrange the provision of products or services; manage our contractual relationship with you. To do this we use your Identifiers, Customer Records, Transaction Information, Payment Information, Internet/Network Information, Sensory Information, Professional Information, Medical and Special Assistance Information. Relevant third parties we may share this data with include service providers and other controllers that provide us services (e.g. certain payment providers).	The processing is necessary for the performance of a contract (namely our Terms of Service). Where required under applicable law, we process special category data contained in the Medical and Special Assistance Information where you give us your consent to do so.
Managing our business, Services, engaging with and understanding our audience and users We may collect, analyze and use your data to: personalize the products displayed to you on our Services, such as listing products that are similar to your past purchases or that you have told us would be of interest to you in a more prominent position (see separately our personalization as a result of wider data analysis set out in the row below); present the relevant Service in the language and currency of the country you are in; provide customer support, respond to your queries and comments and to help us identify errors or problems with the Service or products you have purchased, as well as commonly occurring faults our products so that we can fix and improve them; manage entry to our venues; develop, operate, and improve the features and functionality of our Services, including by training or fine-tuning our artificial intelligence and machine learning models; create aggregated or deidentified information that cannot reasonably be used to identify you, which information we may use for purposes outside the scope of this Privacy Notice; monitor use of the Services, and use your information to help us oversee, improve and protect our products, content, services and websites, both online and offline; and carry out market research, including carrying out surveys and asking for your feedback. To do this, we use your Identifiers, Customer Records, Transaction Information, Internet/Network Information, Geolocation Data, Biometric Information, Sensory Information, Professional Information, Inferences, Medical and Special Assistance Information, Complaints, and Other Personal Data. Relevant third parties we may share this data with include service providers (such as IT service providers).	The processing is necessary for our legitimate interests, namely: tailoring the Services to the user's account; providing customer support, administering the Services; addressing user queries and comments; to help us improve the Services; presenting the Services in the appropriate language and currency; overseeing use of the Services to monitor, improve and protect our products, content, service, websites; carrying out market research and seeking user feedback; creating products and services based on analysing customer interactions. We may also rely on our legal obligation to ensure that we use your location to offer you any necessary consents or specific terms as needed to comply with applicable law. Where required under applicable law, we will only use Internet/Network Information and Geolocation Data, as well as any Inferences derived from such data, where you give us your consent to do so. Where required under applicable law, we will only use Biometric Information and any special category data contained in Medical and Special Assistance Information or Complaints, where you give us your consent to do so.
Direct marketing, personalisation and personalised services We may collect, analyze, and use your data to: tailor the advertising we display to you and the electronic marketing messages we send to you in accordance with your preferences. ensure we communicate with you in accordance with your preferences. ensure that we only send you marketing communications you have consented to, where such consent is required inform our product development, improvement and marketing campaigns. provide personalised advertising and services, including where deployed through chatbots on the service that provides responses based on submissions made to the service. offer financial products to preferred customers (such as gift cards). provide contests, promotions, surveys, sweepstakes, or similar offerings in which you choose to participate. To do this, we use your Identifiers, Customer Records, Transaction Information, Internet/Network Information, Geolocation Data, Professional information, Inferences, and Other Personal Data. Relevant third parties we share this data with include service providers (such as IT service providers), marketing providers, ad networks and advertising partners.	The processing is necessary for our legitimate interests, namely: informing our direct marketing; ensuring we comply with communications preferences; ensuring we can user information you have provided to provide tailored services; and informing product development, improvement and marketing. However, where required by applicable law, we will instead rely upon your consent.
