Menu

Privacy Policy for PuttScores LLC

Effective Date: October 1, 2026

This Privacy Policy explains how PuttScores LLC ("PuttScores," "we," "us," or "our") handles personal information through puttscores.com and our mini-golf software and related services (the "Service"). It covers website visitors, account holders, staff, players, booking and purchasing customers, waiver participants, photo users, and people who contact us.

Our role and the course's role. We determine how information is used for our own account administration, billing, support, security, and website operations. A course or venue operator often determines why player, booking, order, staff, and waiver information is collected through its use of PuttScores. For those activities, we may process information on the operator's behalf, subject to the applicable agreement and law. The operator's own privacy notice also applies to its activities, including exports and use outside PuttScores. Contact the operator about its records or contact us for help identifying the responsible party.

This policy provides information about our practices. It is not a blanket request for consent, and using the Service does not waive privacy rights. Particular rights and obligations depend on the law applicable to the processing, including, where applicable, the GDPR, UK data protection law, Australian Privacy Act 1988, New Zealand Privacy Act 2020, and relevant United States laws.

Quick links: Information collected · Sharing · Retention · Your rights · Children · Cookies · Contact

1. Information We Collect

Information comes from you, the operator or organizer you interact with, people acting on your behalf, your device, and enabled service providers. The categories collected depend on the features you use; not every person provides every category below.

Personal Information Collected Directly

Only provide another person's information when you are authorized to do so and have given any required notice. Do not enter payment-card security codes, passwords, government identifiers, health details, or other sensitive information into free-text fields unless specifically necessary for a lawful, supported purpose.

Information Collected Automatically

Information from Third Parties

Information required to administer an account, complete a purchase, deliver a requested feature, or meet a legal obligation must be provided for that purpose. If you decline it, we or the operator may be unable to provide that function. Optional marketing, photo-sharing, and device permissions should be considered separately from information needed for the underlying transaction.

2. How We Use Your Information

We use your personal information for the following purposes:

Scoring, rankings, reports, and some assistance are generated automatically from submitted data and course settings. Contact us or the relevant operator if a result or account decision appears incorrect. AI output may be inaccurate; it should be reviewed before being used to make a decision about a person.

3. Legal Basis for Processing Personal Information

Where the GDPR or UK data protection law applies and we determine the purposes of processing, the appropriate legal basis depends on the activity:

A Course Operator determines the legal basis for activities it controls. A contract with an operator does not automatically make contractual necessity the basis for every use of a player's information. Special-category information, if processed, requires an additional applicable legal condition; accepting this policy alone does not supply that condition.

4. Disclosure of Your Information

We may share your personal information with:

Some recipients process information on our or an operator's behalf; others, such as a payment provider acting for its own legal and fraud-prevention purposes, may have independent obligations. An operator's connected account may be governed by that operator's provider agreement. Provider access is not a blanket authorization to use information for unrelated purposes.

We may use or share aggregate information that does not reasonably identify an individual for reporting and analysis. Where information remains identifiable or can reasonably be linked to a person, this policy and applicable law continue to apply.

5. International Data Transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.

PuttScores operates from the United States, and information may be processed in the United States and other countries where relevant providers operate. An operator's selected integrations can affect the destination of information.

Where applicable law restricts an international transfer, a valid transfer mechanism is required. Depending on the recipient and jurisdiction, this may involve an applicable adequacy decision, approved contractual safeguards, or another legally permitted mechanism. Contact us for information about the destinations and safeguards applicable to your processing and, where available, a copy of relevant safeguards. This policy does not itself constitute a transfer agreement, certification, or consent to a transfer that otherwise requires a separate legal basis.

6. Data Security

We take reasonable administrative, technical, and physical measures to safeguard your personal information against unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Protect your credentials, staff PINs, connected-provider keys, and shared devices, and grant access only to people who need it. Do not put sensitive information into public names, reviews, or shared links. Contact us promptly about suspected unauthorized access. Where an incident requires notification under applicable law, the responsible organization must provide that notification; this policy does not limit those obligations.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including legal, accounting, or reporting requirements.

Retention depends on the record and its purpose. Relevant criteria include whether an account or customer relationship remains active; whether the information is needed to provide the requested feature; operator instructions; transaction, tax, and accounting requirements; waiver and consent evidence; security investigations; and applicable limitation periods or legal holds. There is no single retention period for every category.

Some features have their own expiration settings. For example, photo-booth delivery records are configured to expire after 30 days. Expiration of that record is not a guarantee that the underlying image has also been removed from an operator's Cloudinary account, an email, a download, or a backup. Contact the operator about copies and provider accounts it controls.

Subscription cancellation does not by itself delete personal information. Account closure or a deletion request may still leave records that must be retained for a lawful purpose. Backups, legal holds, and records controlled by an operator or independent provider may require separate handling. We do not promise immediate deletion from every system or indefinite availability of exports.

When we no longer require your personal information, we will securely delete or anonymize it in accordance with applicable laws and regulations.

8. Your Rights

Rights depend on the law applicable to your information and may be subject to conditions or exemptions. You can contact [email protected] to ask about your information or exercise applicable rights.

EU/EEA and United Kingdom

Where applicable data protection law provides these rights, you may:

Object to direct marketing: You may object to the use of your personal information for direct marketing, including related profiling, at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

Under Australian Privacy Act 1988 (for Australian Residents):

You have the right to:

Under New Zealand Privacy Act 2020 (for New Zealand Residents):

You have the right to:

United States

Depending on your state and whether the relevant law applies, you may have rights to know about, access, correct, delete, or obtain a portable copy of personal information; opt out of sale, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling; limit particular uses of sensitive information; and appeal a denied request. These rights are not identical in every state. The disclosures in Section 4 describe recipients, but the legal classification of a disclosure depends on its circumstances.

