Website Privacy Policy

Effective starting: June 1st, 2025 (view archived versions)

What this Privacy Policy covers

League Inc., on behalf of itself and its affiliates, including League Corp. (“us,” “we,” “our,” or “League”) is committed to protecting your data. This Privacy Policy applies solely to League’s public website, available at www.league.com (the “Website”), and explains what personal information (“Personal Information” or “Information”) we collect through your interaction with the Website, and how we store, use, and share that information.

Applicability of this Privacy Policy

This Policy applies only to information collected through your use of the League Website. It does not apply to:

Each of those services is governed by its own privacy policy, and we recommend reviewing those policies to understand their respective data practices. We are not responsible for the privacy practices, content, or security of third-party websites or services.

By using or accessing the Website, you acknowledge and agree to the terms outlined herein. If you do not agree, you should not use the Website.

Additional Notices

Nothing in this Policy limits your rights under applicable privacy laws, including your right, depending on your country of residence, to file a complaint with a relevant data protection authority.

If you are applying for a role at League, please refer to our Applicant Privacy Notice for details on how we handle your information during the recruitment process.

What Information does League collect about me?

Information you provide to us

We collect personal information about you when you provide it to us or when you interact with the League Website. “Personal Information” refers to any information about you as an identifiable individual, including your name, email address, phone number, and any other contact details you choose to provide. This also includes the content of your inquiries or messages submitted through forms, email, or our AI chatbot (e.g., Nicole, our AI Assistant). 

When you engage with us via the Website, over the phone, or through surveys and questionnaires, we process the contact information you use, the content of those interactions, and any feedback you provide about our services. In accordance with applicable law, we will inform you in advance if a phone call may be recorded.

Information we collect automatically

Device and connection information

We collect Information about your computer, phone, tablet, or other devices you use to access the Website. This Information includes your connection type and settings when you install, access, update, or use our Website. We also collect Information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers, and crash data. 

Cookies and other tracking technologies

We collect Information about you when you use or take certain actions on our Website or browse our website. To do so, we use cookies and other tracking technologies such as web beacons, device identifiers, and pixels. For more information, please see our Cookies and Tracking Notice, which includes information on how to control or opt out of these cookies and tracking technologies.

How does League use my Information

We use the information we collect to provide, maintain, and improve the League Website and to support your interactions with us. Specifically, we use your information to:

Support and communicate with you

We process the content of your messages submitted through forms, email, surveys, or our AI chatbot (e.g., Nicole) to send service-related communications and respond to feedback. Where required by law, we will notify you in advance if a phone call may be recorded.

Maintain security and improve performance

We use device and connection information—including IP address, browser type, crash data, and other technical details—to troubleshoot issues, enhance security controls, detect and prevent malicious activity, and understand how users interact with the Website.

Enhance your Website experience

We use cookies and other tracking technologies to recognize returning visitors, understand usage patterns, and tailor the Website to your device, preferences, and geographic region. For more information, please see our Cookies and Tracking Notice, which includes information on how to control or opt out of these cookies and tracking technologies.

How League shares Information we collect

We may share your Information with third parties who help us operate and maintain the Website. These may include website hosting providers, analytics services, chatbot Website providers, and other third party tools. These third parties are only provided with the minimum Information necessary to perform services on our behalf and are contractually obligated to protect your Information in accordance with this Policy. We may also disclose your Information if required by law, legal process, or regulatory authority, or if necessary to enforce our rights or protect the safety of our users or others.

Is my Personal Information and other data secure?

At League, we take security and privacy very seriously. We are committed to protecting your data, and our highest priority is keeping your sensitive information safe. We follow strict security and compliance standards, not only to meet regulatory requirements but because we consider it a core responsibility.

We implement administrative, technical, and physical safeguards to protect your Information. While we make every effort to secure all communications and data, no method of transmission over the Internet or method of electronic storage is entirely secure. We cannot guarantee absolute security, and you should use caution when transmitting personal information online.

Who at League has access to my Information?

