Data Subject Access Request Form
Replay Scout Inc.
Effective date: 3 September 2026
Last reviewed: 3 September 2026
Use this form to ask us for a copy of the personal data we hold about you, to have it corrected or deleted, or to exercise any of the other rights described in Section 5 of our Personal Data Protection Policy.
1. Before you submit
Several things are faster to do yourself. If you have an account, sign in and open Settings, where you can:
- Edit your name, contact details, address, availability, and travel preferences.
- Review, change, or withdraw your optional demographic answers.
- Change your notification preferences, or stop email entirely.
- Download a copy of your account data — this covers your account and settings, your addresses, your availability and calendar blocks, your certifications, your sign-in history, your organization memberships, and your assignments.
- Deactivate your account, or close it permanently.
A request under this form is the right route for anything the download does not cover, for data held about you by an organization you no longer belong to, or if you no longer have access to your account.
2. How to submit a request
Send your request to our Data Protection Officer.
Email: privacy@replayscout.com
Post: Data Protection Officer, Replay Scout Inc., Suite 5100, Bay Adelaide – West Tower, 333 Bay Street, Toronto, Ontario, M5H 2R2, Canada
Please include:
- Your full name.
- The email address on your account, and any other address you have used with us.
- The organizations you belong to, or belonged to, on the platform.
- Which right you are exercising — see Section 3.
- What you are asking for, as specifically as you can. A narrow request ("my assignment history for the 2026 season") is answered faster and more usefully than a broad one.
- How you would like to receive our response.
3. Types of request
Access. Confirmation of whether we process your personal data, a copy of it, and an explanation of how we use it.
Correction. Correction of personal data that is inaccurate, or completion of data that is incomplete.
Deletion. Erasure of your personal data. Section 7 explains what we may have to keep.
Portability. A copy of the personal data you gave us, in a structured, commonly used, machine-readable format, and transmission of it to another organization where that is technically feasible.
Restriction or objection. Restriction of how we use your personal data in certain circumstances, or an objection to processing we carry out on the basis of our legitimate interests.
Withdrawal of consent. Withdrawal of consent you previously gave — for example, your optional demographic answers. Withdrawal does not affect anything we did lawfully before you withdrew.
4. Verifying your identity
We will ask you to verify your identity before we act. This protects you: an access request is a request to disclose your personal data, and we will not disclose it to someone who is not you.
Where we can, we verify you by confirming control of the email address on your account. If we cannot, we may ask for further evidence, and we will ask only for what is proportionate to the request. The response time in Section 5 starts once we have verified you.
5. How long we take
We respond within one month of receiving a verified request, or sooner where the applicable law requires it.
If your request is complex, or you have made several requests, we may need up to two further months. We will tell you within the first month if that is the case, and why.
6. Cost
There is no charge. If a request is manifestly unfounded or excessive, particularly because it repeats a request we have already answered, we may charge a reasonable fee that reflects the cost of responding, or decline it. We will explain our reasoning and your right to complain if we do.
7. What we may not be able to do
We will tell you plainly if we cannot fully meet a request, and why.
Some records survive a deletion request because we are required to keep them, or because someone else's rights depend on them. Financial and tax records, the record of games you officiated, and audit records of changes made in the platform are the usual examples.
We may also decline to disclose information that would reveal someone else's personal data, unless that person consents or it is reasonable to disclose it without their consent.
8. Making a request for someone else
If you are making a request on behalf of another person, please include written authorization signed by them, or evidence of your legal authority to act for them. We will verify their identity as well as yours.
9. A template you can use
Copy the block below into an email to privacy@replayscout.com and fill it in.
Subject: Data subject request
Full name:
Email address on my account:
Any other email addresses I have used:
Organizations I belong to or belonged to:
The right I am exercising (access / correction / deletion / portability / restriction / objection / withdrawal of consent):
What I am asking for:
How I would like to receive your response:
I am making this request on my own behalf / on behalf of (name), and I attach their authorization.
10. If you are not satisfied
Tell us first — write to the Data Protection Officer at the address in Section 2 and we will look at it again.
You also have the right to complain to the privacy regulator in your jurisdiction, including the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or, if you are in the European Economic Area, the supervisory authority in your member state.