Pro Shop Privacy Policy

Last Updated: 4/7/2023

Welcome! This Privacy Policy describes the information that is collected from the Pro Shop, when you browse the site or buy merchandise online, and the related content, platform, services, products, and other functionality offered on or through our services (collectively, our “Services”). This site is managed by Legends Global Merchandise, LLC., which is part of the Legends Hospitality group of companies (“Legends”, “we”, “us”), on behalf of the Golf Club named at the top of this Privacy Policy (the “Club”) and The Professional Golfers’ Association (the “PGA”).

A Note About Our Services. Data protection laws sometimes differentiate between “controllers” and “processors” of personal information. A “controller” determines why and how personal information is used. A “processor,” which is sometimes referred to as a “service provider”, processes personal information on behalf of a controller, subject to contractual restrictions. Legends operates the Services on behalf of and pursuant to our agreements with the Club and the PGA. When we process your personal information in connection with providing the Services, we act as a “processor” or “service provider” and have contractually committed ourselves to only process such information on behalf of the Club and the PGA.Please read this Privacy Policy carefully to understand how we will treat your information. In some cases, we may provide additional disclosures or privacy notices specific to certain products, services, or programs. Those additional disclosures supplement, and are to be read in conjunction with, this Privacy Policy.

TABLE OF CONTENTS

  • HOW WE COLLECT AND USE PERSONAL INFORMATION ABOUT YOU

  • DISCLOSURE OF PERSONAL INFORMATION

  • COOKIES AND OTHER TECHNOLOGIES

  • RETENTION OF PERSONAL INFORMATION

  • CONTROL OVER YOUR INFORMATION

  • CHILDREN’S PERSONAL INFORMATION

  • ADDITIONAL U.S. STATE PRIVACY DISCLOSURES

  • LINKS TO THIRD PARTY WEBSITES

  • UPDATES

  • CONTACT US

HOW WE COLLECT AND USE PERSONAL INFORMATION ABOUT YOU

Directly From YouWe may collect the following categories personal information submitted to us by individuals through the Services:

  • Contact Information, including first and last name and email address. We use this information to fulfill your request, to communicate with you directly, and to send you marketing communications in accordance with your preferences.

  • Account and Order Information, including first and last name, email address, phone number, billing address, and shipping address, order transaction information (post order) and any other information you provide to us. We use this information to administer your account, provide you with the relevant service and information, communicate with you regarding your account and your use of the Services, and for customer support purposes. Please note we utilize third-party providers to process payments on our behalf, including Stripe, and do not accept payment directly through our Services. As such, except for limited information connected to the transaction such as name, last four digits of the credit card number, and credit card expiration date, we do not retain any personally identifiable financial information in connection with credit card payments. Rather, all such information is provided directly by you to our third-party processor. The payment processor’s use of your personal information is governed by their privacy notice. To view Stripe’s privacy policy, please click here.

  • Inquiry and Communications Information, including information provided in custom messages sent through the forms, to one of our email addresses, or via phone. This also includes contact information provided on our Services. We use this information to investigate and respond to your inquiries, and to communicate with you, to enhance the services we offer to our users and to manage and grow our organization.

  • Marketing Emails, including email address and applicable interests and communication preferences. We use this information to manage our communications with you and send you information about products and services we think may be of interest to you. If you wish to stop receiving email messages from us, simply click the “unsubscribe link” provided at the bottom of the email communication. Note that you cannot unsubscribe from certain services-related email communications (e.g., account verification, confirmations of transactions, technical or legal notices).

  • Feedback Information, including feedback and ratings you provide relating to our Services or products. We use this information to communicate with you, to conduct market research, inform our marketing and advertising activities and improve and grow our business.

  • Business Representative Contact Information, including first and last name, business email address, business postal address, employer, job title, your area of responsibility, company name, phone number, your country or region and communication preferences. We use this information to fulfill your request or transaction, to communicate with you directly, and to send you marketing communications in accordance with your preferences. We may also collect some or all of this information in connection with the performance of the agreement or potential agreement with us, as well as any other information related to the performance of any agreement with us.

You may provide us with personal information in a number of ways, such as when you:

  • Sign up and/or create an account, fill out forms or otherwise engage with our Services;

  • Communicate with us by e-mail or phone;

  • Report a problem or request support for any of our Services;

  • Buy merchandise from us online via our Services;

  • Browse our website; and

  • Participate in customer service surveys.

Information We Collect From Third PartiesWe work closely with third parties and may receive information about you from them. We obtain the same categories of personal information described above from other sources, which we often combine with personal information we collect either automatically or directly from an individual, including:

  • Your Employer / Company: If you interact with our Services through your employer or company, or if your company provides us with your contact details, we may receive your information from your employer or company, including another representative of your employer or company. We use this information to operate, maintain, and provide to you the features and functionality of the Services.

