Privacy Policy

Effective Date: August 18, 2026
Last Updated: August 18, 2026

The Voluntary Anti-Doping Association (“VADA,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy describes how VADA collects, uses, stores, protects, and discloses information when you use:

• the VADA website, including vada-testing.org and pages or services operated through that website;
• VADA mobile applications available for Apple iOS and Google Android devices; and
• related online services, features, communications, and digital platforms operated by VADA.

Collectively, these are referred to in this Privacy Policy as the “Services.”

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy.

1. Information We May Collect

The information VADA collects depends upon how you interact with the Services and the features you use.

Information You Provide to Us

We may collect information that you voluntarily provide, including:

• name;
• email address;
• telephone number;
• mailing or residential address;
• date of birth;
• account username and password;
• profile information;
• athletic, professional, or organizational affiliation;
• information concerning competitions, events, training, or participation in combat sports;
• communications you send to VADA;
• forms, applications, requests, or other information submitted through the Services; and
• information provided when contacting VADA for assistance.

Athlete and Anti-Doping Information

When applicable to VADA’s anti-doping activities, we may collect information necessary to administer testing programs and related services, including:

• athlete identification information;
• competition and event information;
• testing schedules;
• testing history;
• whereabouts information;
• location information provided by an athlete or authorized representative;
• specimen collection information;
• laboratory and testing information;
• Therapeutic Use Exemption (“TUE”) information;
• medications, supplements, or substances disclosed in connection with testing;
• relevant medical or health-related information voluntarily or lawfully provided in connection with anti-doping testing;
• testing results and related records; and
• information necessary for results management and compliance with applicable VADA policies.

Because some of this information may be sensitive, VADA limits its collection and use to information reasonably necessary for legitimate anti-doping, safety, administrative, legal, or operational purposes.

Location and Whereabouts Information

Certain VADA programs or mobile application features may allow or require athletes to provide location or whereabouts information for purposes such as coordinating testing or complying with applicable testing requirements.

Depending upon the feature being used and permissions granted on your device, location information may include:

• addresses entered manually;
• scheduled locations;
• approximate location;
• precise device location; or
• geographic coordinates.

VADA will only access device-based location information when permitted by the operating system and when the applicable application feature requires it.

You may control device location permissions through your iOS or Android device settings. Disabling location permissions may prevent certain features of the Services from functioning properly.

Device and Technical Information

When you access the website or mobile applications, we or our service providers may automatically receive certain technical information, such as:

• IP address;
• device type;
• operating system;
• browser type;
• application version;
• device identifiers;
• language settings;
• dates and times of access;
• pages or application features used;
• crash reports;
• diagnostic information; and
• general usage information.

We may use this information to operate, secure, troubleshoot, maintain, and improve the Services.

2. Mobile Device Permissions

Depending upon the functionality of the VADA mobile application, the application may request permission to access certain features of your device.

These may include, where applicable:

• Location – to provide or verify whereabouts or location-related information associated with VADA testing activities;
• Camera – to capture photographs, documents, identification, or other information you choose to submit;
• Photo Library or Files – to allow you to select and upload documents or images;
• Notifications – to provide testing-related, account, administrative, or other important notifications; and
• other device features reasonably necessary to provide functionality requested by you.

VADA will not access a device permission merely because the permission exists. Access is subject to the permissions you grant through your device and the functionality of the application.

You can review or revoke mobile application permissions through the privacy or application settings on your device.

3. How We Use Information

VADA may use information collected through the Services to:

• provide and operate the Services;
• establish and manage user accounts;
• administer VADA’s anti-doping programs;
• coordinate athlete testing;
• process and maintain whereabouts information;
• communicate with athletes, representatives, commissions, promoters, testing personnel, laboratories, and other authorized parties;
• administer specimen collection and testing procedures;
• manage testing results;
• administer Therapeutic Use Exemption requests;
• provide notifications and important service communications;
• respond to questions and requests;
• authenticate users and protect accounts;
• prevent fraud, misuse, unauthorized access, and security incidents;
• diagnose technical problems;
• maintain and improve the website and mobile applications;
• maintain records required for VADA’s operations;
• enforce VADA policies and agreements;
• comply with legal obligations; and
• protect the rights, safety, integrity, and legitimate interests of VADA, athletes, participants, and others.

We may also use aggregated or de-identified information for statistical, operational, research, reporting, and service-improvement purposes where the information can no longer reasonably identify an individual.

