Privacy Policy

Last updated October 19, 2026

Club 417 LLC (“Club 417,” “we”) runs the indoor golf facility at 417 Bolton Rd., Suite 5, Lancaster, MA 01523 and this website. This policy explains what we collect when you use the site or the facility, why, and who we share it with. We don’t sell your information and we don’t use advertising trackers.

What we collect

• Your login: your email address and a password. Passwords are stored scrambled (hashed) by our login provider; we can’t see them. Our login provider also records when and from which network (IP) address you sign in, to keep accounts secure.
• Bookings: your name, email, phone number, the bays and times you book, any promo code, and what you paid.
• Waivers: the name you sign with (and a parent or guardian’s name for a minor), the date, whether you opted out of photos, and the network (IP) address and browser the waiver was signed from, as a record of the signature.
• Memberships and payments: your plan, its status and renewal date. Card details go straight to our payment processor, Stripe; we never see or store your card number. Stripe may also ask for your billing address.
• League sign-ups: your name, email, phone number, your partner’s name, your handicap if you give it, any promo code, and what you paid.
• Your member profile, if you fill it in: phone number, profile photo, handicap index, GHIN number and an emergency contact.
• Your golf: scorecards you enter, launch monitor numbers, and league scores and team names.
• Snack bar orders: what you bought, the amount and your email.
• Lesson, league and golf fitness requests: your name, email, phone, preferred times and any notes. To stop spam, we also keep a scrambled code made from your network address, not the address itself.
• Site usage: anonymous page-view counts (which pages are visited, the type of device and country), without cookies. Like any website, our host briefly keeps standard server logs, including network (IP) addresses. When a page crashes, we record the page and the error so we can fix it.

Why we use it

• To hold and confirm your bookings and send you your confirmation and door code.
• If you book or sign up for a league without an account, to send you one email (only once) inviting you to create a free one.
• To run memberships: member rates, free hours, billing and renewals.
• To run leagues: teams, schedules, scores and standings.
• To keep a record that each player signed the waiver, and to reach your emergency contact if needed.
• To answer your requests and arrange lessons, leagues and golf fitness.
• To show your own stats, scorecards and league standings in the member portal.
• To keep the site secure, stop abuse and fraud, and fix problems.

Who can see it

Club 417’s owners can see the information above to run the club. Our instructor sees lesson requests and the lesson schedule. Other members can’t see your information, except that players in a league you’re part of see your name, team name and scores on the league leaderboard.

We use these companies to run the site. Each only gets what it needs to do its job:

• Vercel hosts the website. It counts page views without cookies and keeps short-lived server logs, including network (IP) addresses.
• Supabase is our database, login system and file storage (such as profile photos). It holds the account, booking, waiver, league and request information above, and records sign-in times and network addresses.
• Stripe handles card payments, memberships, refunds and receipts. It receives your name, email, card details, billing address, what you’re buying (for a league sign-up, also your phone, partner and handicap), and information about your device and network that it uses to stop fraud. Stripe’s use of that information is covered by its own privacy policy.
• Resend sends our emails, such as booking confirmations, receipts for requests and the one-time account invite. It receives your email address and the message.
• Cloudflare Turnstile runs the “I’m human” check on booking, league sign-up, request, login and sign-up forms. It looks at your browser, device and network to tell people from bots.
• Google Workspace is our email inbox, where your messages and our alerts arrive, and our staff calendar, which shows each booking’s time, bay, name, email and phone.
• YouTube plays the video on our FAQ page, in its privacy-enhanced mode. Loading the player sends your network address to YouTube, and playing the video is covered by Google’s privacy policy.

Our fonts and images are served from our own site, so viewing a page doesn’t send your information to a font service. Map and directions links open Google Maps only when you tap them.

We may also share information if the law requires it, or to protect the safety of our members and staff.

Photos and video

As the waiver explains, we may use photos or video taken at the facility for marketing and social media. You can opt out when you sign the waiver, or by telling us in writing.

Cookies

We only use cookies the site needs to work: ones that keep you logged in, and one that remembers for 30 minutes that you passed the “I’m human” check so you aren’t asked again while you finish checking out. Stripe’s payment form uses its own cookies to stop fraud. We don’t use advertising or cross-site tracking cookies.

How long we keep it

We keep your account and member information while you have a login with us. We keep booking, payment, league sign-up, snack bar and waiver records for as long as we need them for our business, tax and legal records. Error reports are deleted after 90 days.

Deleting your account

You can delete your login at any time under Edit Profile in the member portal (cancel any membership under Billing first). This permanently deletes your login, your member profile (phone, photo, handicap, GHIN number and emergency contact), and your scorecards and launch monitor numbers.

We keep the records we’re required to or need for the business: past and upcoming bookings, payments, league and snack bar records, and signed waivers, no longer linked to a login. If you’re on a league roster or had a membership, we keep that roster entry for the league and billing history. We also keep a note of your email address if we sent you the account invite, so we never send it again. To have anything else deleted, email us (below) and we’ll delete what we’re not required to keep.

Your choices

• You can see and change your profile under Edit Profile in the member portal.
• You can update your card or cancel a membership under Billing in the member portal.
• To get a copy of your information, correct something, or delete information you can’t delete yourself, email admin@club417golf.com.

Children

Logins are for people 13 and older; sign-up asks you to confirm that. Players under 18 need a parent or guardian to sign the waiver for them, and a parent or guardian should create the login and book for a child under 13. We don’t knowingly collect information from children under 13 except what a parent or guardian gives us. If you think a child under 13 has given us information, email us and we’ll delete it.

Security

We protect your information with encrypted connections, access rules that limit each person to their own data, and two-factor login on our admin accounts. No system is perfect, so please use a password you don’t use anywhere else.

Changes and questions

If we change this policy, we’ll update the date at the top. Questions? Email admin@club417golf.com, text or call (978) 855-9141, or write to Club 417 LLC, 417 Bolton Rd., Suite 5, Lancaster, MA 01523.