Privacy Policy

1. Introduction

Welcome to the privacy policy of Advanced Golf Solutions LLC, a Florida limited liability company doing business as "Booked Bays" and "Booked Birdies" (collectively, "AGS," "we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

AGS operates as a technology facilitator, providing booking and management software to golf facilities, simulator venues, and other businesses ("Business Clients"), while also serving the individuals who use our platform to make bookings and purchases ("End Users"). This Privacy Policy applies to our websites and native iOS app, including both Business Clients and End Users.

By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an Account: Name, email address, phone number, date of birth
• Make Bookings: Booking preferences, party size, special requests
• Process Payments: Billing information, payment card details (processed securely through our third-party payment processors)
• Subscribe to Memberships: Membership preferences, home facility selection
• Contact Support: Communication history, feedback, and inquiries
• Complete Your Profile: Golf handicap, skill level, preferences, profile picture
• Register as a Business Client: Business name, address, tax identification, facility details, banking information for payouts

2.2 Information Collected Automatically

When you use our platform, we automatically collect certain information, including:

• Device Information: IP address, browser type, device type, operating system
• Operational and Usage Data: Requests and activity needed to operate and secure the service. Optional facility analytics, advertising and embedded-content collection is described in Section 5 and depends on your privacy choices.
• Location Data: Approximate geographic location based on IP address
• Cookies and Similar Technologies: Session data, preferences, authentication tokens

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Payment Processors: Transaction confirmation and payment status
• Business Client Facilities: Check-in data, session feedback, facility usage
• Authentication Services: Single sign-on providers (if you use SSO to log in)
• Facility-configured analytics: Where enabled by your privacy choices, facilities may receive usage and conversion information from their chosen providers. Booked Bays does not currently use Google Analytics for its own platform tracking.

3. How We Use Your Information

We use the information we collect to:

• Provide Our Services: Process bookings, manage your account, facilitate payments between End Users and Business Clients
• Communicate with You: Send booking confirmations, reminders, updates, and customer support responses
• Improve Our Platform: Analyze usage patterns, develop new features, enhance user experience
• Personalize Your Experience: Recommend facilities, remember preferences, customize content
• Process Transactions: Handle payments, issue refunds, manage subscriptions
• Send Marketing Communications: Promotional offers, newsletters, special events (with your consent)
• Ensure Security: Detect fraud, prevent unauthorized access, protect our users
• Comply with Legal Obligations: Respond to legal requests, enforce our terms, protect our rights
• Analytics and Research: Understand trends, measure effectiveness, conduct market research

4. How We Share Your Information

We do not sell personal information for money. Facility-selected advertising integrations may share information with advertising providers. You can opt out of that optional sharing through Your Privacy Choices. We also share information in the following circumstances:

4.1 With Business Client Facilities

When you make a booking, we share necessary information with the Business Client facility, including your name, contact information, booking details, and any special requests. As described in our Terms of Service, AGS acts as a technology facilitator, and your booking creates a direct relationship between you and the Business Client. The Business Client's use of your information is governed by their own privacy practices.

4.2 With Service Providers

We work with third-party service providers who perform services on our behalf:

• Payment Processors: To process payments securely (Stripe, Square or Clover, depending on the facility)
• Cloud Hosting: To store data and host our platform
• Email Services: To send transactional and marketing emails
• Optional facility integrations: Analytics, advertising and embedded-content providers described in Section 5, subject to your privacy choices. These providers may also use data for their own purposes.
• Customer Support Tools: To provide efficient customer service

Service providers acting on our behalf process information to provide their services. Optional facility-selected analytics, advertising and embedded-content providers are described separately in Section 5 and may process information for their own purposes.

4.3 For Legal Reasons

We may disclose your information if required by law or if we believe in good faith that such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect and defend our rights or property
• Prevent fraud or illegal activity
• Protect the safety of our users or the public

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets of Advanced Golf Solutions LLC, your information may be transferred to the successor entity. We will notify you of any such change in ownership or control of your personal information.

4.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Cookies and Tracking Technologies

Booked Bays and Booked Birdies use necessary cookies and similar storage for account access, security, bookings, payments and remembering your privacy choices. Booked Bays does not currently use Google Analytics for its own platform tracking, and our native iOS app does not include Google Analytics.

