We handle golf reservation telemetry and visitor data under strict disclosure rules.
Pine Hyrst publishes the complete register of collected data points, Consent Mode v2 signal controls, advertising network tags, and data subject access procedures below.
1. Effective Date & Governance Schedule
This privacy policy took effect on October 16, 2026. All information processing activities, tracking disclosure registries, and consent states described across pine-hyrst.shop apply to all site visitors and facility reservation inquiries originating on or after this date.
Any revisions to operational practices, state privacy statute alignments, or ad measurement parameters are posted directly to this URL with a revised effective timestamp.
2. Data Controller Identity & Physical Address
The sole data controller responsible for the capture and storage of personal records on pine-hyrst.shop is Pine Hyrst, an indoor golf facility operating in Tampa, Florida.
Physical trading address: 803 North Tampa Street, Tampa, Florida 33602, Tampa, Florida, United States.
Direct telephone line: +1 (973) 555-8440. Direct administrative email: [email protected].
3. Categories of Personal & Technical Information Collected
Pine Hyrst collects specific categories of data necessary to process lesson bookings, simulator bay reservations, and site performance diagnostics:
- Inquiry Form Entries: Full name, telephone number, email address, physical street address (when submitted), requested service kind, session notes, configurator technical parameters, and affirmative consent verification.
- Automated Request Metadata: Client IP address, browser user-agent string, HTTP referring URL, page rendering timestamp (Unix opened), and transmission timestamp.
- Support Chat Records: Customer message dialogue, session timestamps, and an episodic conversation token stored in localStorage.
- Browser Cookie Identifiers: Consent state registry key (site_consent_v2) and standard measurement cookies.
- Paid Campaign Click Identifiers: URL parameters appended by advertising networks including gclid, msclkid, and fbclid.
4. Purpose of Information Processing
Collected details serve concrete business operations only:
- Booking and scheduling hourly simulator bay rentals ($49–$69/hr) and PGA instruction sessions ($79–$129).
- Transmitting reservation confirmation schedules, arrival protocols, and bay assignment details.
- Responding to questions submitted via the live support desk interface.
- Measuring advertising conversion efficiency and verifying paid campaign landing page stability.
- Preventing automated form submission spam and malicious server access through honeypot detection.
5. Lawful Bases for Data Processing
Pine Hyrst processes each data stream under explicit lawful justifications:
| Processing Operation | Data Category | Lawful Justification |
|---|---|---|
| Reservation Intake & Bay Scheduling | Name, contact info, requested service | Performance of pre-contractual steps and service agreement. |
| Support Desk Communications | Chat dialogue, visitor inquiry notes | Legitimate business interest in customer service fulfillment. |
| Marketing Measurement & Ad Attribution | Click IDs (gclid, msclkid, fbclid), cookies | Consent provided via the interactive cookie preference mechanism. |
| Server Security & Fraud Prevention | IP addresses, HTTP user-agent, logs | Legitimate interest in maintaining network infrastructure integrity. |
6. Paid Advertising Platforms & Click Tracking Identifiers
Pine Hyrst actively acquires commercial traffic through paid ad campaigns on three major ad platforms in the present tense: Google Ads, Microsoft Advertising, and Meta Ads.
When a prospective golfer clicks a sponsored placement, the referring network appends a unique cryptographic query string to the destination landing page URL:
- google ads: Appends the
gclid(Google Click Identifier) to track conversions and attribute inquiries to keyword queries. - microsoft advertising: Appends the
msclkid(Microsoft Click Identifier) to correlate Bing search ads with site interaction. - Meta Ads: Appends the
fbclid(Facebook Click Identifier) across sponsored feed placements.
These trackers do not access personal identity until a user affirmatively submits a booking form or accepts non-essential storage cookies.
7. Consent Mode v2 Signal Architecture
Our infrastructure enforces Google Consent Mode v2 standards across every page session. Before any cookie or tracking script is initialized, the following four fundamental privacy signals are held in a strict denied state by default:
| Signal Parameter | Default Setting | Action on Consent Acceptance | Action on Rejection or Withdrawal |
|---|---|---|---|
ad_storage |
denied | Updated to granted | Set back to denied |
ad_user_data |
denied | Updated to granted | Set back to denied |
ad_personalization |
denied | Updated to granted | Set back to denied |
analytics_storage |
denied | Updated to granted | Set back to denied |
No marketing pixel or measurement tag executes or reads local device memory until the visitor clicks Accept on the consent interface. When a visitor declines storage, all four signals immediately revert to denied.
8. Third-Party Service Processors & Infrastructure Partners
Pine Hyrst shares booking telemetry and technical telemetry strictly with verified external processors necessary to host, operate, and market our facility:
- Google LLC / Google Ireland Ltd: Advertising conversion tracking and search measurement. Governed by Google Privacy Terms.
- Microsoft Ireland Operations Ltd: Microsoft Advertising search distribution and measurement tags. Governed by the official Microsoft privacy statement available at privacy.microsoft.com.
- Meta Platforms Ireland Ltd: Social ad delivery and campaign measurement.
- Hosting Infrastructure Provider: Secure web hosting, isolated relational data storage, and server runtime maintenance in United States data centers.
- Transactional Email Dispatcher: Secure SMTP relay service delivering booking notifications directly to facility managers.
9. Cross-Border International Data Transfers
Pine Hyrst operates primarily within the United States. Data generated by international visitors browsing our Tampa simulator programs is processed on servers physically located inside the United States.
