Golf N Go Inc. Privacy Policy

Effective date: November 2026 (version 2.0)

1. Who we are

Golf N Go Inc. ("Golf N Go", "we", "us") runs an indoor golf, batting cage, multi-sport and VR club at 9616 100 Street, Peace River, Alberta, open 4 AM to midnight. We handle personal information under Alberta's Personal Information Protection Act (PIPA) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). This policy explains what we collect, why, who we share it with, where it is stored, how long we keep it, and your rights.

2. What we collect

Contact and account details: name, phone, email, address, date of birth, emergency contact, and your GymMaster login.
Booking and membership history: bookings, memberships, hour packs, gift cards, check-ins and payments history, kept in GymMaster.
Payment details: Square processes all card payments. We don't see or store full card numbers. We see limited details such as card type and the last four digits.
Door access records: when your booking is used to open a door, which door, and the time.
Video surveillance: video recorded inside the club and at its entrances (section 5).
Waivers and eligibility answers: your signed waiver, your answers to our pre-visit questions (including yes or no health questions used only to decide whether the VR stations are safe for you), and a parent or guardian's details for any minor.
VR session information: which VR station and game you used, start and end times, and headset and treadmill status (section 4).
Website information: cookie and analytics data if you accept cookies (section 6).
Messages: emails, calls, texts and social media messages you send us.

3. Why we collect it

To create your account, take bookings and process payments.
To give you door access through your booking and keep the club secure as an unmanned facility.
To check age, height, weight and health eligibility for the VR stations and other activities.
To run VR sessions, keep the equipment working, and give support.
To look into incidents, damage, misuse or safety concerns.
To contact you about bookings, changes and your account.
To send news and offers, only if you agree. You can unsubscribe at any time.
To meet legal, insurance, tax and accounting requirements.

We collect only what we reasonably need for these purposes, and we don't use it for anything else without your consent unless the law allows it.

4. VR stations and Meta Quest headsets

Our VR stations use omnidirectional treadmills and Meta Quest headsets supplied by Golf N Go. The headsets are set up for venue use and are not signed in to your personal accounts. Please don't sign in to your own accounts on them.

What Golf N Go collects: your booking, which station and games you used, session times and length, and equipment status such as errors and battery level. We don't record what you see or say in the headset.

What Meta collects: Meta Quest headsets send device and usage data to Meta Platforms under Meta's own terms and policies: the Supplemental Meta Platforms Technologies Privacy Policy (meta.com/legal/quest/updated-privacy-policy) and the Meta Privacy Policy (facebook.com/privacy/policy). Game publishers and VR content platforms may also receive gameplay data under their own policies.

Meta is not responsible for the collection, use, storage or disclosure of information by Golf N Go related to your use of Meta products or the other software and experiences we provide.

5. Video surveillance

Video surveillance is in operation inside the club and at its entrances, for safety, security and to look into incidents and damage. Signs are posted at the entrances. There are no cameras in washrooms or change areas. The cameras store footage in the cloud and also keep a copy on SD cards in the cameras. Footage is not for public use.

Footage is kept for up to 30 days and then overwritten, unless we need it longer for an incident, claim or investigation. Only the owner and people authorized by the owner can view it. We share footage only with police, insurers or legal advisers when the law requires or allows it, for example after an incident. Security footage is never used for marketing.

6. Website, cookies and social media

golfngo.ca is hosted by GoDaddy (Airo). When you first visit, a banner asks whether you accept cookies. If you accept, GoDaddy analytics cookies measure how the site is used. If you decline, those cookies are not set. You can change your choice by clearing cookies in your browser.

We do not currently use the Meta (Facebook) pixel or other advertising trackers on golfngo.ca. If we add one, we will update this policy and ask for your consent through the cookie banner first.

If you interact with our Facebook or Instagram page, Meta handles that information under its own privacy policy. We see only what Meta shows page owners, such as your public name and the messages you send us.

7. Who we share it with

We share personal information only with the service providers that help run our business, and only what they need. We never sell personal information. We also share it with insurers, legal advisers, police or others when the law requires or allows it.