  • Service Providers: Our service providers that perform services solely on our behalf, such as survey and marketing providers and payment processors, collect personal information and often share some or all of this information with us. The information may include contact information, demographic information, payment information, information about your communications and related activities, and information about your orders. We may use this information to administer and facilitate our services, your orders, and our marketing activities.

  • The Club and the PGA: We may receive your information from the Club and the PGA. We may use this information to administer and facilitate the Services.

Information We Collect Automatically

As is true of most digital platforms, we may also collect certain personal information automatically when you visit our Services, including:

  • Log File Data, including your internet protocol (IP) address, operating system, browser type, browser id, date/time of visit, and pages visited.

  • Analytics Data, including the electronic path you take to the Services, through the Services and when exiting the Services, as well as your usage and activity on the Services, such as the links and object you view, click or otherwise interact with (also known as “Clickstream Data”).

  • Location Data, including your general geographic location based on your IP address.

We and our third-party providers may use (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies to automatically collect this personal information. For more information about these practices and your choices regarding cookies, please see the Cookies and Other Technologies and Control Over Your Information sections of the Privacy Policy.Additional Uses of Personal InformationWe may also use the information we have about you to:

  • Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to deliver the Services you have requested and to process transactions;

  • Fulfill the shipment of the goods and services you order;

  • Manage our organization and its day-to-day operations;

  • Communicate with you, including via email or telephone calls;

  • Request individuals to complete surveys about our organization, organizations we partner with, and the Services;

  • Administer, improve and personalize our Services, including by recognizing an individual and remembering their information when they return to our Services;

  • Identify and analyze how individuals use our Services;

  • Conduct research and analytics on our customer and user base and our Services;

  • Improve and customize our Services to address the needs and interests of our user base and other individuals we interact with;

  • To send you marketing emails in connection the Services;

  • Test, enhance, update and monitor the Services, or diagnose or fix technology problems;

  • Help maintain the safety, security and integrity of our property and Services, technology assets and business;

  • To fulfill any other purpose for which you provide personal information;

  • For any other lawful purpose, or other purpose that you consent to;

  • as necessary if we believe there has been a breach of the Terms of Use or other agreement or the rights of any third party; or

  • to comply with contractual, legal and/or regulatory requirements.

We may combine information we receive from other sources with information you give to us and information we collect about you. We use this combined information for the purposes set out above.

DISCLOSURE OF PERSONAL INFORMATION

We may share, transmit, disclose, grant access to, make available, and provide your personal information with third parties, as follows:

  • Customer Service and Communication Providers: We share personal information with third parties who assist us in providing our customer services and facilitating our communications with individuals that submit inquiries.

  • Other Service Providers: In addition to the third parties identified above, we engage other third-party service providers, including our affiliates, that perform business or operational services for us or on our behalf, such as website hosting, infrastructure provisioning, IT services, analytics services, shipping fulfillment and logistics services, payment processing services, and administrative services.

  • PGA and the Club: We may share personal information with the PGA and the Club, pursuant to our agreement with them. PGA and the Club will use your information for their own business and commercial purposes.

  • Your Employer / Company: If you interact with our Services through your employer or company, we may disclose your information to your employer or company, including another representative of your employer or company. Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third-party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.

  • Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:

    • in connection with the establishment, exercise, or defense of legal claims;

    • to comply with laws or to respond to lawful requests and legal process;

    • to protect our rights and property and the rights and property of others, including to enforce our agreements and policies;

    • to detect, suppress, or prevent fraud;

    • to protect the health and safety of us and others; or

    • as otherwise required by applicable law.

  • With Your Consent: We may disclose personal information about an individual to certain other third parties or publicly with their consent or direction. For example, with an individual’s consent or direction we may post their testimonial on our Sites or service-related publications.

COOKIES AND OTHER TECHNOLOGIES

We, and our third-party partners, automatically collect certain types of usage information when you visit our Services, read our emails, or otherwise engage with us. We typically collect this information through a variety of tracking technologies, including cookies, web beacons, embedded scripts, location-identifying technologies, file information, and similar technology (collectively, “tracking technologies”). For example, we collect information about your device and its software, such as your IP address, browser type, Internet service provider, platform type, device type, operating system, date and time stamp, a unique ID (that allows us to uniquely identify your browser, mobile device, or your account), and other such information. We also collect information about the way you use our Services, for example, the site from which you came and the site to which you are going when you leave our website, the pages you visit, the links you click, how frequently you access the Services, whether you open emails or click the links contained in emails, and other actions you take on the Services. Most internet browsers allow you to remove or manage cookie functions and adjust your privacy and security preferences. For information on how to do this, access the “help” menu on your internet browser, or access http://www.aboutcookies.org/how-to-control-cookies. Please note, however, that disabling our cookies may mean that you will not be able to take full advantage of the Services.We use or may use the data collected through these technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information, including targeted content; (c) recognize and contact you across multiple devices; (d) provide and monitor the effectiveness of our Services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our Services; (f) diagnose or fix technology problems; and (g) otherwise to plan for and enhance our Services. Google Analytics.We may use Google Analytics to recognize you and link the devices you use when you visit our site or Services on your browser, log in to your account on our Services, or otherwise engage with us. We share a unique identifier, like a user ID or hashed e-mail address, with Google to facilitate the service. Google Analytics allows us to better understand how our users interact with our Services and to tailor our advertisements and content to you. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google's site “How Google uses data when you use our partners’ sites or apps” located at www.google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Ad-On here https://tools.google.com/dlpage/gaoptout/.