4. How We Share Information

VADA does not sell personal information for monetary compensation.

VADA may disclose information when reasonably necessary to operate its programs and Services.

Service Providers

We may provide information to companies and individuals performing services on VADA’s behalf, such as:

• website and application hosting providers;
• cloud infrastructure providers;
• database providers;
• software and technology vendors;
• email and communications providers;
• analytics and diagnostic providers;
• cybersecurity providers;
• professional advisers; and
• other vendors necessary to operate the Services.

These providers are authorized to process information only as necessary to provide services to VADA or as otherwise permitted by applicable law and their agreements with VADA.

Anti-Doping and Testing Activities

Information may be disclosed to authorized parties involved in VADA testing and anti-doping activities when reasonably necessary, including:

• athletes and their authorized representatives;
• specimen collection personnel;
• accredited or authorized laboratories;
• athletic commissions and regulatory authorities;
• promoters or sanctioning organizations;
• medical professionals;
• independent experts;
• legal or compliance professionals; and
• other organizations or individuals with a legitimate role in the applicable testing or results-management process.

The information disclosed will depend upon the circumstances and applicable VADA policies, agreements, consent, and legal requirements.

Legal and Safety Requirements

VADA may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law, regulation, court order, subpoena, or other legal process;
• respond to lawful requests from governmental or regulatory authorities;
• investigate suspected fraud or unlawful conduct;
• enforce our agreements or policies;
• protect the security of the Services; or
• protect the rights, property, health, or safety of VADA, athletes, users, or others.

Organizational Transactions

If VADA undergoes a merger, restructuring, reorganization, transfer of operations, or similar organizational transaction, information may be transferred as part of that transaction subject to applicable law.

5. Third-Party Services and Software

The website and mobile applications may use third-party technologies, software development kits (“SDKs”), infrastructure, analytics services, notification services, mapping services, or other technology necessary to provide the Services.

These providers may process limited information in connection with providing their services to VADA.

VADA requires third parties receiving personal information on VADA’s behalf to handle that information in a manner consistent with applicable privacy and security requirements.

The Services may also contain links to websites or services operated independently by third parties. VADA is not responsible for the privacy practices of independent third-party websites or services, and users should review their applicable privacy policies.

6. Cookies and Similar Technologies

The VADA website may use cookies and similar technologies to:

• maintain website functionality;
• remember preferences;
• maintain secure sessions;
• understand how visitors use the website;
• diagnose technical issues; and
• improve website performance.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

Mobile applications may similarly use local storage, application identifiers, or comparable technologies necessary for application functionality, security, diagnostics, and user preferences.

7. Data Security

VADA uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Depending upon the nature of the information and system involved, safeguards may include access controls, authentication, encryption during transmission, secure hosting, monitoring, and limiting access to personnel or service providers with a legitimate need for the information.

No Internet transmission, mobile application, database, or electronic storage system can be guaranteed to be completely secure. Therefore, VADA cannot guarantee absolute security.

8. Data Retention

VADA retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• administering anti-doping programs;
• maintaining testing and results-management records;
• providing the Services;
• satisfying contractual requirements;
• resolving disputes;
• maintaining security and fraud-prevention records;
• enforcing VADA policies; and
• satisfying legal, regulatory, accounting, or reporting obligations.

Retention periods may vary depending upon the type of information and the purpose for which it was collected.

When information is no longer reasonably required, VADA may delete, anonymize, or securely dispose of it, subject to applicable legal, regulatory, contractual, testing, recordkeeping, and anti-doping requirements.

9. Account and Data Deletion

Users may request deletion of their VADA account and associated personal information by contacting VADA using the contact information provided below or through any account-deletion feature made available within the applicable Service.

Upon receiving a verified deletion request, VADA will delete or de-identify personal information associated with the account unless retention is reasonably necessary or legally permitted for purposes such as:

• maintaining required anti-doping or testing records;
• complying with applicable laws or regulations;
• completing an ongoing testing or results-management process;
• resolving disputes;
• preventing fraud or abuse;
• establishing or defending legal claims; or
• satisfying legitimate recordkeeping requirements.

Deleting an account therefore may not require VADA to delete records that VADA is legally, contractually, or operationally required or permitted to retain.

10. Your Privacy Choices

Depending upon your location and applicable law, you may have the right to request that VADA:

• provide information about personal information maintained about you;
• provide access to certain personal information;
• correct inaccurate personal information;
• delete certain personal information;
• restrict certain processing;
• provide a portable copy of certain information; or
• honor another privacy right provided by applicable law.

