Privacy Policy for California Oaks Golf Club

California Oaks Golf Club (“we,” “us,” or “our”) is firmly committed to protecting the privacy and personal data of our users, visitors, and customers. This Privacy Policy outlines the types of personal information collected through our website, californiaoaksgc.com (the “Site”), our practices regarding the use, storage and sharing of that information, and the rights individuals may exercise under applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Commitment to Privacy and Data Protection

We recognize the importance of safeguarding personal data and maintaining the trust of our community. We handle all personal data with the utmost care, integrity, and in accordance with best practices and applicable legal requirements. Our data handling and privacy framework are designed to ensure transparency, accountability, and a privacy-first user experience.

2. Scope of This Policy and Our Role as Data Controller

This Privacy Policy applies to all personal data collected through californiaoaksgc.com, including when users interact with the Site, make transactions, submit forms, or sign up for services. We act as the “data controller” within the scope of the GDPR and the “business” under the CCPA. This means that we determine the purposes for and manner in which your data is processed.

By using our Site, you acknowledge the practices described in this Policy.

3. Categories of Personal Data We Process

We may collect, use, store, and otherwise process the following categories of personal data:

– Usage Data: Information related to how users interact with californiaoaksgc.com, including browser type and version, IP address, pages visited, session duration, and referral URLs.
– Account Data: Basic user identification details such as full name, physical address, email address, and telephone number provided when creating or updating an account or filling out forms.
– Profile Data: User preferences, booking history, purchase behavior, and information on services or products browsed.
– Communication Data: Records of communications between you and us, including customer support queries, form submissions, and email exchanges.
– Technical Data: Device type, operating system, platform data, screen resolution, language settings, and other configurations derived from interaction with the Site.
– Transaction Data: Payment details (secured via third-party payment processors), billing addresses, and delivery or fulfillment-related data.
– Preference Data: Newsletter sign-up status, communications preferences, event participation, marketing consents, and information concerning product or service interests.

4. Legal Bases for Processing

We rely on several legal grounds under data protection laws to process personal data:

– Consent: When you voluntarily provide information or opt in to marketing communications.
– Contractual Necessity: Where data processing is necessary to fulfill a contract or service request, such as confirming tee times or processing payments.
– Legitimate Interests: To operate californiaoaksgc.com, improve user experience, secure the Site, respond to inquiries, and prevent fraud, unless your rights override our interest.
– Legal Obligation: To comply with applicable laws, regulations, or lawful legal demands.

5. Your Rights under GDPR and CCPA

As permitted or required by law, individuals have various rights concerning their data:

– Right of Access: Request details on the personal data we hold about you.
– Right to Rectification: Correct incomplete or inaccurate information.
– Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to certain conditions.
– Right to Restriction: Ask for limited processing under certain circumstances.
– Right to Data Portability: Obtain your data in a structured, common format or request it be transferred to another controller.
– Right to Object (GDPR) / Opt-Out (CCPA): Object to certain forms of processing, including targeted marketing.
– Do Not Sell My Personal Information (CCPA): We do not sell your personal information. If this changes, we will update this notice and provide opt-out mechanisms.

To exercise your rights, please contact us at [email protected].

6. Security Measures

We implement robust technical and organizational safeguards to protect your data:

– Data encryption during transmission (SSL).
– Access controls based on user roles and necessity.
– Regular data backups with secure, separated storage.
– Staff access granted only on a need-to-know basis, supported by privacy training and confidentiality obligations.

Despite these efforts, no online system is entirely immune to threats. We commit to responding promptly to any incident that may impact your personal data.

7. International Data Transfers

If personal information is transferred beyond the jurisdiction where it was collected (e.g., from the EU to the United States), we ensure such transfers meet legal standards. This includes reliance on Standard Contractual Clauses or equivalent mechanisms validated by applicable authorities.

8. Data Retention

We retain personal data only as long as necessary for the purposes set out in this Policy. Retention periods vary:

– Usage and Technical Data: up to 12 months for analytics and security.
– Account and Contact Data: for the duration of the user relationship and up to 5 years after termination for legal or operational reasons.
– Transaction Data: minimum 7 years under applicable financial recordkeeping laws.
– Communication Data: up to 3 years from the last correspondence to ensure customer service continuity.
– Marketing and Preference Data: retained until you withdraw consent or opt out.

When data retention exceeds necessary duration, information is securely deleted or anonymized.

9. Cookie Policy

We use cookies and similar technologies to operate, personalize, and enhance your experience on californiaoaksgc.com:

– Essential Cookies: Necessary for the Site’s core functionality, including login and payment operations.
– Functional Cookies: Enable enhanced features like remembering preferences or stored settings.
– Analytics Cookies: Collect anonymized data for website usage and performance tracking (e.g., page load times, bounce rates).
– Performance and Optimization Cookies: Assist with detecting bugs or user-flow inefficiencies and improving the overall site quality.

10. Cookie Management & Compliance with GDPR and CCPA

Upon your visit, californiaoaksgc.com presents a cookie consent banner where you can accept or decline non-essential cookies. You may also control cookie collection through your browser settings or adjust preferences at any time through the “Cookie Settings” link available on our website.

Under CCPA, these settings also serve as part of your Do Not Sell or Share request, although, as noted, we do not sell personal data.

11. Special Protections for Children

californiaoaksgc.com is not intended for, and we do not knowingly collect personal data from, individuals under the age of 13. If we learn that we have collected personal data from a child without verified parental consent, such data will be immediately and securely deleted.

12. Policy Updates and Notification

This Privacy Policy may be updated from time to time to reflect legal, technical, or operational changes. We encourage you to review this policy periodically. Changes will be appropriately communicated if they materially affect how we use or handle personal information.

13. Contact Us

If you have questions, concerns, or would like to exercise any privacy rights, please contact us at:

Email: [email protected]
Website: https://www.californiaoaksgc.com

We are committed to full compliance with all applicable data protection regulations and welcome your feedback or inquiries regarding our privacy practices.