RETENTION OF PERSONAL INFORMATION

We collect, store, and use your data as long as you remain a customer of Legends and in compliance with our legal obligations to retain certain types of data, such as for tax purposes, and legitimate business interests. We review our retention periods for personal information on a regular basis.To determine the appropriate duration of the retention of personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting and other applicable obligations. Therefore, we retain personal information for as long as the individual continues to use our Services for the purposes explained in the How We Collect and Use Personal Information About You section above. When an individual discontinues the use of our Services, we will retain their personal information for as long as necessary to comply with our legal obligations, to resolve disputes and defend claims, as well as, for any additional internal business purposes. In particular, we will retain any other personal information supplied during the duration of an individual’s contract with us for the Services until the statutory limitation periods have expired, when this is necessary for the establishment, exercise or defense of legal claims.Once retention of the personal information is no longer necessary for the purposes outlined above, we will either delete or deidentify the personal information or, where personal information has been stored in backup archives, we will securely store the personal information and isolate it from further processing until deletion or deidentification is possible.

CONTROL OVER YOUR INFORMATION

You may control your information in the following ways:

  • Email Communications Preferences.

    You can stop receiving promotional email communications from us by clicking on the “unsubscribe” link provided in such communications. You may not opt-out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Services, technical and security notices).

  • Modifying or Deleting Your Information

    . If you have an online account with us, you have the ability to modify or delete certain information in your account (e.g., your contact information) through the “settings” options provided on the Site. If you have any questions about reviewing, modifying, or deleting your information, you can contact us directly at dataprivacy@legends.net or by calling (888)590-0006. We may not be able to modify or delete your information in all circumstances.

  • Cookies:

    If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note that doing so may negatively impact your experience using the Services, as some features and services on our Services may not work properly. Depending on your mobile device and operating system, you may not be able to delete or block all cookies. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.

CHILDREN’S PERSONAL INFORMATION

Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 16. If an individual is under the age of 16, they should not use our Services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 16 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 16, we will promptly delete that personal information.

ADDITIONAL U.S. STATE PRIVACY DISCLOSURES

These Additional U.S. State Privacy Disclosures (the “Disclosures”) supplement the information contained in our privacy policy by providing additional information about our personal information processing practices relating to individual residents of the States of California, Colorado, Connecticut, Utah, and Virginia, and other states as set forth below. For a detailed description of how we collect, use, disclose, and otherwise process personal information in connection with our services, please visit our privacy policy. Unless otherwise expressly stated, all terms defined in our privacy policy retain the same meaning in these Disclosures.If you are a resident of Nevada, please note Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. To submit such a request please email dataprivacy@legends.net.

Personal Information Collection

We collect various categories of personal information in connection with our services. Please review the How We Collect and Use Personal Information About You section above to learn more about the personal information we collect, how we use personal information, and the sources from which we collect or receive personal information.

Disclosure of Personal Information

As described in the Disclosure of Personal Information section of our Privacy Policy above, we disclose personal information with a variety of third parties for business purposes. In the previous 12 months, we have disclosed for a business purpose all of the categories of personal information we collect, explained above, to third parties.With regards to the personal information we collect on behalf of the Club and PGA as part of the Services, (1) we do not sell your personal information or share your personal information with third parties for targeted advertising purposes; and (2) in the previous 12 months, we have not sold or shared your personal information with third parties for targeted advertising purposes.

Sensitive Information

The following personal information elements we collect may be classified as “sensitive” under certain privacy laws (“sensitive information”):

  • Account log-in and debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;

We use this sensitive information for the purposes set forth in our Privacy Policy. We do not use or disclose sensitive information for any purpose other than for what would reasonably be expected in connection with the Services, for detecting security incidents, fraud and other illegal actions, or for short term transient use. We do not sell sensitive information, and we do not process or otherwise share sensitive information for the purpose of targeted advertising.

Deidentified Information

We may at times receive, or process personal information to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.

