Privacy Policy

PRIVACY POLICY Last Updated: January 8, 2025Putting It Close, LLC

11320 West Radcliffe Drive Littleton, CO 80127Contact: https://puttingitclose.com/home/about/

  1. INTRODUCTION

Putting It Close, LLC ("we," "us," or "our") operates the website https://puttingitclose.com and the web application at https://app.puttingitclose.com/ (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information. By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service. This Privacy Policy includes specific disclosures required by:

  • California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
  • General Data Protection Regulation (GDPR) for European Union residents
  • California Online Privacy Protection Act (CalOPPA)
  1. INFORMATION WE COLLECT

2.1 Information You Provide Directly

When you register for an account, we collect:

  • Email address (required)
  • Username (required)
  • Password (hashed and encrypted)
  • Phone number (optional, for future SMS notifications)
  • Mobile carrier (optional, if phone number provided)
  • Golf course preferences (states, cities, courses you're interested in)
  • Time and day preferences (for tee time alerts)

2.2 Payment Information

We use Stripe, a third-party payment processor, to handle all payment transactions. Stripe collects and processes:

  • Credit card information
  • Billing name and address
  • Payment transaction details

We do NOT store your credit card information or billing name on our servers. We only store your Stripe Customer ID to manage your subscription.

2.3 Information Collected Automatically

When you use our Service, we automatically collect:

  • Usage data: Pages viewed, features used, time spent on pages
  • Click data: Buttons clicked, schedules viewed, links followed
  • Device information: Browser type, operating system, screen resolution
  • Session information: Login times, session duration, IP address (for security only, not long-term stored)
  • Referrer information: How you arrived at our site

This information is collected through our proprietary analytics system (not Google Analytics or other third-party tools).

2.4 Location Information

We do NOT collect or store your GPS location. We may use your IP address to estimate your general location (city/state level) to calculate estimated travel time to golf courses, but this data is not saved.

2.5 Information We Do NOT Collect

  • We do NOT collect your first or last name (Stripe collects this for payment processing, but we do not request or store it)
  • We do NOT collect your physical address (except as provided to Stripe for billing)
  • We do NOT collect your date of birth or age
  • We do NOT collect social media profile information
  • We do NOT collect precise GPS coordinates
  1. HOW WE USE YOUR INFORMATION

3.1 Primary Purposes

We use your information to:

  • Provide our Service: Send tee time availability alerts matching your preferences
  • Process payments: Manage your subscription through Stripe
  • Communicate with you: Send service-related emails, respond to inquiries
  • Improve our Service: Analyze usage patterns to enhance features and user experience
  • Prevent fraud: Detect and prevent unauthorized access or abuse
  • Comply with legal obligations: Maintain records as required by law

3.2 Legal Basis for Processing (GDPR)

For users in the European Union, we process your data under the following legal bases:

  • Consent: You provide consent when you create an account and agree to our Terms of Service
  • Contract Performance: Processing is necessary to provide the tee time alert service you requested
  • Legitimate Interest: We have a legitimate interest in improving our service through analytics and preventing fraud
  • Legal Obligation: We process payment data to comply with tax and financial regulations
  1. HOW WE SHARE YOUR INFORMATION

4.1 Third-Party Service Providers

We share your information with the following third parties who help us provide our Service: Stripe, Inc. (Payment Processing)

  • What they receive: Payment card information, billing name and address, transaction details
  • Purpose: Process subscription payments and manage billing
  • Privacy Policy: https://stripe.com/privacy
  • Location: United States (GDPR-compliant through Standard Contractual Clauses)

Railway / Amazon Web Services (Hosting & Infrastructure)

  • What they receive: All data stored in our database (email, username, preferences, analytics)
  • Purpose: Host our application and database
  • Privacy Policy: Railway: https://railway.app/legal/privacy | AWS: https://aws.amazon.com/privacy/
  • Location: United States data centers

Future: Amazon Web Services (SMS Messaging)

  • What they will receive: Phone numbers for users who opt-in to SMS notifications
  • Purpose: Send text message alerts for tee times
  • Status: Not yet implemented

4.2 What We Do NOT Do With Your Data

  • ❌ We do NOT sell your personal information to third parties
  • ❌ We do NOT share your data with advertisers
  • ❌ We do NOT use your data for remarketing or targeted advertising
  • ❌ We do NOT share your email with marketing companies
  1. YOUR PRIVACY RIGHTS

5.1 CALIFORNIA RESIDENTS – YOUR CCPA/CPRA RIGHTS

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information. RIGHT TO KNOW You have the right to request that we disclose:

