Effective Date: Sept. 11 2026
Flagstik LLC, doing business as Flagstik (“Flagstik,” “we,” “us,” or “our”), explains in this Privacy Policy how we collect, use, disclose, and retain personal information when you visit flagstik.com, use Flagstik Pro or related services that link to this policy, or communicate with us. It also explains your choices and how to contact us about your information.
1. Who This Policy Covers
This policy covers website visitors, prospective and current business customers, golf course staff, and golfers using our services. Our services include website design and hosting, branding, photography, digital marketing, and golf course software for bookings, customer and membership records, payments, and communications.
When we handle information for our own business purposes, such as answering inquiries, managing Flagstik accounts, billing customers, and protecting our services, Flagstik is responsible for that processing.
When a golf course uses our services to manage its golfers, members, bookings, or campaigns, we generally process that information on the course’s behalf and under its instructions. The course is responsible for its own information practices, notices, and permissions. Its privacy policy also applies.
Contact the course about its records or communications. You may also contact us for help identifying the appropriate course or handling information for which Flagstik is responsible.
2. Information We Collect
The information we collect depends on how you interact with us and which features a golf course uses.
Contact and business information: Your name, email address, phone number, mailing address, golf course or organization name, job role, service interests, and information you provide in forms or correspondence.
Account information: Login identifiers, password hashes, account verification and recovery information, authentication records, staff roles, permissions, and account preferences.
Booking and membership information: Golfer and additional player names, contact details, tee times, booking history, cancellations, attendance, membership numbers and status, and requests or notes entered by you or a course. Course records may include no-show, dispute, or fraud-related flags and notes.
Transaction information: Purchases, orders, invoices, subscriptions, payment amounts and status, refunds, transaction identifiers, billing details, and limited payment method details such as card brand and last four digits. Payment providers collect payment credentials through their payment interfaces.
Communications and submitted content: Support requests, attachments, screenshots, project materials, uploaded images, feedback, AI feature inputs and outputs, and other content you choose to provide. This content may contain personal information.
Technical and usage information: IP address, browser and device information, approximate location derived from network information, pages and features used, referring pages, timestamps, and diagnostic or security logs. Email records may include delivery, bounce, and unsubscribe activity and, where enabled, opening or link-click activity.
We receive information directly from you, automatically through your use of our services, and from golf courses, authorized staff, people booking on your behalf, payment providers, and integrations used to provide the service.
If you submit information about another person, provide it only when you have authority to do so.
3. How We Use Information
We use personal information to:
Respond to inquiries, prepare proposals, deliver projects, and provide customer support.
Create and administer accounts, verify access, and apply staff permissions.
Manage bookings, memberships, purchases, invoices, subscriptions, refunds, and related records.
Send confirmations, reminders, receipts, account notices, and service updates.
Send marketing communications as permitted by law and manage communication preferences.
Provide reporting, understand service use, diagnose problems, and improve our services.
Provide AI-assisted features when enabled, as described below.
Detect misuse, investigate disputes, prevent fraud, maintain security, and comply with applicable legal obligations.
Some information is necessary to provide a requested service. If you do not provide it, we may be unable to complete your request.
4. Cookies and Similar Technologies
Our services use cookies, browser storage, and similar technologies to support functions such as authentication, security, saved preferences, and service measurement.
Google Analytics
Our public website uses Google Analytics to understand how visitors find and use the site. Google receives information through the integration, including device and browsing information.
Learn more about how Google uses information from sites and apps. Google also offers a Google Analytics opt-out browser add-on.
Google reCAPTCHA
Our contact form uses Google reCAPTCHA to help detect spam and abuse. The service processes device and interaction information for risk analysis and may use cookies.
See Google’s Privacy Policy and Terms of Service.
Flagstik Website Measurement
Where installed on a hosted website, our page-view tool collects page and referral information, device category, screen dimensions, approximate country, and an identifier derived from the visitor’s IP address to help measure traffic.
Your Cookie Choices
You can use browser settings to block or delete cookies and other stored data. Some features may not work properly when necessary storage is blocked. The Google Analytics add-on applies to Google Analytics and does not disable all other collection.
5. When We Disclose Information
We disclose information as needed for the purposes described in this policy.
Golf Courses and Authorized Users
The relevant course and its authorized staff can receive the information needed to manage your booking, membership, purchase, or other interaction. Account administrators may access information within the accounts they administer.
Service Providers
Providers support hosting, infrastructure, authentication, security, payments, email delivery, analytics, support, and AI features.