Making a request

Identify the right you wish to exercise and the account, course, transaction, or approximate date that will help locate the information. We may request proportionate information to verify your identity and, for an authorized agent, their authority. Do not send identity documents or sensitive information unless requested through an appropriate process. We will respond within the period required by applicable law and explain any permitted refusal, extension, or fee and available appeal or complaint options. We will not unlawfully discriminate against you for exercising a privacy right.

If a course controls the information, you may contact it directly. We may refer or forward the request to that operator and assist as required by our role and applicable law. Deletion is not absolute: information may be retained where a legal obligation or applicable exception permits it.

Communication and device choices

Use the unsubscribe option in a marketing email or contact the sender to withdraw from its marketing. You may still receive necessary receipts, security alerts, and other service communications. Manage camera and location access through your browser or device. Refusing optional permissions may disable the related feature without necessarily preventing other uses of the Service.

9. Children's Privacy

Independent use of the Service is subject to the minimum age of 16 in our Terms of Service. However, a course, organizer, or parent or guardian may provide a child's participant information in a booking, scorecard, or waiver. Waiver records may include a date of birth, emergency contact, and guardian information. The existence of those records means that an account age restriction is not a statement that the Service never processes information about children.

Operators must provide appropriate notices and establish any legally required parental authorization or other lawful basis before submitting a child's information. A guardian's signature on a participation waiver is not automatically consent for unrelated marketing, public photo use, or every form of personal-information processing. Where the U.S. Children's Online Privacy Protection Act applies to collection from children under 13, its notice, parental-consent, and other requirements apply; this policy does not replace that process.

If you believe a child has submitted information without required authorization, contact us and identify the relevant course and record. A parent or guardian may request information about, correction or deletion of, or cessation of further collection of their child's information, subject to verification and applicable law. We will investigate and coordinate with the responsible operator where appropriate.

10. Cookies and Tracking Technologies

Cookies, local storage, and similar technologies can retain information on your device or send information when a page loads. Their use varies between public pages, logged-in dashboards, scorecards, and kiosk displays.

Your analytics choice: Google Analytics stays off until you select "Accept." "Decline Non-Essential" keeps it off. You can change your choice below. Withdrawing consent disables further Google Analytics collection and removes its accessible cookies on this site; it does not undo information already sent while consent was active. Essential session, payment, and game functions do not depend on accepting optional analytics.

You can also delete stored cookies and site data or adjust browser settings to block particular storage and requests. Choices may need to be repeated on another browser or device. A browser's Do Not Track setting or other privacy signal should not be assumed to configure every integration. Contact us to exercise an applicable opt-out right or ask about a particular signal; any legal obligation to honor a recognized signal remains applicable. Browser controls may affect sign-in, saved game state, or other functions.

11. Third-Party Links

Our Service may contain links to third-party websites or services that are not owned or controlled by us. This Privacy Policy does not apply to those third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

Course websites, sponsorship links, payment pages, and operator-selected integrations may have their own notices. This distinction does not remove our responsibility for disclosures we make or for providers acting on our behalf.

12. Changes to This Privacy Policy

We may update this policy as practices, features, or legal requirements change. We will post the revised policy with an updated effective date. For material changes, we will provide any additional notice required by law, such as an account notice or email.

A policy update does not automatically authorize a new, incompatible use of previously collected information. Where a change requires consent or another legal step, that requirement must be met; continued use alone is not a substitute.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

PuttScores LLC
Email: [email protected]

Use a subject such as "Privacy request" and include enough information to identify the relevant account or course. For records controlled by a venue, its own contact details and privacy notice are also relevant. Do not include passwords or full payment-card details.

14. Complaints

EU/EEA Residents:

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal information violates the GDPR.

Where applicable, you may complain to the authority where you live, work, or believe an infringement occurred. UK concerns may be raised with the Information Commissioner's Office. Contacting us first does not remove a right to approach a regulator directly.

Australian Residents:

If you have a complaint regarding our handling of your personal information, please contact us. If it remains unresolved, you may be able to complain to the Office of the Australian Information Commissioner (OAIC), subject to its complaint process and applicable law.

New Zealand Residents:

If you have a complaint about our privacy practices, please contact us. If it remains unresolved, you may contact the Office of the Privacy Commissioner, subject to its complaint process and applicable law.

Residents of other jurisdictions may contact their applicable privacy or consumer-protection authority. Where a law gives you a right to appeal our response, email us with "Privacy appeal" and the original request details so it can be reviewed.

15. Consent to Processing

Where processing relies on consent, it must relate to the specific purpose explained when consent is requested. A transaction, waiver signature, or agreement to the Terms does not by itself authorize unrelated marketing or public photo use. A consent choice made for one operator does not automatically apply to another.

You may withdraw consent using the relevant feature or communication control, or by contacting us or the responsible operator. Withdrawal applies going forward; it does not undo prior lawful processing or prevent processing required on another valid legal basis. Some requested features cannot continue without information necessary to provide them.

16. Definitions

17. Governing Law

The Delaware governing-law provision in our Terms of Service does not displace mandatory privacy laws, regulatory powers, or rights available under the law applicable to your information. Nothing in this policy requires you to waive those protections.