  • The categories of personal information we collected about you
  • The categories of sources from which we collected your information
  • The business or commercial purpose for collecting your information
  • The categories of third parties with whom we share your information
  • The specific pieces of personal information we collected about you

RIGHT TO DELETE You have the right to request deletion of your personal information, subject to certain exceptions (e.g., completing transactions, detecting security incidents, complying with legal obligations). RIGHT TO CORRECT You have the right to request correction of inaccurate personal information we maintain about you. RIGHT TO OPT-OUT OF SALE We do NOT sell your personal information. We have not sold personal information in the past 12 months. RIGHT TO LIMIT USE OF SENSITIVE PERSONAL INFORMATION We do not use or disclose sensitive personal information for purposes other than providing our services. RIGHT TO NON-DISCRIMINATION We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive different pricing, service levels, or product quality for exercising your rights. HOW TO EXERCISE YOUR RIGHT To exercise any of these rights, please contact us at: https://puttingitclose.com/home/about/We will respond to your request within 45 days. We may need to verify your identity before processing your request. CATEGORIES OF PERSONAL INFORMATION WE COLLECT (CCPA)Under CCPA, we collect the following categories of personal information:

  • Identifiers: Email address, username, Stripe Customer ID
  • Commercial Information: Subscription plan, payment history
  • Internet Activity: Browsing history on our site, clicks, interactions
  • Geolocation Data: Approximate location (city/state) based on IP address (used for calculations only, not stored)

5.2 EUROPEAN UNION RESIDENTS – YOUR GDPR RIGHTS

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) provides you with specific rights regarding your personal data. RIGHT TO ACCESS You have the right to request a copy of the personal data we hold about you. RIGHT TO RECTIFICATION You have the right to request correction of inaccurate or incomplete personal data. RIGHT TO ERASURE ("Right to be Forgotten”) You have the right to request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected. RIGHT TO RESTRICT PROCESSING You have the right to request that we restrict processing of your personal data in certain circumstances. RIGHT TO DATA PORTABILITY You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller. RIGHT TO OBJECT You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. RIGHT TO WITHDRAW CONSENT Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time by deleting your account. RIGHT TO LODGE A COMPLAINT You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights under GDPR.HOW TO EXERCISE YOUR Rights to exercise any of these rights, please contact us at: https://puttingitclose.com/home/about/We will respond to your request within 30 days as required by GDPR.INTERNATIONAL DATA TRANSFERS Your personal data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers through Standard Contractual Clauses approved by the European Commission.

5.3 ALL USERS – GENERAL RIGHTS

Regardless of your location, you may:

  • Update your information: Edit your email, username, phone number, and preferences in your account settings
  • Delete your account: Request account deletion by contacting us
  • Opt-out of emails: Manage notification preferences in your account settings or use the "Mute Dates" feature
  • Access your data: Request a copy of your data at any time
  1. DATA SECURITY

We implement appropriate technical and organizational security measures to protect your personal information:

  • Encryption: All passwords are hashed using industry-standard encryption (bcrypt)
  • Secure transmission: All data transmitted between your browser and our servers uses HTTPS/TLS encryption
  • Access controls: Limited employee access to personal data on a need-to-know basis
  • Payment security: We use Stripe, a PCI-DSS Level 1 certified payment processor; we never store credit card information
  • Regular updates: We maintain security patches and updates for our software

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

  1. DATA RETENTION

Active Accounts We retain your personal information for as long as your account is active or as needed to provide you services. Deleted Accounts If you request account deletion:

  • Your personal information (email, username, preferences) will be deleted or anonymized within 30 days
  • Payment records will be retained for 7 years as required by IRS regulations for tax and accounting purposes
  • Analytics data will be anonymized but may be retained for statistical purposes

Analytics Data Aggregated and anonymized analytics data may be retained for up to 24 months for service improvement purposes. Legal Requirements We may retain certain information longer if required by law, such as:

  • Payment transaction records (7 years for tax compliance)
  • Records related to legal disputes
  • Information needed to prevent fraud or abuse

Your Right to Request Deletion You may request deletion of your data at any time by contacting us. We will process deletion requests within 30 days, subject to legal retention requirements.

  1. COOKIES AND TRACKING TECHNOLOGIES

8.1 Cookies We Use

Essential Cookies (No Consent Required)

  • Session cookies: Used to keep you logged in and maintain your session
  • Security cookies: Used to authenticate users and prevent fraudulent use

These cookies are necessary for the Service to function and cannot be disabled. Analytics Tracking (Requires Consent) We use our own proprietary analytics system (not Google Analytics) to track:

  • Page views
  • Feature usage
  • Click patterns
  • Session duration

This helps us understand how users interact with our Service and improve it. Analytics data is collected via JavaScript and stored in our database.

