1) Who We Are & Scope

LoftLinks ("LoftLinks," "we," "us," "our") provides indoor golf training and related services. This Privacy Policy explains how we collect, use, disclose, and protect information when you:

• visit www.loftlinks.com or our other online properties (the "Site");
• book, purchase, or attend services (including through our booking platform provider);
• receive our emails/SMS or interact with our ads; and
• engage with us in-studio (including optional photos/video).

By using our services, you agree to this Policy and any posted updates.

2) Information We Collect

We collect information directly from you, automatically from your device, and from service providers/partners:

• Account & Booking Data — name, email, phone, billing address, booking history, membership/pack type, preferences.
• Payment Data — handled by our payment processor (e.g., last4, token, transaction IDs). We do not store full payment card numbers.
• Communications & Marketing — email/SMS opt-ins, campaign interactions, survey responses, support inquiries.
• Device/Usage Data — IP address, cookie IDs, device identifiers, browser type, pages viewed, links clicked, timestamps, referral URLs.
• Cookies/Similar Tech — cookies, pixels, and mobile SDKs for site functionality, analytics, and advertising.
• Media & In-Studio (optional) — photos or video captured during events/lessons if you consent. CCTV/Security cameras may operate in-studio for safety and loss prevention (see Section 10).
• Training/Session Telemetry — non-biometric swing/session metrics from simulator systems (e.g., club speed, ball speed, launch). We do not collect biometric identifiers (e.g., face geometry, fingerprints).
• Social/Referral Data — if you engage via social media or referral programs.
• School/Group Programs — limited participant/guardian details required to schedule and deliver junior programming.

3) How We Use Information

• provide, personalize, and improve services and the Site;
• process bookings, payments, and customer support;
• send transactional messages (confirmations, reminders, receipts);
• send marketing communications (email/SMS) with your consent or as permitted by law;
• conduct analytics, research, and service development;
• secure our systems; deter fraud and misuse; and
• comply with legal obligations and enforce our terms.

EU/UK visitors (if applicable): legal bases include performance of a contract, legitimate interests (e.g., security, analytics), consent (e.g., non-essential cookies/marketing), and legal obligations.

4) Cookies, Pixels & Ad Identifiers

We use the following categories:

• Strictly Necessary (core site functions),
• Performance/Analytics (audience measurement),
• Functional (preferences),
• Advertising (including cross-context behavioral advertising/remarketing).

Manage preferences via our Cookie Preferences link on the Site and your browser/device settings. Where required, we honor Global Privacy Control (GPC) signals.

5) Advertising & Analytics

We work with analytics and advertising partners (e.g., measurement, remarketing, attribution) that set cookies/IDs to understand performance and show relevant ads. In some U.S. states, this may be considered a "share" of personal information for cross-context behavioral advertising. See Your Privacy Rights to opt out of sale/share.

6) How We Disclose Information

We do not sell personal information for money. We may disclose information to:

• Service Providers/Processors (e.g., booking platform, payment processing, communications, analytics, security, cloud hosting) under contracts limiting their use to our instructions;
• Advertising/Analytics Partners for measurement and ad personalization (may be a "share");
• Business Transfers (e.g., merger, acquisition);
• Legal/Safety (to comply with law, protect rights, prevent fraud or misuse);
• With Your Direction/Consent (e.g., testimonials, photos).

7) Children's & Students' Privacy

We do not knowingly collect personal information from children under 13 without verifiable parental consent. For California residents aged 13–15, we obtain opt-in consent before any sale/share for advertising. For junior lessons or school-affiliated programs, parent/guardian contact and consent may be required; we do not use minors' information for targeted advertising. To request deletion or withdraw consent, contact privacy@loftlinks.com.

8) Your Privacy Rights (U.S.)

Depending on your state, you may have the right to:

• Know/Access the categories and specific pieces of personal information collected;
• Correct inaccuracies;
• Delete personal information;
• Opt-out of sale or share (cross-context behavioral advertising);
• Limit use of sensitive personal information (we do not use sensitive PI to infer characteristics);
• Portability of certain data;
• Appeal a rights decision (where applicable).

GPC: Valid Global Privacy Control signals are treated as an opt-out of sale/share for the browser/session that sends the signal.

9) Data Retention

We retain data for the shortest time needed to fulfill the purposes above, including:

• Accounts/Bookings: while active + up to 7 years for records, tax, or legal compliance;
• Marketing: until you opt out or after a defined inactivity window;
• Payment records: per financial/PCI obligations (we do not store full card PANs);
• Telemetry/Analytics: aggregated or anonymized where feasible;
• CCTV/Security: typically up to 5 days, then automatically overwritten, unless preservation is reasonably necessary for an investigation;
• Photos/Media: until consent is withdrawn or purpose is fulfilled.

10) Security

We use administrative, technical, and physical safeguards, including encryption in transit, access controls/least privilege, multi-factor authentication for staff systems where feasible, and vendor due diligence. No method is 100% secure; please keep your credentials confidential.

11) CCTV/Security Cameras

Our studio uses video cameras for safety and loss prevention. Footage is typically retained for up to 5 days and is automatically overwritten. We may preserve specific clips longer when reasonably necessary to investigate or respond to a safety, security, or legal matter. We do not record audio. Cameras are not used in restrooms or other highly private areas.

12) International Transfers (if applicable)

Where personal data is transferred outside your jurisdiction, we use appropriate safeguards (e.g., Standard Contractual Clauses).

13) Third-Party Links & Features

Our Site may link to third-party sites or include third-party tools. Their privacy practices govern those services—we encourage you to review their policies.

14) Changes to This Policy

We may update this Policy. Material changes will be posted on the Site (and, when required, emailed to you) with an updated "Effective date."

15) Contact Us

© 2025 LoftLinks. All Rights Reserved.