Personal Information collected through our website is stored and processed by trusted third-party service providers on our behalf. Certain League employees and contractors may have access to this Information in order to manage the website, respond to inquiries, or provide you with requested information or support. These individuals are authorized to access your Personal Information only when necessary and are obligated to maintain its confidentiality in accordance with applicable privacy and security standards.

In the event that League undergoes a corporate reorganization or is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. In the event of an acquisition, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Can I correct or update my Information?

Yes. If your Personal Information changes over time or you realize your Information is outdated or incorrect, you have a right to be able to update or correct it. You may update or correct the Information by changing it right on the Website. Alternatively, you can also contact us at help@league.com to request that we update or correct the Information for you. We will respond to your request diligently and within any timeframes prescribed by law.

How Long does League keep my personal information? 

We will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To decide on the appropriate retention period for Personal Information, we take each of the following factors into consideration:

  • The amount, nature, and sensitivity of the Personal Information
  • The potential risk of harm from unauthorized use or disclosure of your Personal Information
  • The purposes for which we process your Personal Information, and whether we can achieve those purposes through other means
  • Applicable legal requirements including regulatory retention periods.

Can I find out what Information League has collected about me?

Yes. Except in specific circumstances identified by local privacy laws, all users—no matter where they live—have a legal right to access the Information we have collected about them and to be provided with an accounting of its use and disclosure. You can request a copy of all the Information and data we hold about you. We’ll give you a copy of the data in a standard format through a secure channel. To make this request, reach out to us at help@league.com. We will respond to your request diligently and within any timeframes prescribed by law.

For California residents only

If you are a resident of California, you have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This section explains those rights and how to exercise them.

Notice at Collection

We collect the following categories of Personal Information:

  • Identifiers such as your name, email address, phone number, and IP address;
  • Internet or other electronic network activity information, such as device identifiers, browsing history, and interaction with the Website;
  • Information you voluntarily provide through forms, surveys, and chat communications.

We collect this information to operate the Website, communicate with you, enhance Website security, improve functionality, and tailor your experience.

For more details, please see the “What Information Does League Collect About Me?” and “How Does League Use My Information?” sections of this Privacy Policy.

California Privacy Rights & Choices:

1. Right to Know

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past twelve (12) months. Once we receive and confirm your verifiable request, we will disclose to you:

  • The categories of Personal Information we collected about you;
  • The categories of sources from which we collected the Personal Information;
  • Our business or commercial purpose for collecting, sharing, or selling that Personal Information;
  • The categories of third parties with whom we shared that Personal Information; and
  • The specific pieces of Personal Information we collected about you.

We do not “sell” of “share” (as these terms are defined under California Civil Code Section 1798.140) Personal Information collected through the League Website.

2. Right to Request Deletion

You have the right to request that we delete Personal Information that we have collected from you, subject to certain exceptions. Once we receive and confirm your verifiable request, we will delete (and direct our service providers to delete) your Personal Information unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

  • Complete the transaction for which we collected the Personal Information, provide a service you requested, or otherwise perform a contract with you;
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible;
  • Debug to identify and repair errors that impair existing intended functionality;
  • Exercise free speech or ensure the right of another consumer to exercise their free speech rights;
  • Comply with the California Electronic Communications Privacy Act;
  • Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
  • Comply with a legal obligation; or
  • Otherwise use your Personal Information internally in a lawful manner that is compatible with the context in which you provided it.

If your request is denied, we will inform you of the reason and the applicable exception.

3. Right to Correct

You have the right to request that we correct any inaccurate Personal Information we maintain about you. Upon receiving a verifiable request, we will use commercially reasonable efforts to correct the identified inaccuracies.

4. Right to Limit Use of Sensitive Personal Information

League does not collect sensitive Personal Information through the Website for purposes that would trigger the right to limit use under the CCPA/CPRA.

5. Right to Opt-Out of Sale or Sharing

League does not sell or share Personal Information collected through the Website for cross-context behavioral advertising purposes, and therefore does not offer an opt-out for such activities.

6. Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

  • Deny you access to our services;
  • Charge you different prices or rates for services, including through discounts or other benefits;
  • Provide you a different level or quality of services; or
  • Suggest that you may receive a different price or level of service.

How to Exercise Your California Privacy Rights

To exercise your rights under the CCPA/CPRA, you may submit a verifiable request by:

  • Emailing us at privacy@league.com; or
  • Contacting us through the chat function on the Website.

You may designate an authorized agent to make a request on your behalf. We may require verification of both your identity and the agent’s authorization.

We will acknowledge receipt of your request within ten (10) business days and will respond substantively within forty-five (45) calendar days, or inform you if an extension is required.

We may only fulfill verified requests and may request additional information necessary to verify your identity.

International Data Transfers 

Where is my Information being transferred?

League is headquartered in Canada, has an office in the United States, and uses Third Party Providers in these and other countries. Your Personal Information may therefore be transferred to Canada, the United States, or other locations outside of your state, province, country, or other governmental jurisdiction where the local privacy laws may not be as protective as those in your jurisdiction. League takes appropriate steps to protect your privacy and implement reasonable security measures to protect your Personal Information in storage and transmission. We also enter into contracts with our Third Party Providers that require them to treat Personal Information in a way that’s consistent with this Policy and local privacy laws.

I am an EU resident – What do I need to know?

This is for residents of the European Union (“EU”) including the European Economic Area (“EEA”) countries of Iceland, Liechtenstein, Norway, and, where applicable, Switzerland. Our processing of Personal Information of users who are in the EU is governed by the General Data Protection Regulation (“GDPR”). The GDPR requires us to give you certain information about your data and rights:

Personal Information

References to “Personal Information” and “Information” in this Privacy Policy are equivalent to the term “personal data” governed by the GDPR.

Data Controller

League is the data controller of Personal Information provided to, or collected by or for, our Website. In other cases, we may instead act as a data processor for Personal Information that we process on behalf of your employer when providing the Website

Legal basis for processing

We only use or process your Information as permitted by law. We are required to inform you of the legal bases of our processing of your Personal Information, which are described in this Policy. If you have questions about the applicable legal bases for our processing of your Information, reach out to us at privacy@league.com.

Processing ActivityLegal Basis for Processing
Operating, maintaining, and securing the League Website, including debugging, security management, and performance optimization.This processing is necessary to the legitimate interests of League
Managing communications and user engagement, including marketing, surveys, and personalized content based on your preferences.This processing is necessary to the legitimate interests of League
This processing is based on your consent
Using cookies and analytics to understand Website usage, improve services, and optimize advertising activities.

Use for additional purposes

We may use or process your Personal Information for reasons not described in this Policy where permitted by law and so long as the reason for the additional processing is compatible with the purpose for which we collected it. If we need to use your Personal Information for an unrelated purpose, we will notify you and explain the legal basis.

Cross-border data transfers

Whenever we transfer your Personal Information to countries outside the EU that have not been deemed by the European Commission to provide an adequate level of protection, the transfer will be based on standard contracts approved by the European Commission for such purpose which impose data protection obligations on the parties to the transfer, in this case League and the recipient(s) of your Personal Information. For more details, you may refer to the European Commission Model contracts for the transfer of Personal Information to third countries. Please reach out to us if you want more information on the specific transfer mechanism we employ when transferring your Personal Information to a country outside of the EU.

Your rights to access, correct, restrict, or delete your Personal Information and object to processing

You have the right to request access to your Personal Information, to have your Information corrected, restricted, or deleted, and to object to our processing of your Personal Information. You also have the right to data portability, meaning you can request that we provide you (or a third party you designate) with a transferable copy of the Personal Information we have collected from you.

These rights are subject to certain limitations under the GDPR, including where a legal exception applies or where a request is manifestly unfounded or excessive. If you wish to exercise any of these rights, or if you have any concerns about our processing of your Personal Information, please contact us using any of the methods listed in the “Contact Us” section below.

Right to lodge a complaint with a supervisory authority

You have the right to file a complaint about our processing of your Personal Information with your national (or in some countries, regional) data protection authority. The EU Commission has a listing of each country’s designated data protection authority that you can consult here.

