Privacy Policy
Last updated March 13, 2026
1. Introduction
MegaCorp, Inc. ("MegaCorp," "we," "us," or "our") operates GolfGroupHub, a golf group management and scoring platform available at golfgrouphub.com. This Privacy Policy explains how we collect, use, share, and protect your information when you use GolfGroupHub.
By using GolfGroupHub, you agree to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, password, date of birth
- Profile information: Profile photo, biographical details
- Golf data: Scores you submit, course and tee information, round details (date, players, format)
- Group and event data: Groups you belong to, your role within groups, events you register for, tee time assignments, flight and division assignments
- Payment information: Billing address and payment method for paid features (full card numbers are processed and stored by our payment processor; we do not store them)
- Communications: Messages and content you send through the platform
2.2 Golf-Specific Data
- Handicap index: Handicap information that you or your administrators enter into the platform
- Round history: Scores, course data, and round details for all rounds you log or participate in
- Statistics: Derived performance metrics including scoring average, fairways hit, greens in regulation, and other analytics
- Group membership history: Groups you have joined, your role, and your activity within each group
- Event participation: Events you register for or participate in, including results and placement
2.3 Location Data
- Course location: Approximate location when you search for courses or check in to a round, if you grant location permission in your device settings
- IP-derived location: Approximate location inferred from your IP address for fraud prevention and analytics
2.4 Information Collected Automatically
- Usage data: Features used, pages visited, actions taken, and time spent on the platform
- Device information: IP address, browser type, operating system, and device identifiers
- Cookies and similar technologies: Session cookies (httpOnly, Secure, SameSite=Lax) for authentication; analytics cookies to measure platform performance
2.5 Information From Third Parties
- Payment processors: Transaction confirmation and fraud risk signals
- OAuth providers: If you sign in via a third-party service (e.g., Google), we receive your name and email from that service
3. How We Use Your Information
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Account information | Create and manage your account, authentication | Contract |
| Scores and rounds | Leaderboards, statistics, handicap tracking | Contract |
| Handicap index | Round setup, flight assignments, game formats | Contract |
| Group membership | Group management, access control, notifications | Contract |
| Event data | Event management, results, leaderboards | Contract |
| Statistics | Performance dashboards and insights | Contract / Legitimate interest |
| Payment information | Process paid subscriptions and send receipts | Contract |
| Location data | Course discovery, round check-in | Consent |
| Usage and device data | Platform analytics, fraud prevention, security | Legitimate interest |
| Cookies | Authentication, session management | Contract / Consent (analytics) |
4. How We Share Your Information
We do not sell your personal information.
We share information in the following circumstances:
- Other GolfGroupHub users: Scores, round results, and leaderboard data are visible to your group members by default. Event leaderboards may be public depending on event organizer settings. Group administrators can view round details and scores for rounds within their group. You control visibility of your handicap index in account settings.
- Service providers: We share data with vendors who assist us with infrastructure, payment processing, email delivery, and analytics. All vendors are bound by data processing agreements.
- Law enforcement: We disclose information when required by law, court order, subpoena, or to protect the safety of users or the public.
- Business transfers: If MegaCorp is acquired or merges with another company, your data may be transferred. We will notify you before this occurs.
- With your consent: We may share data in other ways when you explicitly authorize it.
5. Handicap Data
Handicap data within GolfGroupHub is displayed for informational, organizational, and scoring purposes inside the platform.
- You or your administrators are responsible for the handicap information entered into GolfGroupHub
- Handicap data may affect round setup, flight assignments, leaderboards, and game calculations
- GolfGroupHub scores are not posted to any outside handicap service
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Active account + 30 days after deletion |
| Scores and round history | Active account + 30 days after deletion |
| Group membership history | Active account + 30 days after deletion |
| Event history | Active account + 30 days after deletion |
| Handicap sync history | Active account + 30 days after deletion |
| Payment records | 7 years (legal / tax compliance) |
| Backup snapshots | Purged within 90 days of deletion |
| Fraud and abuse records | Up to 7 years |
| Anonymized aggregate analytics | Indefinite |
Upon account deletion, all personal data is removed from active systems within 30 days. Anonymized aggregate data (e.g., platform-wide scoring averages) may be retained indefinitely.
7. Your Rights
Depending on your jurisdiction, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your account and personal data
- Portability: Receive your data in a machine-readable format (e.g., round history as CSV)
- Objection / Restriction: Object to or restrict certain processing activities
- Withdrawal of consent: Where we process data based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise these rights, contact: privacy@golfgrouphub.com
We will respond to verified requests within 30 days (GDPR) or 45 days (CCPA). We may request additional verification to protect your account.
8. California Privacy Rights (CCPA / CPRA)
California residents have the following additional rights:
- Right to know what personal information we collect, use, share, or disclose
- Right to delete personal information we hold about you
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information (we do not sell data; you may opt out of analytics cookies via our cookie preferences)
- Right to limit use of sensitive personal information
- Right to non-discrimination for exercising your privacy rights
To submit a California privacy request: privacy@golfgrouphub.com We will respond within 45 days, extendable by an additional 45 days with notice.
9. GDPR (EEA and UK Users)
Our legal bases for processing are described in Section 3. Additional information for EEA and UK users:
- Right to lodge a complaint with your local supervisory authority if you believe we have violated your rights
- Data transfers: Your data is processed in the United States. We implement appropriate safeguards including Standard Contractual Clauses for international transfers
- EU/UK Representative: To be designated upon EU/UK market entry
- Data Protection Officer: To be designated if required under applicable law
For GDPR requests: privacy@golfgrouphub.com
10. Children's Privacy
GolfGroupHub is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If we discover that we have collected data from a minor, we will delete it promptly. If you believe a minor is using the platform, contact support@golfgrouphub.com.
11. Security
We implement industry-standard security measures including:
- TLS encryption for all data in transit
- Encryption at rest for sensitive data
- Access controls and audit logging
- Regular security reviews
No system is completely secure. We cannot guarantee absolute security, but we are committed to promptly investigating and disclosing material security incidents.
12. International Transfers
GolfGroupHub is operated from the United States. If you access the platform from outside the United States, your data may be transferred to and processed in the United States. We implement appropriate safeguards, including Standard Contractual Clauses, for transfers from the EEA or UK.
13. Cookies
We use:
- Essential cookies: Required for authentication and session management (httpOnly, Secure, SameSite=Lax). Cannot be disabled without breaking core functionality.
- Analytics cookies: Used to understand how the platform is used and improve features. You may opt out via our cookie preference center.
14. Changes to This Policy
We will notify you of material changes to this Privacy Policy by email or in-app notification at least 14 days before the changes take effect. Your continued use of GolfGroupHub after the effective date constitutes acceptance of the updated policy.
15. Contact
Privacy questions and requests: privacy@golfgrouphub.com
General support: support@golfgrouphub.com
Legal: legal@megacorp.company