PRIVACY POLICY (GOLFER VERSION)

1. INTRODUCTION

Caddy Booking Co., Ltd. ("Caddy Booking", "we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use the Caddy Booking mobile application, website, and related services (collectively, the "Platform").

2. SCOPE

This Policy applies to golfers who create an account or otherwise interact with the Platform. Separate policies apply to caddies, employees, and business partners.

3. PERSONAL DATA WE COLLECT

• Account information: name, email, phone number, password, profile photo.
• Identity & payment: national ID (if required), billing address, card token or e-wallet ID.
• Booking details: tee time, golf course, selected caddy, special requests.
• Device & usage: IP address, OS version, device model, app interactions, crash logs.
• Location data (with your consent): GPS or network-based location while the app is running.
• Cookies & tracking: analytics SDKs, web cookies, pixels.

4. LEGAL BASES FOR PROCESSING

We process your data under the following legal bases:

• Contract – to provide booking services.
• Legitimate interest – to improve the Platform, prevent fraud, and secure our systems.
• Consent – for marketing communications and precise location data.
• Legal obligation – to comply with laws.

5. HOW WE USE YOUR DATA

• Provide services: create accounts, process bookings, facilitate payments, send confirmations.
• Customer support: respond to inquiries, troubleshoot, resolve disputes.
• Personalisation: recommend caddies or tee times based on your history.
• Analytics & improvements: analyse usage to enhance features and performance.
• Marketing: send promotions or surveys (only with your opt-in consent).
• Security & fraud prevention: monitor suspicious activity, enforce our Terms.

6. SHARING & DISCLOSURE

We never sell your data. We share it only as necessary:

• Caddies – to confirm bookings and coordinate tee-time changes.
• Payment processors – to complete transactions and issue refunds.
• Service providers – cloud hosting, analytics, customer-support tools.
• Golf courses / partners – when required to arrange your round or comply with clubhouse rules.
• Law enforcement / regulators – if legally compelled or to protect our rights.
• Corporate transactions – in the event of a merger, acquisition, or asset sale (with notice to you).

All third-party processors are bound by confidentiality and data-protection obligations.

7. DATA RETENTION

• Active account data – while your account remains open.
• Booking, payment, and tax records – 10 years (Thai accounting law).
• Logs & analytics – up to 24 months, aggregated or anonymised thereafter.

You may request deletion (see Section 9) subject to legal retention duties.

8. SECURITY MEASURES

HTTPS/TLS encryption in transit, AES-256 encryption at rest, role-based access controls, audit logs, and regular penetration testing. No system is 100% secure; please safeguard your credentials.

9. YOUR RIGHTS

Under the PDPA (and GDPR where applicable) you may exercise the following rights:

• Access – obtain a copy of your data.
• Correct – update inaccurate information.
• Delete – request erasure (exceptions apply).
• Restrict / object – limit or oppose certain processing.
• Data portability – receive data in a structured format.
• Withdraw consent – opt out of marketing at any time.

To exercise rights, email privacy@caddybooking.com. We will respond within 30 days.

10. COOKIES & MOBILE ANALYTICS

The app and website use first-party cookies and SDKs (e.g., Firebase, Adjust) for session management and analytics. You can reset your Advertising ID or disable tracking in your device settings.

11. INTERNATIONAL TRANSFERS

We store data on secure servers in Thailand and Singapore. When transferring data outside Thailand, we rely on standard contractual clauses or equivalent safeguards.

12. CHILDREN'S PRIVACY

The Platform is not directed to persons under 18. We do not knowingly collect data from minors. If we discover such data, we will delete it promptly.

13. CHANGES TO THIS POLICY

We may update this Policy periodically. Material changes will be notified via push notification, in-app banner, or email. Continued use after the effective date constitutes acceptance.

14. CONTACT US