Privacy Policy.

Effective date: May 2, 2026

Golfos Lab ("Golfos Lab," "we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit golfoslab.com (the "Site"), use our online booking or payment tools, connect to our on-site Wi-Fi, or visit our facility in Key Biscayne, Florida (together, the "Services").

If you do not agree with this Policy, please do not use the Services.

1. Who We Are & How to Contact Us

Controller: Golfos Lab
Location: 907 Crandon Blvd, Key Biscayne, FL 33149, USA
Email: info@golfoslab.com
Phone: (305) 363-7385

For privacy questions or rights requests, email us or write to: Privacy Department, Golfos Lab, 907 Crandon Blvd, Key Biscayne, FL 33149.

2. Scope

This Policy covers personal information we collect:

• Through our Site and online booking and payment pages;
• From communications with us (email, SMS, forms, social media);
• At our facility, including security cameras and swing-capture systems;
• From our guest Wi-Fi (network-level technical logs).

It does not cover third-party websites we link to. See "Third-Party Links" below.

3. Information We Collect

a) Information You Provide

• Contact and account information: name, email, phone number, address, age range (if relevant for waivers), emergency contact (optional).
• Bookings and purchases: session details, membership or package choices, gift cards, and order history.
• Payment information: we use third-party processors (e.g., Square, USchedule). We do not store full card numbers; tokens and limited billing details may be retained by us and our processors for receipts, refunds, and fraud prevention.
• Communications: emails, SMS, chat messages, reviews, and survey responses.
• Waivers and consent forms: signatures, acknowledgments, and timestamps.
• Media you share: photos, video clips, or swing data you upload or ask us to store.

b) Information Collected Automatically

• Device and usage data: IP address, device identifiers, browser type, pages viewed, referral URLs, and timestamps.
• Cookies and similar technologies: see "Cookies and Tracking" below.
• Approximate location: derived from IP address for security and analytics; we do not collect precise GPS location unless you grant permission in your device or browser.

c) In-Facility Cameras & Swing-Capture Systems

• Security cameras operate in public and common areas to protect guests, staff, and property.
• Swing-capture and lesson recordings may be created during simulator sessions for coaching, performance analysis, or a service you request. We will only use such recordings for coaching or operational purposes unless you give separate consent for marketing.

d) Guest Wi-Fi

If you join our Wi-Fi, the network may log device identifiers, IP and MAC address, sites and domains accessed (metadata, not content), connection times, and throughput in order to operate the network and protect against abuse.

e) Data from Partners

• Booking providers (e.g., Square, USchedule) send us your reservation details.
• Payment processors share transaction confirmations and fraud checks.
• Analytics and communications tools share aggregate metrics, deliverability status, and engagement (such as email opens, where your settings allow).

4. How We Use Information

We use personal information to:

• Provide the Services: process bookings, take payments, schedule sessions, issue receipts, and deliver swing-capture or lesson materials.
• Communicate: send confirmations, reminders, updates, and support; with your consent, send promotions or newsletters (you may opt out at any time).
• Improve and secure our Services: analytics, troubleshooting, fraud and abuse detection, service quality, and facility safety.
• Legal and compliance: tax and audit, contractual obligations, lawful requests, and to enforce our policies and terms.

If you are in the EEA or UK, our legal bases include contract, legitimate interests, consent (where required), and legal obligations.

5. How We Share Information

We do not sell personal information. We share it only as needed:

• Service providers and processors: website hosting, booking, payment processing, email and SMS, analytics, customer support, and security vendors — each bound by confidentiality and data-processing agreements.
• Coaches and instructors: access to your relevant booking and session information to deliver services.
• Business transfers: if we engage in a merger, financing, or sale of assets, your information may be transferred subject to this Policy.
• Legal and safety: to comply with law, enforce our terms, or protect rights, safety, or property.

If we ever begin using data for "targeted advertising" or any "sale" or "share" of personal information (as defined by certain state laws), we will update this Policy and provide the required opt-outs.

6. Cookies & Tracking

We use:

• Essential cookies for security, session management, and load balancing;
• Analytics cookies (e.g., Google Analytics) to understand site usage;
• Preference cookies to remember choices like language.