Social media information We may collect, analyze and use your data to: respond to your comments or posts that are addressed to us or reference us. inform our social media marketing strategy, including choosing and creating the content that we post to our social media pages. To do this, we use your Identifiers, Internet/Network information, Inferences, Complaints and Other Personal Data.	The processing is necessary for our legitimate interests, namely: promoting the Services; and informing our social media marketing strategy. With respect to any special category data contained in Complaints, the additional condition we rely on for processing this personal data is that it is manifestly made public by you.
Cookie-related analysis, personalisation and marketing We may collect, analyze and use your data to: analyze the performance of the Services to identify errors and ways in which we can improve the Services. serve you targeted advertising on other websites and platforms that you visit, and to identify how effective those advertisements are. To do this, we use Identifiers, Transaction Information, Internet/Network information, Geolocation Data, and Inferences. Relevant third parties we share this with include ad networks and advertising partners and service providers (such as IT service providers).	Your consent, except where applicable law permits analysis to be carried out on the basis of our legitimate interests, namely analysing the performance of the Services and service improvement.
Protecting our business interests and legal rights We may collect and use all of the data types listed in this notice for the purpose of protecting Legends Global’s business interests and legal rights, including use in connection with legal claims, compliance, regulatory, auditing, investigative and disciplinary purposes, including prevention and detection of crime, and ethics and compliance reporting requirements. We may also use your information where necessary to protect the security of our premises, assets, systems, and intellectual property and enforce company policies, including protecting ourselves from fraud and verifying the individuals with which we interact as appropriate. To do this, we may use any of the categories of information listed above, and share these as necessary for such purposes, including with our advisors, service providers, regulators and law enforcement bodies.	The processing is necessary for our legitimate interests, namely ensuring our business and the Services are safe, secure and compliant with regulatory requirements (or, where relevant, a recognised legitimate interest listed in UK law). Where we process your special category data for these purposes, we will typically rely upon our need to establish, exercise or defend ourselves from legal claims or consent.
Protecting the safety of our venues, staff and visitors We may collect and use data as necessary to protect the safety and security of our venues, staff, and visitors, and to cooperate with law enforcement authorities in the detection and prevention of crime. This includes your Identifiers, Customer Records, Geolocation Data, Biometric Information, Sensory Information, Professional Information, Medical and Special Assistance Information, Complaints, Criminal Offence Data and Other Personal Data.	The processing is necessary for our legitimate interests, namely ensuring the security and safety of our venues, staff and visitors. To the extent that we process your Medical and Special Assistance Information for this purpose, we do this either on the basis of your consent (if you have consensually provided us with your information to allow use to provide you with assistance) or, in an emergency, to protect your vital interests. We may also process it for reasons in the substantial public interest as identified by national law, such as to the prevention, detection or investigation of crime. To the extent that our processing of Criminal Offence Information involves the processing of criminal offence data requiring authorisation under EEA, Member State, UK or Swiss law, we only process such data as permitted under national rules. In the UK, we in particular process this data primarily in connection with the prevention, detection and investigation of unlawful acts.
Compliance with law Where necessary, Legends Global will process any of the information categories listed in this notice to comply with specific legal obligations. For example, Legends Global may be legally required to: respond to requests by government or law enforcement authorities conducting an investigation; and keep certain records for health and safety purposes and in relation to purchases made; This information will be shared as required to comply with law, including with law enforcement or public authorities as required.	This processing will take place where Legends Global is under a legal obligation. Where this is based on a legal obligation outside of the EEA, a Member State of the EEA or (where applicable) the UK or Switzerland, this may be based on Legends Global’s legitimate interest in complying with these laws.