Optional technologies on facility websites

Independent facilities can configure Google Analytics, Google Ads and Meta pixels on their public pages. When permitted, these integrations can send visit and purchase events to the configured provider. These providers may use information for their own purposes. Enabling a category does not install a provider that the facility has not configured.

• Necessary: Session and security cookies, sign-in, booking and payment functionality, and the bb_privacy_consent cookie that remembers your choices. These remain enabled.
• Analytics: Facility-configured Google Analytics tags, which measure visits and purchases. This is separate from Booked Bays' own operational records.
• Advertising and personalization: Facility-configured Google Ads and Meta pixels, which measure advertising visits and conversions and may support targeted advertising.
• Embedded content: YouTube videos, Google Maps, Jotform forms and other facility-selected widgets. Their providers may receive your IP address, device information and activity and use cookies when content loads. Custom HTML widgets require all optional categories because they may include their own tracking.

Your controls

Open Your Privacy Choices from the website footer or the iOS Account screen. Choose Accept Only Necessary Cookies, Accept All Cookies, or select individual purposes and choose Save Selected Cookies. These choices do not accept our Terms of Use. Rejecting optional technologies does not prevent account access, booking or payment, but external content stays hidden.

On the platform website, optional technologies remain off pending consent for visitors identified in the EEA, UK, Switzerland, California or Quebec. On facility custom domains, California and Quebec facility addresses trigger that consent flow because visitor-location headers are unavailable there. Elsewhere, including locations we cannot identify, optional technologies are enabled by default and can be turned off through Your Privacy Choices.

We honor the Global Privacy Control browser signal by turning off optional technologies. Enabling them despite that signal requires a separate confirmation. You can withdraw permission at any time by choosing Accept Only Necessary Cookies.

We remember browser choices in a first-party cookie for one year. Signed-in choices are also saved with your account and take precedence across devices, including choices saved in the iOS app. Clearing cookies resets guest choices. A choice made on a facility custom domain is carried into the platform booking flow where possible. Separate browsers or domains may need their own choice when you are not signed in.

Saving choices reloads the website to apply them to loaded scripts. When you withdraw analytics or advertising permission, we also expire known accessible Google and Meta tracking cookies on our domains. We cannot remove cookies stored on third-party domains; your browser's controls can manage those.

iOS and other preferences

The native iOS app uses necessary account, booking, payment and notification services. Its privacy controls save the same account choices used on our websites; accepting optional cookies does not enable native advertising tracking. Marketing email subscriptions, push-notification permissions and account deletion requests are separate controls. Use email unsubscribe links for marketing emails and the app's notification settings for push notifications.

For other information about our handling of personal information, read our Privacy Policy. Optional website advertising sharing can be turned off through Your Privacy Choices.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure payment processing through PCI-DSS compliant providers
• Regular security assessments and updates
• Access controls and authentication requirements
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. As described in our Terms of Service, Business Clients are independently responsible for the security of data they access through the Platform and for the physical security of their facilities.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain business records

When your information is no longer needed, we will securely delete or anonymize it. Booking history and transaction records are typically retained for at least 7 years for accounting and tax purposes.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 Access and Portability

You have the right to access your personal information and receive a copy of it in a structured, commonly used format.

8.2 Correction

You can update or correct your personal information through your account settings or by contacting us.

8.3 Deletion

You may request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, pending transactions).

8.4 Opt-Out of Marketing

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in emails or updating your notification preferences in your account settings.

8.5 Object to Processing

You may object to certain types of processing of your information, such as for marketing purposes.

8.6 Withdraw Consent

Where we process your information based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@bookedbays.com. We will respond to your request within 30 days.

9. Children's Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States where Advanced Golf Solutions LLC is headquartered. These countries may have different data protection laws. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including standard contractual clauses or other approved transfer mechanisms where required.

11. Third-Party Links

Our platform may contain links to third-party websites or services, including those of our Business Clients. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information (subject to exceptions)
• Right to opt out of sale or sharing of personal information, including optional advertising integrations, through Your Privacy Choices
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@bookedbays.com or call us at the number provided below.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access, correct, or delete your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your information includes:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: Improving our platform, preventing fraud, marketing
• Consent: Where you have given explicit consent
• Legal Obligation: Compliance with applicable laws

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our platform
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.