Your Privacy Choices

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:

The Right to Know

The right to confirm whether we are processing personal information about you and, under California law only, to obtain certain personalized details about the personal information we have collected about you, including:

  • The categories of personal information collected;

  • The categories of sources of the personal information;

  • The purposes for which the personal information were collected;

  • The categories of personal information disclosed to third parties (if any), and the categories of recipients to whom the personal information were disclosed;

  • The categories of personal information shared for cross-context behavioral advertising purposes (if any), and the categories of recipients to whom the personal information were disclosed for those purposes; and

  • The categories of personal information sold (if any), and the categories of third parties to whom the personal information were sold.

The Right to Access & Portability

The right to obtain access to the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.

The Right to Correction

The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.

The Right to DeletionThe right to have us delete the personal information we maintain about you.

"Shine the Light"California residents that have an established business relationship with us have rights to know how their personal information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law, or the right to opt out of such practices. We do not share personal information with third parties for the third parties’ direct marketing purposes (Civ. Code §1798.83).Depending on your state of residency, you may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.

How to Exercise Your Rights.

This section pertains specifically to the exercising of your individual rights with regards to the personal information Legends holds about you on behalf of the Club and the PGA.To submit a request to exercise one of the privacy rights identified above:

Verification Process and Required Information

All requests must be verified. In order to verify your identify, we will generally either require the successful authentication of your membership, or the matching of sufficient information you provide us to the information we maintain about you in our systems. As a result, we may require requests to include your order number and/or email address, or a single use 6-digit code. In certain circumstances, we may decline a privacy rights request, particularly where you are not a resident of one of the eligible states or where we are unable to verify your identity.

Appealing Privacy Right Decisions

Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. If you wish to appeal a decision regarding your rights, please contact us at dataprivacy@legends.net.

  • Colorado Residents: If your appeal is denied, you may contact the Colorado Attorney General to address your concerns here.

  • Connecticut Residents: If your appeal is denied, you may contact the Connecticut Attorney General to submit a complaint here.

  • Virginia Residents: If your appeal is denied, you may contact the Virginia Attorney General to submit a complaint here.

Authorized Agent

In certain circumstances, you may designate an authorized agent to make a request on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of (i) written documentation of their authority to act on your behalf, such as a Power of Attorney or (2) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.California-Specific Disclosures The following disclosures only apply to residents of the State of California.

California Categories of Personal Information

California law requires we provide disclosures to you about what personal information we collect by reference to the enumerated categories of personal information set forth within California law. To address this obligation, we have identified the relevant enumerated California personal information category for the personal information described in the How We Collect and Use Personal Information About You section above. In the previous 12 months, we have collected the following categories of personal information:

  • Identifiers, including name, unique personal identifiers, customer number, email address, or account name.

  • Customer records, including address, telephone number, or employment.

  • Commercial Information, including purchase history and/or purchasing or order history and tendencies.

  • Internet/Network Information, including browsing history, search history, information regarding your interaction with our Services.

  • Sensory information, such as recordings of any phone calls between you and Legends.

  • Professional and Employment Information, including your job title and organization name.

  • Inferences, including any predictions about interests and preferences and related information.

  • Geolocation Information, such as your approximate location based upon your IP address or your address for order fulfillment purposes.

For information on how we disclose this information, please see the Disclosure of Personal Information section of these Disclosures.

Minors

We do not sell the personal information of and do not have actual knowledge that we sell the personal information of minors under 16 years of age. If you are under the age of 18 and you want to remove your name or comments from our website or publicly displayed content, please contact us directly at dataprivacy@legends.net. We may not be able to modify or delete your information in all circumstances.If you wish to submit a privacy request on behalf of your minor child in accordance with applicable jurisdictional laws, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and you are authorized to submit the request on your child’s behalf (i.e. you are the child’s legal guardian or authorized representative).

Our Services, newsletters, email updates and other communications may, from time to time, contain links to and from the websites of others, including our partner networks, retail partners, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.

UPDATES TO OUR PRIVACY POLICY

We will update this Privacy Policy from time to time. Any updates we may make to our Privacy Policy will be posted on this page, we will update the “Last Updated” date at the beginning of this Privacy Policy. If we make material changes to this Privacy Policy, we will notify individuals by email to their registered email address, by providing a prominent notice on our Services, or through other appropriate communication channels. Please check back frequently to see any updates or changes to our Privacy Policy. All changes shall be effective from the date of publication unless otherwise provided for. If you do not agree or consent to these updates or changes, do not continue to use the Services.

CONTACT US

Questions or comments regarding this Privacy Policy should be emailed to dataprivacy@legends.net or mailed to us at: Legends Hospitality, LLC Attn: Data Protection Officer 61 Broadway, Suite 2400 New York, NY 10060