Our Disclosure of Personal Data

Legends Global may disclose or otherwise make available personal data in the following ways:

• To The Organization: We share personal data with the Organization in accordance with our contract with the Organization. The Organization may use your personal data for business and commercial purposes, such as to market events, sell tickets, and engage in other marketing activities.

• To Affiliates: We may share personal data with other entities in our corporate group. These are companies owned or controlled by Legends Global, companies that own or control us and any subsidiaries they own or control. We do so where required for group-wide reporting and management, to use shared infrastructure and operations, and to receive intragroup services such as support and hosting of data.

• To Partners and Vendors: If you interact with us or our Services in your capacity as a representative of one of our partners or vendors, we may disclose your personal data to the partner or vendor you represent. For example, we may provide information to the partner or vendor you represent about your communications with us or your usage of our Services in connection with your work for them.

• To Marketing Providers: We coordinate and share personal data, including personal data provided to us by our customers, with our marketing providers to advertise and communicate with you about the Services we make available.

• To Ad Networks and Advertising Partners: We work with third-party ad networks and advertising partners to deliver advertising and personalized content on the Services on other websites and services, and across other devices. These parties may collect information automatically from your browser or device when you visit the Services through cookies and related technologies. This information is used to provide and inform targeted advertising and advertising-related services such as reporting, attribution, analytics, and market research.

• To Service Providers: We engage other third parties to perform certain services on our behalf in connection with the uses of personal data described in the sections above. Depending on the applicable services, these service providers may process personal data on our behalf or access personal data while performing services on our behalf, including through direct integrations with our systems.

• To Other Controllers that Provide Us Services: We may share data with certain third parties you engage with through our Services to fulfil a request or transaction, or with whom we exchange data to facilitate ticket sales, event operations, or promotional activities. We may also share data with certain third parties who provide us with services such as payment processing, accountancy, and legal services.

• In Connection with a Business Transaction or Reorganization: We may participate in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal data to a third party during the negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal data may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.

• To Facilitate Legal Obligations: We may disclose personal data to third party law enforcement and government agencies:

  • in connection with the establishment, exercise, or defense of legal claims;

  • to comply with laws or to respond to lawful requests and legal process;

  • to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of use;

  • to detect, suppress, or prevent fraud;

  • to reduce credit risk and collect debts owed to us;

  • to protect the health and safety of us, our customers, or any person; or

as otherwise required by applicable law.

 

If you access the Services or otherwise interact with us from the European Economic Area, United Kingdom, or Switzerland, additional information about how we share your personal data with any recipients located outside the European Economic Area, United Kingdom or Switzerland is set out in the Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures set out below.

Video and Photography at Venues

When you attend an event at a Legends Global operated stadium or venue, we may capture your image, voice or likeness, including through the use of CCTV cameras or when we film or photograph you at a venue. You should therefore expect to be filmed or photographed by CCTV or by cameras when you are in a public location at an event (e.g., as an audience-member in the stadium if you are attending an event, such as a game). In addition to describing how we capture and use your image, voice or likeness in this Privacy Notice, we may also display signs at a venue indicating that you may be filmed or photographed. We may use your personal data collected at a venue:

• To produce, exhibit, advertise or otherwise use your image, voice, or likeness in any and all media now or existing in future as part of our commercial, advertising and marketing activities; and

• In the case of images or footage captured on CCTV cameras, to ensure the safety of the venues hosting events and individuals at the venue.

   

  When we do so at venues located in the European Economic Area, United Kingdom, Switzerland or Brazil, the lawful basis we rely on for processing personal data as described above is express consent or that the processing is necessary for our legitimate interests, namely promoting Legends Global and the venues we operate, and to ensure the safety of our venues.

   

  We may disclose your personal data captured at venue with any of the entities set out in this Privacy Notice. Additionally, when you appear in a photograph or film footage at a venue, we may disclose that photograph or film footage to our third-party partners. These partners include our sponsors, licensees, advertisers, and/or broadcasters. We will disclose the photographs or film footage containing your image, voice and/or likeness when it is in our legitimate business interests to do so. However, each of the third-party partners may use your personal data for their independent commercial purposes without reference to us.

   

  Please also note that broadcasters and other third parties that are unconnected to venue may be independently filming or photographing you when you attend events at a venue. Although we only give permission to a small group of entities (such as certain broadcasters) to film or photograph events, these entities are separate data controllers in respect of your personal data, and we are not responsible for how those parties use your personal data and for what purposes.

