tehbbf Privacy Policy

1. Introduction

This Privacy Policy explains how the application named tehbbf, together with the website https://tehbbf.ir, collects, accesses, processes, uses, stores, protects, retains, and shares information.

The term “application” in this policy includes the tehbbf website, registration systems, dashboards, administrative panels, online forms, competition services, educational services, identity services, and related digital facilities operated for the Tehran Bodybuilding & Fitness Board.

By registering, signing in, submitting information, or using the application, you acknowledge that you have reviewed this Privacy Policy. Where consent is legally required, the application will request consent before processing the relevant information.

2. Purpose of the tehbbf Application

tehbbf is the official digital application of the Tehran Bodybuilding & Fitness Board. It is designed to provide secure online services for athletes, coaches, referees, clubs, course participants, competition participants, officials, and authorized administrators.

The application may be used to:

• Create and manage official user accounts.
• Authenticate users securely through Google Sign-In.
• Register athletes and other participants.
• Manage competition registrations and categories.
• Manage educational courses, seminars, and workshops.
• Submit and review registration documents.
• Verify identities and user eligibility.
• Manage coaching, refereeing, club, and membership records.
• Issue or manage certificates, cards, rankings, and official records.
• Send registration updates and administrative notifications.
• Provide official news, schedules, results, and digital services.
• Prevent fraud, duplicate registrations, and unauthorized access.

3. Who Operates the Application

The application is operated on behalf of the Tehran Bodybuilding & Fitness Board, referred to in this Privacy Policy as “Tehran BBF,” “we,” “us,” or “our.”

Authorized administrators may process user information only to perform official registration, verification, competition, education, certification, support, security, and administrative activities.

4. Information We Collect

The type of information collected depends on the service requested by the user. Not every user is required to provide every category of information listed below.

We request users to provide only information that is relevant, accurate, and necessary for the service they are using. Users should not upload unrelated or unnecessary personal information.

5. Google Sign-In and Google User Data

The tehbbf application provides Sign in with Google as a secure method of authentication. When a user chooses this option, Google displays a consent or authentication interface identifying the application and the permissions involved.

Google account information used

For the standard authentication process, the application may receive basic Google account information authorized by the user, including:

• The user’s Google account email address.
• The user’s first and last name or display name.
• The user’s Google profile image, when available.
• A unique Google account identifier used to distinguish accounts.
• Authentication tokens needed to confirm a valid sign-in session.

Purpose of accessing Google user data

Google user data is used to:

• Authenticate the user securely.
• Create or locate the correct tehbbf account.
• Prevent unauthorized access and duplicate accounts.
• Maintain the user’s authenticated session.
• Display basic account information in the user profile.
• Communicate account-related or service-related notices.
• Investigate security incidents and protect application integrity.

Google services we do not access through basic sign-in

Signing in to tehbbf does not, by itself, authorize the application to read the contents of a user’s Gmail, Google Drive files, Google Photos, Google Calendar, Google Contacts, or other private Google services.

The application does not receive or store a user’s Google password. Authentication credentials are entered directly through Google’s authentication interface.

Google permission transparency

Any Google permission requested by the application is displayed to the user by Google before authorization. The application uses Google user data only for the purposes disclosed in this Privacy Policy and only in accordance with the permissions authorized by the user.

Google user data is not sold, rented, transferred for advertising, or used to create advertising profiles. It is not used for purposes unrelated to the operation, authentication, security, or official services of the tehbbf application.

6. How We Use Information

Personal information and authorized Google user data may be used for the following legitimate application purposes:

• Creating and administering user accounts.
• Authenticating users and managing login sessions.
• Confirming identity and registration eligibility.
• Processing competition, course, seminar, or workshop registrations.
• Managing participant categories and official records.
• Reviewing submitted documents and registration status.
• Issuing certificates, cards, rankings, approvals, or results.
• Responding to questions and support requests.
• Sending important administrative or security notices.
• Operating, maintaining, testing, and improving the application.
• Detecting fraud, abuse, technical errors, or unauthorized access.
• Complying with legal, regulatory, or official administrative duties.

We do not use personal information or Google user data for unrelated behavioral advertising. We do not sell personal information.

7. Information Sharing and Disclosure

Access to user information is restricted to authorized persons and service providers who need the information to perform an official or technical function.

Information may be disclosed in the following situations:

• Authorized Tehran BBF administrators: to review registrations, verify information, manage events, issue records, and provide support.
• Official event or educational personnel: when access is required to administer a competition, course, seminar, examination, or certification.
• Technology service providers: such as hosting, cloud, authentication, communication, security, and database infrastructure providers, where required to operate the application.
• Legal or official requirements: when disclosure is required by applicable law, a valid official request, a court order, or a regulatory obligation.
• Protection and security: when reasonably necessary to prevent fraud, investigate abuse, protect users, or secure the application.
• User authorization: when a user expressly requests or consents to a specific disclosure.

