This Privacy Policy explains what personal data ThaiCaddyConnect collects, why we collect it, and how it is used, stored, and protected, in accordance with Thailand's Personal Data Protection Act (PDPA).

1. Who We Are

ThaiCaddyConnect is operated by Fulton Holdings Company Limited ("we," "us"), registered in Phuket, Thailand. We are the data controller for personal data collected through thaicaddyconnect.com.

2. What Data We Collect

From golfers (members and non-members):

• Name, email address, phone/WhatsApp number
• Nationality, home golf club, handicap (optional)
• Preferred courses and caddies (optional)
• Booking details: play date, selected course, selected caddie, group size, special requests
• Payment-related data via Stripe (we do not store full card numbers — Stripe processes and stores this on our behalf; we retain only your Stripe customer reference and membership status)
• Golfbook content you choose to post (text, course tags, date tags, photos)
• Account login data (email/password or Google sign-in, via Firebase Authentication)

From Caddie applicants and Caddies:

• Name, phone/WhatsApp number, Line ID
• Home course(s), languages spoken, whether you play golf
• A short biography you provide
• Photographs you upload (used for your profile listing)

3. Why We Collect This Data

We use this data to:

• Create and manage your account
• Process and display booking requests between golfers and Caddies
• Process membership payments via Stripe
• Send transactional emails (booking confirmations, welcome emails, password resets) via Resend
• Display Caddie profiles to golfers browsing the Platform
• Operate Golfbook, our members-only community feature
• Respond to enquiries and provide customer support

We do not sell your personal data to third parties.

4. Legal Basis for Processing

We process your personal data on the basis of:

• Contractual necessity — to provide the booking and membership services you've signed up for
• Consent — for optional profile information, photos, and Golfbook posts you choose to share
• Legitimate interest — for basic analytics (Google Analytics) to understand how the Platform is used

5. Photos

Photos you upload (whether as a golfer on Golfbook or as a Caddie on your profile) are used for the specific purpose you uploaded them for — profile display or community posts. Caddie profile photos are visible to golfers browsing the Platform. You may request removal of your photos at any time (see Section 9).

6. Where Your Data Is Stored

Your data is stored using Firebase (Firestore database, Firebase Authentication, Firebase Storage for photos), operated by Google. Payment data is processed and stored by Stripe. Transactional emails are sent via Resend. These providers may store data outside Thailand; where this occurs, we rely on their own data protection safeguards and standard contractual protections.

7. Data Retention

We retain your personal data for as long as your account remains active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations. You may request deletion of your account and associated data at any time (see Section 9).

8. Who We Share Data With

We share limited data with:

• Stripe — for payment processing
• Resend — for sending transactional emails
• Google (Firebase) — for data storage and authentication
• Caddies — booking-relevant details (name, contact number, requested date/course) are shared with the Caddie you book, so the booking can be arranged directly
• We do not share your data with any other third party for marketing purposes.

9. Your Rights

Under Thailand's PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal/operational retention requirements)
• Withdraw consent for optional data uses (e.g. removing a photo, deleting a Golfbook post)
• Object to certain processing

To exercise any of these rights, contact us at thaicaddyconnect@gmail.com.

10. Cookies & Analytics

We use Google Analytics (GA4) to understand site usage. This collects standard analytics data (pages visited, general location, device type) and does not identify you personally.

11. Children's Data

ThaiCaddyConnect is not intended for use by anyone under 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

13. Contact

Questions about this Privacy Policy, or requests relating to your personal data, can be sent to thaicaddyconnect@gmail.com