Data Privacy Framework Program

League Corp. operates League’s services within the United States and may process personal information in the United States. If you are accessing the Website from outside of the United States, please be aware that information collected through the Website may be transferred to, processed, stored, and used in the United States and other jurisdictions that may not have the same data protection laws as your country of residence.

League Corp. complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) and the UK Extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce. League Corp. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension. If there is any conflict between the terms of this Privacy Policy and the EU-U.S. DPF Principles, the Principles shall govern with respect to personal data transferred under the Framework.

League Corp. is required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

League Corp.’s commitments under the Data Privacy Framework are subject to the investigatory and enforcement powers of the United States Federal Trade Commission (FTC). To learn more about the Data Privacy Framework program and to view our certification, please visit https://www.dataprivacyframework.gov.

If you are a resident of the European Union (“EU”) or the United Kingdom (“UK”), we are committed to resolving complaints related to our handling of your personal information under the Data Privacy Framework. Individuals in the EU or UK with inquiries or complaints about our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension should first contact League at: privacy@league.com. 

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, League Corp. commits to cooperate and comply with the advice of the panel established by the EU Data Protection Authorities (DPAs) and the UK Information Commissioner’s Office (ICO) regarding unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension.

If League Corp. does not resolve your complaint, you may have the option to invoke binding arbitration through the Data Privacy Framework Panel. For more information about this process, please see Annex I of the EU-U.S. Data Privacy Framework Principles.

UK individuals have the right to limit the use and disclosure of their personal data. League Corp. enables UK individuals to exercise their data protection rights, including the right to access, correct, delete, or object to the processing of their personal information. If you wish to exercise any of these rights, or if you have any concerns about our processing of your personal information, please contact us using any of the methods listed in the “Contact Us” section below.

As noted in the section above entitled “How League Shares Information We Collect,” League Corp. uses a limited number of third-party service providers to support the operation of the Website. These third parties may access, process, or store personal information in the course of providing their services. League Corp. maintains contracts with these providers that restrict their access, use, and disclosure of personal data in compliance with our Data Privacy Framework obligations, including those related to onward transfers. League Corp. remains responsible for the acts of these third parties if they process personal data in a manner inconsistent with the Framework, and League Corp. is responsible for the event giving rise to the damage.

Privacy of minors

The League Website is not directed to or intended to be used by children (under the age of 13 in the US and UK, or 16 in the EEA). We do not knowingly collect Personal Information from children under these age thresholds without appropriate parental consent. If we become aware that a child has provided us with Personal Information without such consent, we will delete the information from our records. If you believe that we may have collected Personal Information from a child, please contact us at help@league.com.

Dispute resolution

If you believe that League has not adhered to any aspect of this Privacy Policy, please contact League by email at privacy@league.com. We’ll do our best to make things right. If you feel that your complaint hasn’t been fully addressed, let us know and we’ll investigate further.

If you’d rather file a complaint anonymously, you can do so through our independently operated, whistleblower hotline. You always have the option to remain completely anonymous. Complaints to the whistleblower hotline can be made 24/7/365 through any of the following channels:

For EU Residents: privacy complaints can be lodged with the relevant supervisory authority under the GDPR. Please refer to the “I am an EU resident – What do I need to know?” section above for more details.

Contact us

If you have questions or concerns about this Privacy Policy, please contact us through any of the following means:

  • By mail at:

Attention: Privacy Officer
League, Inc.
225 King St W, Suite 800
Toronto, Ontario M5V 3M2

Changes to this Privacy Policy

If we make any changes to this Privacy Policy, the updated policy will be posted online together with all past versions and will include the date on which it becomes effective. You may also be notified by email with a summary description of any material changes that are being made to the Policy. Your continued use of the Website after the effective date of an updated Privacy Policy constitutes your acceptance of its terms. Any updated Privacy Policy supersedes all past versions. Please check back here periodically for updates.

You can find all past versions of our Privacy Policy here.