You can control cookies in your browser. Some jurisdictions recognize Global Privacy Control (GPC) signals as a valid opt-out of "sale" or "sharing" under California law; covered businesses must honor such signals. Where required or as a courtesy, we will treat a valid GPC signal as an opt-out of sale or sharing.

We currently do not respond to legacy "Do Not Track" (DNT) browser signals.

7. Data Retention

We retain information only as long as needed for the purposes in this Policy or as required by law. Typical periods:

• Bookings and receipts: seven years (tax and audit).
• Swing-capture and lesson media: ninety days by default; longer if you ask us to keep it or if it is stored in your client account.
• Security camera footage: approximately thirty to forty-five days, unless needed for an investigation.
• Website and Wi-Fi logs: up to twelve months for security and operations.
• Marketing lists: until you unsubscribe or your subscription becomes inactive (and is then deleted or anonymized).

8. Your Privacy Choices & Rights

Universal Choices

• Marketing: unsubscribe via the email footer or reply STOP to SMS to opt out. Transactional messages, such as booking confirmations, may still be sent.
• Cookies and analytics: adjust your browser settings or use built-in privacy controls.

State Privacy Rights (U.S.)

Depending on where you live, certain U.S. state laws give you rights to access, delete, correct, receive a copy, and opt out of targeted advertising or the sale or sharing of personal information. If applicable, you may exercise these rights by emailing info@golfoslab.com. If we decline a request, you may appeal by replying to our decision; we will review and respond within the time required by law.

California (CCPA / CPRA): California consumers have rights including access, deletion, correction, and the right to opt out of sale or sharing (including via GPC). We will not discriminate against you for exercising your rights.

Florida note: Florida's Digital Bill of Rights (FDBR) primarily targets very large technology companies (entities with over US$1 billion in global annual revenue meeting additional criteria). Most small businesses are outside its scope, but we respect Floridians' privacy and will respond to reasonable requests. If the FDBR becomes applicable to us, we will update this Policy.

EEA / UK Rights (GDPR)

If you are in the EEA or UK, you may have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where processing is based on consent. Controllers must facilitate requests; processors must assist controllers. International transfers outside the EEA use safeguards such as Standard Contractual Clauses (SCCs) where required.

To exercise any rights, contact us at info@golfoslab.com. We will verify your identity and respond within the timeframe required by applicable law.

9. Children's Privacy

Our Site is not directed to children under 13, and we do not knowingly collect personal information from them online. Parents and guardians may book sessions for minors; in those cases, we process the parent or guardian's information and limited minor details strictly to provide the requested services. If you believe we collected a child's data in error, contact info@golfoslab.com and we will delete it.

10. Security

We employ administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit, secure payment processing, and staff training. No system is one hundred percent secure; please use strong passwords and notify us promptly of any suspected unauthorized access.

11. International Visitors

Our systems are hosted in the United States. If you access the Services from outside the U.S., your information may be processed in the U.S. and other countries with different data-protection laws. Where required for EEA or UK data, we use lawful transfer tools such as Standard Contractual Clauses.

12. SMS & Email Communications

By providing your email or mobile number, you agree we may send you transactional messages such as booking confirmations and reminders. Marketing messages require your consent where required by law and include an opt-out (email "unsubscribe"; SMS reply STOP). Message and data rates may apply.

13. Third-Party Links and Tools

The Services may link to third-party websites or integrate third-party tools (e.g., booking, payments, analytics). Those parties' privacy practices govern their handling of your data. Review their privacy policies before providing information. Examples you may encounter include:

• Booking: Square, USchedule
• Payments: Square, USchedule
• Analytics: Google Analytics

14. Changes to this Policy

We may update this Policy to reflect changes to our practices or the law. We will post the updated version with a new effective date and, where required, notify you. Your continued use of the Services after an update means you accept the revised Policy.

15. How to Reach Us

Questions, concerns, or rights requests:
Email: info@golfoslab.com
Mail: Attn: Privacy Officer, Golfos Lab, 907 Crandon Blvd, Key Biscayne, FL 33149, USA