You may also withdraw consent for processing based upon consent where applicable.

Withdrawal of consent does not affect processing that occurred before consent was withdrawn and may affect VADA’s ability to provide certain Services.

Requests may be submitted using the contact information provided below. VADA may take reasonable steps to verify your identity before fulfilling a request.

11. Mobile Application Privacy Controls

Users of the VADA iOS and Android applications can control many privacy permissions directly through their device.

Apple iOS

Permissions can generally be reviewed under:

Settings → Privacy & Security

or through the settings associated with the VADA application.

Android

Permissions can generally be reviewed under:

Settings → Apps → VADA → Permissions

The exact menu names may vary depending upon the device manufacturer and operating-system version.

Changing or disabling a permission may limit application functionality that depends upon that permission.

12. Push Notifications

If you enable push notifications, VADA may send notifications concerning your account, testing activities, administrative matters, reminders, or other Services.

You may disable push notifications through your device settings.

Certain important communications may still be delivered through email, telephone, the application, or another appropriate communication method.

13. Children’s Privacy

The Services are not intended for children to use independently unless their participation is authorized and appropriate in connection with VADA’s programs.

Where information concerning a minor is required for legitimate anti-doping or testing activities, VADA may collect and process that information with appropriate authorization, including parental or guardian involvement where required by applicable law.

VADA does not knowingly collect personal information from children for unrelated commercial purposes.

If you believe a child has provided personal information to VADA improperly, please contact us.

14. California Privacy Rights

California residents may have additional rights regarding their personal information under applicable California privacy laws.

Where applicable, these rights may include the right to:

• know what categories and specific pieces of personal information have been collected;
• know the purposes for which personal information is used;
• know the categories of third parties to whom information is disclosed;
• request correction of inaccurate personal information;
• request deletion of certain personal information; and
• exercise applicable privacy rights without unlawful discrimination.

VADA does not sell personal information for monetary compensation.

To submit a privacy request, please contact VADA using the information below.

15. International Users

VADA’s activities may involve athletes, participants, organizations, or users located outside the United States.

As a result, information may be transferred to, stored in, or processed in the United States or another country where VADA, its service providers, testing personnel, laboratories, or other authorized recipients operate.

Privacy and data-protection laws may differ between countries.

Where required by applicable law, VADA will use appropriate safeguards for international transfers of personal information.

16. Communications

VADA may use the contact information you provide to send operational communications concerning:

• your account;
• testing;
• whereabouts requirements;
• appointments;
• results-management matters;
• policy changes;
• security issues; or
• other matters related to VADA’s Services and programs.

Certain operational or legally required communications are not promotional communications and may continue even if you opt out of optional marketing messages.

17. Do Not Track and Tracking Technologies

Some browsers provide “Do Not Track” signals or similar privacy controls. Because there is not a universally accepted standard for responding to all such signals, the Services may not respond to every browser-based Do Not Track mechanism.

Where applicable law requires recognition of a particular legally recognized privacy preference signal, VADA will endeavor to comply with that requirement.

VADA does not authorize third parties to track users across unrelated applications and websites for behavioral advertising on VADA’s behalf unless such activity is specifically disclosed and any legally required consent has been obtained.

18. Changes to This Privacy Policy

VADA may update this Privacy Policy periodically to reflect changes to:

• the website;
• the mobile applications;
• VADA programs;
• technology;
• data practices;
• applicable laws; or
• regulatory requirements.

When this Privacy Policy is updated, the revised version will be posted on the VADA website and the “Last Updated” date will be changed.

If a change materially affects how personal information is handled, VADA may provide additional notice when appropriate.

19. Contact VADA

Questions, concerns, privacy requests, account-deletion requests, or other inquiries regarding this Privacy Policy or VADA’s handling of personal information may be submitted to VADA through its website:

Voluntary Anti-Doping Association (VADA)
Website: vada-testing.org

Users may use the contact information or contact form provided on the VADA website to submit privacy-related inquiries.

20. Scope of This Policy

This Privacy Policy is intended to serve as the privacy policy governing the VADA website and VADA mobile applications distributed through the Apple App Store and Google Play.

If a specific VADA program, jurisdiction, agreement, consent form, testing protocol, or other policy imposes additional privacy or confidentiality requirements, those additional requirements may apply together with this Privacy Policy.