  Your Privacy Choices

  Where applicable, you may exercise certain privacy rights by clicking the “Your Privacy Choices” link at the footer of the Store site or by clicking here.

  In addition, the following privacy choices are made available to all individuals with whom Legends Global interacts. You may also have additional choices or rights regarding your personal data depending on your location or residency. Please refer to Region-Specific Disclosures below for information about additional privacy choices that may be available to you.

  Email Communication Preferences

  You can stop receiving promotional email communications from us by clicking on the “unsubscribe” link provided in any of our email communications. Please note that you cannot opt-out of service-related email communications (such as account verification, transaction confirmation, or service update emails).

  Direct Mailing Preferences

  You can stop receiving promotional direct mail communications from us by contacting us at support@fifas.us. Please note this opt-out does not affect mailings that are controlled by third parties that may feature or mention our Services.

  Automatic Data Collection Preferences

  We may provide you the ability to adjust your preferences regarding our use of automatic data collection technologies on the Store. Where available, please visit the “Cookie Preferences” manager linked in the footer of the Store site to adjust your preferences regarding automatic data collection technologies on the Store for the specific device and browser you are using. You will need to change your preferences on each device and browser you use to interact with the Store. Your preferences on the Store do not apply to automatic data collection technologies that the Organization may use on their own websites.

  If you are in the European Economic Area, United Kingdom, Switzerland or Brazil, unless these technologies are strictly necessary to provide the Services or certain functionalities of the Store or do not otherwise require consent under applicable law, we will only use these technologies to the extent you provide consent for us to do so. You can withdraw your consent at any time by adjusting your preferences through the “Cookie Preferences” manager.

  You may also be able to use third-party tools to restrict the use of automatic data collection technologies. For example, most browser settings allow you to limit automatic data collection technologies, and most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies. Many device settings can also be configured to limit automatic data collection technologies for device applications.

  Please note that blocking automatic data collection technologies through third-party tools may negatively impact your experience using the Services, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies, or you may need to update your preferences on multiple devices or browsers. We do not control these third-party tools and features and are not responsible if they do not function as intended. Targeted Advertising Preferences

  The data Legends Global and our partners and their third-party partners may use for purposes of facilitating targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research, are primarily collected through the use of a variety of automatic data collection technologies, including cookies, web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies.

  You may also be able to further exercise control over the advertisements that you see by leveraging one or more targeted advertising opt-out programs. For example:

  • Device-Specific Opt-Out Programs: Certain devices provide individuals the option to turn off targeted advertising for the entire device (such as Apple devices through their App Tracking Transparency framework or Android devices through their opt out of ads personalization feature). Please refer to your device manufacturer’s user guides for additional information about implementing any available device-specific targeted advertising opt-outs.

  • Digital Advertising Alliance: The Digital Advertising Alliance allows individuals to opt out of receiving online interest-based targeted advertisements from companies that participate in their program. Please follow the instructions at https://optout.aboutads.info/?c=2&lang=EN for browser-based advertising and https://www.youradchoices.com/appchoices for app-based advertising to opt out of targeted advertising carried out by third parties that participate in the Digital Advertising Alliance’s self-regulatory program.

  • European Interactive Digital Advertising Alliance: The European Interactive Digital Advertising Alliance similarly allows individuals to opt out of receiving online interest-based targeted advertisements from companies that participate in their program. Please follow the instructions at https://www.youronlinechoices.eu to opt out of browser-based targeted advertising carried out by third parties that participate in the European Interactive Digital Advertising Alliance’s program.

  • Platform-Specific Opt-Out Programs: Certain third-party platforms provide individuals the option to turn off targeted advertising for the entire platform (such as certain social media platforms). For example, MediaMath uses its own opt-out system on its site: https://www.mediamath.com/ad-choices-opt-out/. Please refer to your platform provider’s user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.

  When you opt out of receiving interest-based advertisements through one of these programs, it does not mean that you will no longer see advertisements from us or on our Services, or the Organization or Organization-related services. Instead, it means that the online ads you do see from relevant program participants should not be based on your interests.