We do not sell, rent, or trade Google user data or personal registration information to data brokers, advertisers, or unrelated commercial organizations.

8. Data Storage and Processing

Information may be stored and processed through secure website hosting, cloud-based application infrastructure, databases, Google authentication services, Google Apps Script, and other authorized systems used to operate tehbbf.

Because cloud and technology providers may operate infrastructure in different geographic locations, information may be processed or backed up outside the user’s province or country, subject to applicable safeguards, service settings, and legal requirements.

Access to administrative records is limited according to user roles, operational needs, and authorization status. Users do not receive access to the personal records of other users unless an official function expressly requires such access.

9. Data Retention

Personal information is retained only for as long as reasonably necessary to:

• Maintain the user account and requested services.
• Complete registrations, competitions, courses, or certifications.
• Maintain official participation and administrative records.
• Resolve disputes and respond to support requests.
• Protect the application against fraud or abuse.
• Comply with applicable legal and regulatory obligations.

The retention period may differ depending on the type of record. Some official competition, education, certification, accounting, or legal records may need to be retained after an account is closed.

When information is no longer required, it may be deleted, anonymized, archived, or securely restricted, subject to technical and legal limitations.

10. Data Security

We use reasonable technical and organizational safeguards intended to protect information against unauthorized access, alteration, disclosure, misuse, destruction, or loss.

Security measures may include:

• Encrypted HTTPS connections.
• Google-based authentication and session validation.
• Role-based administrative access.
• Restricted access to application databases.
• Login and activity monitoring.
• Security updates and access reviews.
• Backups and recovery procedures where appropriate.
• Administrative controls for uploaded documents.

No internet transmission or electronic storage method is completely secure. Although we take reasonable measures to protect information, absolute security cannot be guaranteed.

Users are responsible for protecting access to their Google account, devices, email account, and active application sessions.

11. Cookies, Sessions, and Technical Logs

The website and application may use essential cookies, local browser storage, session identifiers, or similar technologies to maintain authentication, remember necessary settings, improve security, and ensure that application functions work correctly.

Technical logs may include IP address, browser and device information, login time, requested pages, error information, and security events. These records are used for application operation, troubleshooting, security, and fraud prevention.

Essential authentication and security technologies may be required for the application to function correctly.

12. User Rights and Choices

Subject to applicable legal and administrative requirements, users may request:

• Confirmation of whether their personal information is processed.
• Access to personal information associated with their account.
• Correction of incomplete or inaccurate information.
• Deletion of eligible personal information.
• Closure or deactivation of their application account.
• Withdrawal of consent where processing is based on consent.
• Information about the purpose for which their data is used.

We may request reasonable identity verification before completing a privacy request to prevent unauthorized access, alteration, or deletion of another person’s information.

Certain records may not be immediately deleted if they must be retained for legal, financial, competition, certification, security, dispute-resolution, or official administrative purposes.

13. Account and Data Deletion Requests

Users may request deletion of their tehbbf account and eligible personal information by sending an email from the email address associated with their account.

The request should include:

• The full name associated with the account.
• The email address used for Google Sign-In.
• A clear request to delete or correct specified information.
• Any relevant registration or reference number, where applicable.

After verifying the request, we will review the account and delete, anonymize, or restrict eligible information within a reasonable period. Records that must be retained for legal or official purposes will remain restricted and will not be used for unrelated purposes.

Disconnecting Google access

Users may also manage or revoke the application’s access through their Google Account security and third-party connection settings. Revoking Google authorization may prevent future Google Sign-In but may not automatically delete official records previously submitted to tehbbf. A separate deletion request may therefore be required.

14. Privacy of Minors

Some sports, educational, or competition services may be available to participants who are below the legal age of independent consent.

Where required, registration or submission of personal information for a minor must be completed or authorized by a parent, legal guardian, or other person legally permitted to provide consent.

Parents or legal guardians may contact us to request access to, correction of, or deletion of eligible information associated with a minor, subject to identity verification and applicable official requirements.

15. Third-Party Services and External Links

The application may rely on or link to third-party services, including Google authentication, cloud infrastructure, website hosting, maps, messaging services, payment services, video services, and social media platforms.

Third-party services operate under their own privacy policies and terms. This Privacy Policy applies to information processed by tehbbf and does not replace the policies of independent third-party services.

Users should review the privacy information displayed by a third-party service before submitting information directly to that service.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in application features, data practices, security requirements, Google policies, or applicable laws.

The revised policy will be published on this page with an updated effective date. Material changes may also be communicated through the application, website, or registered contact information where appropriate.

Users are encouraged to review this page periodically. Continued use of the application after an update is subject to the revised Privacy Policy and applicable consent requirements.

17. Contact Information

Questions, privacy requests, corrections, or deletion requests regarding the tehbbf application may be sent through the following official contact channels: