1. Introduction

Roadtrip Technologies Ltd ("we", "us", or "our"), the owner and operator of indoorgolfvenues.com, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the indoorgolfvenues.com website and services (the "Services"). It also outlines your rights under the EU General Data Protection Regulation (GDPR) and other applicable laws.

Data Controller: For the purpose of data protection laws, the Data Controller is Roadtrip Technologies Ltd, Ground Floor, 71 Lower Baggot Street, Co. Dublin, Dublin D02 P593, Ireland. If you have any questions or requests regarding your personal data, you can contact us at help@clubpass.customerly.io.

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described, please do not use indoorgolfvenues.com. We may update this policy from time to time (see Changes to This Privacy Policy below). We encourage you to review this Policy periodically for any updates.

2. Information We Collect

We collect several types of information from and about users of our Services, including:

2.1. Personal Information You Provide

You may provide personal information to us when using indoorgolfvenues.com, such as:

• Account Information: When you create an account or membership, we collect information like your name, email address, and any other details you provide during registration.
• Payment Information: If you purchase a membership or make a booking, payment details (e.g. credit card number, billing name and address) are handled by our payment processor (Stripe). We do not store your full credit card details; they are transmitted directly to Stripe.
• Communications: If you contact us (for example, via email or support channels), we will receive your name, email address, and any other information you choose to include in your message. We will keep records of our correspondence.
• Other Information You Choose to Provide: This could include data you provide in your user profile, responses to surveys or promotions, or information you share while using our Services (such as booking preferences or feedback).

2.2. Information Collected Automatically

When you use indoorgolfvenues.com, we automatically collect certain information about your device and usage of our Services:

• Usage Data: We collect information about how you interact with our website, such as the pages or screens you view, the dates and times of access, the features you use, and the actions you take (e.g. creating a booking or searching for a venue).
• Device and Technical Data: We receive technical information about the device and browser you use to access the Services. This may include your IP address, browser type, operating system, device identifiers, and approximate location (e.g. country or city, inferred from your IP).
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to enhance your experience and gather usage data. For example, we (or third-party analytics providers) may use cookies to remember your preferences, keep you logged in, and analyze site traffic. For more details, see Cookies and Tracking below.

We may combine the information you provide with information collected automatically for the purposes described in this Privacy Policy. All personal data we collect is handled in accordance with applicable data protection laws.

3. How We Use Your Information

We use your personal information for the following purposes:

• Provide and Maintain the Service: To create and manage your account, authenticate you when you log in, and provide you with the features and services of indoorgolfvenues.com (such as processing bookings and enabling your multi-venue golf membership).
• Process Payments: To process membership fees, bookings, or other transactions you initiate. Payment information is used solely for payment processing via Stripe and related billing purposes.
• Communicate with You: To send you administrative or account-related communications, such as confirmations of your bookings, important updates about your membership, changes to our terms or policies, or responses to your inquiries and support requests.
• Improve and Personalize Our Services: To analyze how users interact with indoorgolfvenues.com so we can improve the functionality and quality of our Services. This includes using data to troubleshoot issues, develop new features, and personalize your experience (for example, showing relevant nearby venues or remembering your preferences).
• Analytics and Performance: To use analytics tools that help us understand overall user behavior and site performance. This helps us optimize our website design, content, and marketing efforts.
• Ensure Security and Prevent Fraud: To keep our platform safe and secure. For example, we may use information to detect and prevent fraudulent transactions or misuse of our Services, and to enforce our terms of service.
• Legal Compliance: To comply with applicable legal obligations, such as financial reporting requirements, tax and accounting rules, or responding to lawful requests by public authorities.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis for that use.

4. Legal Bases for Processing

We process your personal information only when we have a valid legal basis to do so under GDPR and applicable law. These legal bases include:

• Performance of a Contract: Most of our processing is necessary to provide our Services and perform our contract with you. For example, we process your registration details to create your account, and your booking information to fulfill the services you request.
• Legal Obligation: In some cases, we need to process certain data to comply with a legal obligation. For instance, we may retain transaction records to fulfill tax and accounting laws, or disclose information if required by court order.
• Legitimate Interests: We process certain data as needed for our legitimate interests, provided those are not overridden by your data protection rights. For example, it is in our legitimate interest to understand how users use our platform (analytics) to improve our services, to secure our website and prevent fraud, and to share minimal necessary information with partner venues so you can access services there.
• Consent: In specific situations, we rely on your consent to process your data. For example, we will obtain your consent before using non-essential cookies and before sending you any promotional or marketing communications not related to your membership. If we ask for your consent, you have the right to withdraw it at any time.

If you have questions about the legal basis of how we process your personal data, please contact us at help@clubpass.customerly.io.

5. Information Sharing and Disclosure

We treat your personal data with care and confidentiality. We do not sell or rent your personal information to third parties. However, we may share your data in the following circumstances:

5.1. Service Providers and Partners

We use trusted third-party service providers to operate and support our Services. Our key service providers include:

• Stripe (Payment Processing): We use Stripe to handle credit card payments and billing. When you make a payment, information such as your name, email, and payment details is transmitted securely to Stripe. (For more details, see Stripe's Privacy Policy at stripe.com/privacy).
• Google Analytics: We use Google Analytics to gather aggregated information about how visitors use our site. We have configured Google Analytics to anonymize IP addresses where possible.
• Supabase (Hosting and Database): Our platform is built on Supabase, which provides hosting, database, and user authentication services. All the information you provide to indoorgolfvenues.com is stored in our databases hosted by Supabase.
• Partner Golf Venues: If you book a session or use your membership at one of our partner indoor golf centers, we will share the minimum necessary information with that venue to confirm your booking and verify your membership status.

5.2. Legal Requirements and Protection

We may disclose your personal information if we are required to do so by law or if such action is necessary to:

• Comply with a legal obligation, court order, or government request.
• Enforce our Terms of Service or other agreements, and investigate potential violations.
• Protect the rights, property, or safety of Roadtrip Technologies Ltd, our users, or others.

5.3. Business Transfers

If we undergo a business transaction such as a merger, acquisition, restructuring, or sale of all or part of our assets, your personal data may be transferred to the successor entity or new owner as part of that transaction. In such cases, we will ensure that your personal information remains protected by this Privacy Policy.

6. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your information, including:

• Encryption: We use encryption (HTTPS/TLS) to protect data transmitted between your device and our servers.
• Access Controls: We restrict access to personal data to authorized personnel who need it to operate our Services.
• Secure Hosting: Our databases (hosted via Supabase) and servers are protected by firewalls, regular security updates, and monitoring for vulnerabilities or breaches.
• Employee Training: We ensure that our team is trained on data protection best practices.

While we strive to protect your information, please note that no method of transmission over the internet or electronic storage is 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at help@clubpass.customerly.io.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes we collected it for. Specifically:

• Account Data: We retain the personal information associated with your account for as long as your account is active. If you delete your account, we will remove or anonymize your data within a reasonable period, except where retention is required by law.
• Transaction Records: We keep records of payments, bookings, and invoices as required for financial reporting, tax compliance, and audit obligations (typically 6-7 years).
• Communications: Copies of your communications with us are retained for as long as necessary to address your requests and maintain a record of our correspondence.
• Analytics Data: Usage data collected via analytics tools may be retained for a defined period (typically 14 months), after which it is deleted or aggregated.

When we have no ongoing legitimate need to use your personal data, we will either delete it or anonymize it.

8. Your Rights and Choices

As a user of our Services, particularly if you are in the European Economic Area (EEA) or United Kingdom, you have certain rights regarding your personal data:

• Right of Access: You have the right to request confirmation whether we process your personal data, and if so, to request a copy of the information we hold about you.
• Right to Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances (the "right to be forgotten").
• Right to Restrict Processing: You can ask us to restrict the processing of your personal data in certain situations.
• Right to Object: You have the right to object to our processing of your personal data when such processing is based on our legitimate interests. You have the absolute right to object to any processing for direct marketing purposes.
• Right to Data Portability: For data you have provided to us and which we process by automated means, you have the right to request a copy in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.
• Right to Lodge a Complaint: If you believe that we have infringed your data protection rights, you have the right to lodge a complaint with a supervisory data protection authority.

Exercising Your Rights: You can exercise most of the rights above by contacting us at help@clubpass.customerly.io. We will respond to your request within the time limits set by applicable data protection laws (typically within one month).

9. Cookies and Tracking Technologies

What Are Cookies: Cookies are small text files that websites place on your device's browser. They are widely used to make websites work, or work more efficiently, as well as to provide information to the site owners.

How We Use Cookies: indoorgolfvenues.com uses cookies and similar tracking technologies for several reasons:

• Essential Cookies: These cookies are necessary for the website to function properly. For example, they allow you to log in, stay logged in during your session, and access secure areas of the site.
• Preferences and Functionality: We use cookies to remember your preferences and settings, such as language or region.
• Analytics Cookies: We use Google Analytics cookies and similar tools to collect information about how visitors use our site. We have enabled IP anonymization in Google Analytics.

Your Choices:

• Browser Settings: Most web browsers allow you to refuse or delete cookies through their settings.
• Google Analytics Opt-Out: Google provides an opt-out mechanism for Google Analytics via a browser add-on (available at tools.google.com/dlpage/gaoptout).

10. International Data Transfers

indoorgolfvenues.com is a global service, and as such, your personal data may be transferred to and processed in countries other than your own. In particular, if you are located in the European Economic Area (EEA) or the United Kingdom:

• Within the Organization: Roadtrip Technologies Ltd is based in Ireland. However, certain team members or contractors may operate in other countries.
• Service Providers in Other Countries: Some of our third-party providers are located outside of the EEA/UK or may store data on servers outside these regions.

Whenever we transfer your personal data out of the EEA/UK, we take steps to ensure an adequate level of protection, including:

• Adequacy Decisions: Where applicable, we transfer data to countries that provide an adequate level of data protection.
• Standard Contractual Clauses: In the absence of an adequacy decision, we rely on the European Commission's approved Standard Contractual Clauses (SCCs).
• Additional Safeguards: We also assess whether additional technical and organizational measures are required.

11. Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16 years old. If you are under 16, please do not register for an account, make purchases, or send us any personal information.

If we learn that we have inadvertently collected personal information from a child under 16, we will take steps to delete such information as soon as possible. If you are a parent or guardian and believe that a child under 16 has provided us with personal data, please contact us immediately at help@clubpass.customerly.io.

12. Third-Party Links and Services

indoorgolfvenues.com may contain links to websites or services that are operated by third parties. This Privacy Policy does not cover third-party websites or services. Once you leave our website or are redirected to a third-party service, we are no longer responsible for the privacy practices or content of those external sites.

We encourage you to read the privacy policies of any third-party websites or services that you visit or engage with.

13. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will post the updated Privacy Policy on this page and update the "Last Updated" date at the top. If the changes are material, we will take reasonable steps to inform you.

Your continued use of indoorgolfvenues.com after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• Email: help@clubpass.customerly.io
• Postal Address: Roadtrip Technologies Ltd, Ground Floor, 71 Lower Baggot Street, Co. Dublin, Dublin D02 P593, Ireland

For individuals in the European Union or other jurisdictions with data protection authorities, you also have the right to contact your local Data Protection Authority with any questions or complaints. In Ireland, the supervisory authority is the Data Protection Commission (DPC). In the UK, it is the Information Commissioner's Office (ICO).