Our service providers, and where they say they store data:

GymMaster (Treshna Enterprises Ltd., New Zealand): bookings, accounts, memberships, waivers, door access. GymMaster says it stores data on servers close to the client, using hosting providers in the United States, Singapore, Australia and Germany, with daily backups at its head office in New Zealand and member email addresses on a central server in the United States for app logins. Its status page also lists a Toronto data centre. Golf N Go's data may be stored in any of these countries.
Sources: gymmaster.com/privacy-policy, gymmaster.com/gdpr, status.gymmaster.com

Square (Square Canada, Inc. and Block, Inc.): card payments. Square says personal information of Canadian users is primarily processed and stored in the United States, and may be transferred to the United Kingdom, the European Union, Australia, Japan and other countries where it operates.
Source: squareup.com/ca/en/legal/general/privacy (Canada section)

GoDaddy (GoDaddy Operating Company, LLC): website hosting (Airo), website forms and analytics. GoDaddy says personal data may be transferred from Canada to the United States and other jurisdictions, and is stored on its own systems and with service providers including Amazon Web Services.
Sources: godaddy.com/en-ca/legal/agreements/ca-supplemental-privacy-notice, godaddy.com/legal/agreements/privacy-policy

Meta Platforms (Meta Quest headsets, Facebook and Instagram): Meta says information may be transferred to, stored and processed in places where it has data centres, including the United States, Ireland, Denmark and Sweden, and in other countries where its partners and service providers are located.
Source: facebook.com/privacy/policy (How do we transfer information)

Microsoft 365 (email for golfngo.ca addresses): Microsoft stores email data in its data centres, which may be in Canada or in other countries.
Source: learn.microsoft.com/en-us/microsoft-365/enterprise/m365-dr-product-terms

Video surveillance system: records footage from the security cameras described above, stores it in the cloud, and also keeps a copy on SD cards in the cameras. Footage is not for public use.

Information stored outside Canada is subject to the laws of that country, and may be accessed by courts, law enforcement and national security authorities there. You can ask us for more information about our providers outside Canada by contacting us (section 12).

8. How long we keep it

Account and booking records: while your account is active, then up to 7 years, because tax law requires us to keep business records for 6 years after the end of the tax year they relate to.
Door access records: up to 1 year.
Video surveillance: up to 30 days, unless needed longer for an incident, claim or investigation.
VR session records: up to 1 year.
Signed waivers and eligibility answers: at least 7 years after your last visit. For a minor, until 7 years after they turn 18.
Marketing list: until you unsubscribe.

When we no longer need information, we destroy it securely or make it anonymous.

9. How we protect it

We use reasonable physical, technical and administrative safeguards, such as locked equipment, access controls, password-protected systems with two-step sign-in where available, and access limited to people who need it.

10. If there is a privacy breach

If personal information under our control is lost, accessed or disclosed without authority and a reasonable person would consider there is a real risk of significant harm to you, we will notify the Office of the Information and Privacy Commissioner of Alberta without unreasonable delay, and notify you directly as the Commissioner requires, as PIPA (section 34.1) sets out. We keep a record of every breach.

11. Children and minors

Golf N Go does not knowingly collect personal information directly from children under 14 online. A parent or guardian signs the waiver and gives the details of any minor in their group. Anyone under 16 must be with an adult (18+). VR stations are for ages 14 to 60, and players aged 14 to 17 must come with a parent or guardian who supervises them. Parents and guardians can ask to see or correct their child's information.

12. Your rights and how to contact us

You can ask to see the personal information we hold about you, ask us to correct it, ask questions about how we handle it or about our providers outside Canada, or withdraw your consent (subject to legal and contractual limits; for example, we need a signed waiver to let you play). We will reply within 45 days, as PIPA requires.

Privacy Officer: Ashley Furlong, President, Golf N Go Inc.
9616 100 Street, Peace River, Alberta
780-625-5775, ashley@golfngo.ca

If you are not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.

13. Changes to this policy

We may update this policy. The current version, with its effective date, is always posted at golfngo.ca/privacy.