Where personal information originating within the European Economic Area or United Kingdom is transferred to United States infrastructure, transfers are safeguarded under Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent adequacy frameworks maintained by our commercial processors.
10. Data Retention Schedules
We do not store customer records indefinitely. Records are maintained according to strictly defined operational windows:
| Record Classification | Specified Retention Period | Post-Period Treatment |
|---|---|---|
| Booking inquiries & email notifications | 18 months | Permanently deleted from active storage |
| Support desk chat transcripts | 12 months | Purged automatically from database tables |
| Web server logs & IP telemetry | 90 days | Rotated and securely overwritten |
| Cookie consent registry decisions | 6 months | Cleared; visitor re-prompted upon expiration |
11. Information Security & Technical Safeguards
All network traffic across pine-hyrst.shop is encrypted using Transport Layer Security (TLS 1.3) with cryptographic cipher suites. Form inputs are cleansed, validated against typed patterns, and protected against cross-site scripting and SQL injection before reaching disk storage.
We implement role-based credential restrictions for all administrative dashboards, isolated directory permissions, and real-time perimeter honeypots to block unauthenticated network probes.
12. European Rights Under GDPR
If you access pine-hyrst.shop from within the European Economic Area or the United Kingdom, the gdpr grants you specific legal entitlements regarding your personal data:
- Right of Access: Obtain confirmation whether your personal information is processed and receive a legible copy.
- Right to Rectification: Request correction of inaccurate contact numbers, names, or addresses.
- Right to Erasure ("Right to Be Forgotten"): Demand immediate deletion of inquiry records where retention is no longer justified.
- Right to Restriction: Request suspension of active processing during dispute resolution.
- Right to Data Portability: Receive your inquiry records in an industry-standard, machine-readable JSON or CSV format.
- Right to Object: Contest processing founded upon legitimate business interests.
- Right to Withdraw Consent: Revoke previously granted cookie or marketing authorization at any time without penalty.
13. United States Privacy Protections & State Statues
Residents of California, Florida, Texas, Virginia, Colorado, Connecticut, and other states with enacted consumer privacy legislation hold explicit statutory rights under state regulations including the ccpa and CPRA:
- Right to Know & Disclose: Request detailed disclosure of categories and specific pieces of collected personal information.
- Right to Delete: Request permanent removal of customer records collected through booking forms.
- Right to Correct: Demand correction of inaccurate personal details held in our systems.
- No Sale or Sharing of Personal Data: Pine Hyrst does not sell personal records, contact information, or telemetry histories to data brokers or third parties for monetary consideration.
- Right to Non-Discrimination: Pine Hyrst will never alter hourly bay rates, coaching fees, or service availability if you choose to exercise your privacy rights.
14. Global Privacy Control (GPC) Compliance
Pine Hyrst automatically recognizes and honours the global privacy control (GPC) browser signal. When your browser transmits a valid Sec-GPC: 1 header, our consent software treats this signal as a universal opt-out directive.
All non-essential cookies and ad measurement trackers are suppressed immediately without requiring you to manually interact with our consent banner.
15. Children's Online Privacy Protection
The pine-hyrst.shop website is designed for adult golfers and club members. We do not knowingly solicit or collect personal information online from children under the age of 13, in strict adherence to the Children's Online Privacy Protection Act (COPPA).
Junior coaching programs ($99 per lesson) must be scheduled, consented to, and authorized directly by a parent or legal guardian. If we discover that personal details of an individual under 13 have been submitted without parental verification, records are deleted immediately.
16. Regulatory Oversight & Complaint Procedures
Visitors who believe their privacy entitlements have been compromised are invited to contact our Tampa management directly at [email protected] for swift resolution.
You also retain the formal right to lodge an administrative complaint with regulatory authorities:
- In Florida: Office of the Florida Attorney General, State of Florida, The Capitol PL-01, Tallahassee, FL 32399.
- In California: California Privacy Protection Agency (CPPA), PO Box 2420, Sacramento, CA 95812.
- In the European Union: The relevant national Data Protection Authority (DPA) in your member state of residence.
17. Exercising Data Rights & DSAR Intake Portal
To submit a Data Subject Access Request (DSAR), demand record rectification, or request complete deletion of booking records, contact our privacy compliance desk using either channel:
- Electronic Mail: Send an email specifying your request to [email protected] with the subject header "Data Subject Access Request".
- Postal Mail: Deliver a written notice to: Pine Hyrst Compliance Desk, 803 North Tampa Street, Tampa, Florida 33602, United States.
Response Timelines: A data request is answered within 5 days of verified receipt. We do not levy fees for standard access requests, provided claims are not manifestly unfounded or repetitive.
18. Policy Amendments & Revision Notification
Pine Hyrst reserves the right to amend this statement to accommodate facility expansions, simulator hardware upgrades, or regulatory mandates. Substantive updates will be highlighted via a notice on pine-hyrst.shop or indicated by an updated Effective Date timestamp.
Continued use of our web portal after revisions indicates acceptance of the updated privacy terms.
19. Direct Privacy Officer Contact Coordinates
For questions regarding telemetry processing, launch monitor data retention, or this privacy document, communicate directly with our management team:
| Operating Entity | Pine Hyrst |
|---|---|
| Street Address | 803 North Tampa Street, Tampa, Florida 33602, Tampa, Florida, United States |
| Administrative Phone | +1 (973) 555-8440 |
| Compliance Email | [email protected] |