8.2 How We Use Tracking Data

  • Understand which features are most popular
  • Identify technical issues or bugs
  • Improve user experience
  • Analyze conversion rates (trial to paid subscriptions)

8.3 Third-Party Cookies

We load the following third-party resources that may set cookies:

  • Google Fonts: For typography (transmits IP address to Google)
  • Bootstrap CDN: For styling (transmits IP address to CDN provider)
  • Font Awesome CDN: For icons (transmits IP address to CDN provider)
  • Stripe: For payment processing (sets cookies for fraud prevention)

8.4 Your Choices

You can:

  • Disable cookies in your browser settings (may affect functionality)
  • Opt-out of analytics (coming soon - we will add this feature to account settings)
  • Use browser privacy features like Do Not Track (see section 9)
  1. DO NOT TRACK SIGNALS (CalOPPA)

The California Online Privacy Protection Act (CalOPPA) requires us to disclose how we respond to "Do Not Track" browser signals. Our Policy: Currently, we do NOT respond to Do Not Track (DNT) browser signals because there is no accepted industry standard for compliance. However:

  • We do NOT track you across third-party websites
  • We do NOT sell your information to third parties
  • We do NOT use third-party advertising networks
  • Our analytics only track your activity on our own website

Third-Party Tracking: We do not allow third-party behavioral tracking on our Service, except for:

  • Stripe (for fraud prevention related to payment processing)
  • Standard web fonts/resources from CDNs (minimal data collection)
  1. THIRD-PARTY LINKS

Our Service contains links to third-party websites (golf course booking sites). When you click "Book Tee Time," you are redirected to the golf course's website. We are not responsible for:

  • The privacy practices of these external sites
  • The content on third-party websites
  • Transactions you complete on external sites

We encourage you to read the privacy policy of every website you visit.

  1. CHILDREN'S PRIVACY

Our Service is NOT intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not:

  • Use our Service
  • Register for an account
  • Provide any personal information to us

If we learn we have collected information from someone under 18:

  • We will delete that information immediately
  • We will terminate the account

Parents/Guardians: If you believe your child has provided information to us, please contact us immediately at https://puttingitclose.com/home/about/ and we will promptly delete it. COPPA Compliance: Our Service is not directed at children under 13, and we do not knowingly collect information from children under 13. We comply with the Children's Online Privacy Protection Act (COPPA).

  1. CALIFORNIA "SHINE THE LIGHT" LAW

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents have the right to request information about the disclosure of their personal information to third parties for direct marketing purposes. Our Disclosure: We do NOT share your personal information with third parties for their direct marketing purposes. Therefore, no disclosure is required under this law.

  1. NEVADA RESIDENTS

Nevada law (SB 220) requires website operators to provide a way for Nevada residents to opt-out of the sale of their personal information. Our Disclosure: We do NOT sell your personal information as defined by Nevada law. If you are a Nevada resident and have questions, you may contact us at https://puttingitclose.com/home/about/

  1. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. How We Notify You:

  • Material Changes: We will notify you via email at least 30 days before changes take effect
  • Minor Changes: We will update the "Last Updated" date at the top of this policy
  • Continued Use: Your continued use of the Service after changes take effect means you accept the updated policy

Your Rights: If you do not agree with changes to this policy, you may delete your account by contacting us. Version History: We maintain previous versions of this Privacy Policy. You may request prior versions by contacting us.

  1. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Putting It Close, LLC11320 West Radcliffe Drive Littleton, CO 80127Website Contact Form:https://puttingitclose.com/home/about/For Privacy-Specific Inquiries:

  • CCPA/CPRA Requests: California residents exercising rights under CCPA/CPRA
  • GDPR Requests: EU residents exercising rights under GDPR
  • General Privacy Questions: All users

Response Time:

  • We will acknowledge your request within 2 business days
  • We will provide a substantive response within 30-45 days depending on your jurisdiction
  1. DATA CONTROLLER INFORMATION (GDPR)

For the purposes of GDPR, the data controller is: Putting It Close, LLC11320 West Radcliffe Drive Littleton, CO 80127United State Representative for EU Data Subjects: For inquiries from EU data subjects, please use our contact form at https://puttingitclose.com/home/about/

  1. YOUR CONSENT

By using our Service, you consent to this Privacy Policy and agree to its terms. How to Withdraw Consent:

  • Delete your account
  • Contact us to request data deletion
  • Stop using the Service

END OF PRIVACY POLICY

This Privacy Policy is effective as of January 8, 2025, and complies with CCPA, CPRA, GDPR, CalOPPA, and other applicable privacy laws.