  Neither we nor the Organization is responsible for the effectiveness of, or compliance with, any third parties’ opt-out options or the accuracy of statements regarding their programs. In addition, program participants may still use automatic data collection technologies to collect information about their use of the Services, including for analytics, fraud prevention, and any other purpose permitted under the applicable advertising industry program.

  Precise Geolocation Data for Targeted Advertising

  In accordance with local laws, we may disclose your geolocation information, including precise geolocation information, to service providers that perform certain functions or services on our behalf and to third parties so that they may provide you with geographically relevant advertising.

  If you wish to stop the further collection of your geolocation information for target advertising, please opt out using your device settings, as noted below:

  Opt-out or Withdraw Consent for Precise Geolocation Data for Targeted Advertising

  To opt out of the tracking of your device geolocation or precise geolocation data, please visit your device settings. Turning off access to geolocation and precise geolocation data may disable or interfere with certain functionality or services.

  For Android users, please see the following link for instructions on how to opt out of or withdraw consent to geolocation data collection from your settings:

  https://support.google.com/accounts/answer/6179507?hl=en.

  For iOS users, please see the following link for instructions on how to opt-out of or withdraw consent to geolocation data collection from your settings https://support.apple.com/en-us/HT207092.

  Modifying or Deleting Your Personal Data

  If you have an online account with us, you may have the ability to modify or delete certain information in your account (e.g., your contact information) through the “settings” option provided on the Store website. If you have any questions about reviewing, modifying, or deleting your personal data, please click here. We may not be able to modify or delete your personal data in all circumstances.

  Partner-Specific Preferences

  Certain of Legends Global’s and the Organization’s third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide:

  • Device-Specific / Platform-Specific Preferences: The device or platform you use to interact with the Services (such as your mobile device or social media provider), may provide you additional choices with regard to the data you choose to share with us and the Organization. For example, many mobile devices allow you to change your device permissions to prevent products and services from accessing certain types of information from your device, and many social media platforms allow you to change your platform permissions to prevent products and services from accessing certain types of information connected with your profile. Please refer to your device or platform provider’s user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.

  • Google Analytics: Google Analytics allows us and the Organization to better understand how visitors interact with the Services.  For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google’s website here: www.google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Add-On here: https://tools.google.com/dlpage/gaoptout/.  We and the Organization may also utilize certain forms of display advertising and other advanced features through Google Analytics. These features enable the Services to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Services.  You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://myadcenter.google.com/?ref=help-center.

• Children’ s Personal Data

The Store and our Services are not directed to children under the age of 18, and we do not intend to or knowingly collect personal data from children under the age of 18. If an individual is under the age of 18, they should not use our Services or otherwise provide us with any personal data. If a child under the age of 18 has provided personal data to us in connection with these sites or services, we encourage the child’s parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child under the age of 18 on such sites or services, we will promptly delete that personal data.

Retention of Personal Data

Legends Global collects, stores, and uses your personal data as long as you or the relevant partner or vendor remain a customer and in compliance with our legal obligations to retain certain types of data, such as for tax purposes and legitimate business interests. We review our retention periods for personal data on a regular basis. We will retain your information for as long as reasonably necessary for the purposes set out above, considering criteria such as applicable rules on statute of limitations, any legal requirements to retain your personal data in light of compliance obligations , any relevant litigation or regulatory investigations and to enable Legends Global to defend or bring potential legal claims, the sensitivity of the relevant information and the duration of your use of the Services.

To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data, and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Therefore, we retain personal data for as long as you continue to use the Services for the purposes explained in the section above. When you discontinue the use of the Services, we will retain your personal data for as long as necessary to comply with our legal obligations, to resolve disputes, and defend claims, as well as for any additional internal business purposes. We will retain any other personal data supplied during the duration of your or the relevant partner’s or vendor’s contract with us in relation to the Services until the statutory limitation periods have expired, when this is necessary for the establishment, exercise or defense of legal claims.

Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or anonymize the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.

Automated Decision-Making and Profiling

We do not conduct automated processing of personal data for the purposes of evaluating, analyzing, or predicting an individual’s personal aspects in furtherance of decisions that produce legal or similarly significant effects. As a result, we do not provide a right to exercise control over such forms of automated decision-making and profiling. We do, however carry out some automated decision making that falls short of producing such effects, particularly in connection with the use of any chatbot software and carrying out analysis for the creation of new products and services.

Third-Party Websites and Services

The Services, newsletters, email updates, and other communications from us may, from time to time, include links to third-party websites, plug-ins, applications and other services. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to any personal data practices of third parties. To learn about the personal data practices of third parties, please visit their respective Privacy Notices.

International Transfers

As a global company operating worldwide, we may need to transfer your personal data to various countries. This may occur, for example, when our affiliates and subsidiaries or its service providers are located in other countries that may have different data protection laws than your country of residence.

Where necessary for the purposes described in this Privacy Notice, Legends Global may transfer your personal data outside of your country of residence, including to jurisdictions that may not provide the same level of protection of that existing in your country. You expressly acknowledge and agree to such international transfers. In such cases, Legends Global will implement the necessary safeguards to ensure that your personal data is transferred in compliance with applicable international data transfer requirements.

Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer below for disclosures that may be applicable to you:

• Argentina: If you are located in Argentina, please click here for additional Argentina-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Argentina under applicable law.

• Australia: If you are located in Australia, please click here for additional Australia-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Australia under applicable law.

• Brazil: If you are located in Brazil, please click here for additional Brazil-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Brazil under applicable law.

• California and other U.S. state privacy laws: If you are a resident of the state of California or certain other states in the United States, please click here for additional United States-specific privacy disclosures, including a description of the personal data rights made available to residents of certain states under applicable law.

• Canada: If you are located in Canada, please click here for additional Canada-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Canadian jurisdictions under applicable law.

• European Economic Area, United Kingdom or Switzerland: If you are located in the European Economic Area (Member States of the European Union together with Iceland, Norway, and Liechtenstein), the United Kingdom, or Switzerland, please click here for additional European-specific privacy disclosures, including a description of the personal data rights made available to individuals located in those jurisdictions under applicable law.

• Hong Kong: If you are located in Hong Kong, please click here for additional Hong Kong-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Hong Kong under applicable law.

• Malaysia: If you are located in Malaysia, please click here for additional Malaysia-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Malaysia under applicable law.

• New Zealand: If you are located in New Zealand, please click here for additional New Zealand-specific privacy disclosures, including a description of the personal data rights made available to individuals located in New Zealand under applicable law.

• Panama: If you are located in Panama, please click here for additional Panama-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Panama under applicable law.

• Puerto Rico: if you are located in Puerto Rico, please click here for additional Puerto Rico-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Puerto Rico under applicable law.

• Saudi Arabia: If you are located in the Kingdom of Saudi Arabia, please click here for additional KSA-specific privacy disclosures, including a description of the personal data rights made available to individuals located in KSA under applicable law.

• Singapore: If you are located in Singapore, please click here for additional Singapore-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Singapore under applicable law.

• Thailand: If you are located in Thailand, please click here for additional Thailand-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Thailand under applicable law.

• United Arab Emirates: If you are located in the United Arab Emirates, please click here for additional United Arab Emirates-specific privacy disclosures, including a description of the personal data rights made available to individuals located in United Arab Emirates under applicable law.

• Uruguay: If you are located in Uruguay, please click here for additional Uruguay-specific privacy disclosures, including a description of the personal data rights made available to individuals located in Uruguay under applicable law.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on the Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to support@fifas.us. or contact us at:

Legends Global

61 Broadway

Suite 2400

New York, NY 10006