Depending on the feature, these include Stripe for payments, Resend for email delivery, Google for website analytics and spam protection, and Anthropic for AI functionality. Providers receive information relevant to the service they perform.
Some providers also process information for their own purposes under their privacy notices, such as payment compliance or fraud prevention. See Stripe’s Privacy Policy for its practices.
Integrations and Your Instructions
We disclose information to connected services when you or the relevant course directs us to do so, or when you otherwise authorize a disclosure.
Legal and Protective Purposes
We may disclose information to comply with law or valid legal process, protect rights or safety, investigate misuse, prevent fraud, and resolve disputes.
Business Transactions
Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, reorganization, or transfer of all or part of our business, subject to applicable legal requirements.
6. AI Features
When a course or authorized user uses an AI-assisted feature, relevant prompts, conversation content, uploaded material, and information retrieved to answer the request may be sent to an AI service provider.
Depending on the request, this may include golfer contact details, bookings, membership information, or course records. We also process AI outputs and conversation records to operate those features.
Only include personal information needed for the task. Do not submit passwords, full payment card details, or unrelated sensitive information in AI prompts or support attachments.
Courses are responsible for ensuring their use of these features is appropriate for the information they provide and the permissions they have obtained.
7. How Long We Retain Information
We retain personal information for the period needed for the purposes described in this policy. The period depends on the type of record, the service relationship, course instructions where applicable, and legal or operational requirements.
For example, account and customer records support ongoing services; booking and transaction records support payments, refunds, accounting, and disputes; support records help resolve requests; and security records help investigate misuse.
We may retain limited communication preference records to honor an unsubscribe request. Backups may retain copies until they are replaced or deleted through the applicable backup process.
Where we process information for a course, deletion and retention also depend on that course’s instructions and our agreement with it. A deletion request may be subject to exceptions, including legally required retention and unresolved disputes.
8. Your Choices and Privacy Rights
You can update information through available account settings or contact us for assistance.
You can unsubscribe from marketing email using the link in the message or contact the sender. Unsubscribing from marketing does not stop necessary account, booking, payment, or security communications. For a course’s campaigns, contact that course or use its unsubscribe link.
Depending on where you live and which laws apply, you may have rights to:
Access or obtain a copy of your personal information.
Correct inaccurate information or request deletion.
Restrict or object to certain processing.
Withdraw consent where processing relies on consent.
Opt out of sale, sharing, targeted advertising, or certain profiling.
Limit certain uses of sensitive personal information.
Appeal a denied request or complain to a privacy regulator.
These rights have legal conditions and exceptions.
To make a request, email team@flagstik.com with the subject Privacy Request. Describe your request and your relationship with Flagstik or the relevant course.
We may ask for information reasonably needed to verify your identity or an agent’s authority. Do not send a password or full payment card number. Where applicable, an authorized agent may submit a request on your behalf.
We will respond as required by applicable law. If an appeal right applies, reply to our decision or email the same address with the subject Privacy Appeal.
We will not unlawfully discriminate against you for exercising your privacy rights.
9. Information Security
We use administrative, technical, and organizational measures designed to protect personal information. No system or transmission method can be guaranteed completely secure.
Help protect your account by keeping your credentials confidential and reporting suspected unauthorized access to us.
10. Children
Our website and account services are intended for business users and a general audience and are not directed to children under 13. Children under 13 should not create an account or submit information directly.
If you believe a child has provided information directly without appropriate authorization, contact us so we can investigate and take appropriate action.
An adult or golf course may provide information about a junior golfer to manage a booking or membership. Where we process that information for a course, the course is responsible for the notices and parental permissions required for its activities.
11. International Visitors and Third-Party Services
Flagstik operates in the United States. Information may be processed in the United States and other countries where our service providers operate. Those countries may have different privacy laws.
Contact us for information about processing locations and any safeguards applicable to your information.
Our services may link to or integrate with independently operated websites and services. Their privacy notices govern their own collection and use of information. A website being designed or hosted by Flagstik does not make Flagstik responsible for all of that website operator’s activities.
12. Changes to This Policy
We may update this policy to reflect changes to our services, information practices, or legal requirements.
We will post the revised policy and update its effective date. Where required, we will provide additional notice or obtain consent before applying a change.
13. Contact Us
For privacy questions or requests, contact:
Flagstik LLC, doing business as Flagstik
Email: team@flagstik.com
Mailing Address: 2115 N. Main St. Centerville, UT 84014
Website: flagstik.com