Privacy Policy for MtLakeGolfCourse.com

Effective Date: July 04, 2025 Welcome to the privacy policy for MtLakeGolfCourse.com (the “Site”), a WordPress-powered website operated by Mountain Lake Golf Course (the “Club,” “we,” “us,” or “our”). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, with whom we share it, your choices, and your legal rights under applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Google AdSense requirements.

1. Data Controller

Mountain Lake Golf Course 56500 Lakeshore Dr, Mountain Lake, MN 56159 Email: mountainlakegolfcourse1@gmail.com Phone: (507) 427-3869 As the Data Controller, we determine the purposes and means of processing your personal data in accordance with this policy.

2. Information We Collect

We collect personal information in the following categories: • Contact Information: Name, email address, phone number, mailing address, when you submit a tee time request, membership inquiry, or club event reservation via our contact form. • Account Credentials: If you register for an online account, we collect your chosen username and a hashed password. • Payment Information: To process membership fees or event transactions, we collect payment card data through our secure third-party payment processor (we do not store your full card number). • Usage and Technical Data: Information about how you interact with our Site, including your IP address, browser type, operating system, referring URLs, pages viewed, and timestamps. We collect these details automatically via cookies and similar tracking technologies for analytics and security purposes. • Preferences and Marketing Data: Your preferences for receiving newsletters, promotional offers, and other marketing communications. We do not collect sensitive personal data (racial or ethnic origin, political or religious beliefs, health data, or biometric identifiers).

3. How We Collect Information

1. Directly from You: When you fill out our online forms (e.g., request a tee time, submit feedback, contact us with questions).
2. Automatically via Cookies: When you browse our Site, we deploy first-party and third-party cookies and similar technologies (e.g., web beacons, pixels) to collect technical and usage data.
3. From Third-Party Services: We may receive information about you from our affiliates, partners, or service providers (e.g., analytics providers).

4. Use of Your Information

We use your personal information to: • Provide and Improve Services: Process tee times, memberships, events, and customer support. • Communicate with You: Send confirmations, notices, updates, and marketing materials (if you opt in). • Personalize Your Experience: Remember your preferences and display relevant content. • Security and Fraud Prevention: Monitor and protect against unauthorized access or malicious activity. • Legal Compliance: Fulfill our legal and contractual obligations and enforce our terms of use (e.g., billing, dispute resolution).

5. Cookies and Tracking Technologies

Cookies are small text files stored on your device that help us provide a secure and efficient user experience. We use the following categories of cookies on our Site: You can manage your cookie preferences in our cookie consent banner or via your browser settings. Disabling cookies may limit Site functionality.

6. Third-Party Services and Integrations

We employ trusted third-party services to operate our Site and deliver services: • Google Analytics: Tracks visitor behavior for Site improvement. We anonymize IP addresses and obtain consent before placing analytics cookies. • Google AdSense: Serves personalized ads via cookies. In compliance with AdSense requirements, we disclose this usage and allow you to opt out of personalized ads via Ads Settings or www.aboutads.info. • Payment Processors: Stripe/PayPal process payments; their privacy policies govern payment data. • Embedded Content: Social media platforms (Facebook, Instagram) and video services (YouTube) may set cookies that we do not control. • Email Service Providers: Mailchimp/Constant Contact manage our newsletters (subject to your consent). We only share your personal information with service providers bound by contractual confidentiality obligations.

7. Google AdSense Compliance

As a Google AdSense publisher, we meet all AdSense privacy policy requirements: • Disclose that third-party vendors, including Google, use cookies to serve ads based on your prior visits to our Site and other sites. • Inform you of Google’s use of advertising cookies to serve relevant ads. • Provide links to Ads Settings (opt-out of personalized ads) and www.aboutads.info (opt-out of third-party vendor cookies). • Ensure transparent disclosure of third-party ad networks and enable opt-out mechanisms.

8. Data Storage and Security Measures

We take reasonable organizational and technical measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These include: • TLS/SSL encryption for data in transit. • Secure servers hosted by Amazon Web Services in the United States. • Access controls and regular security audits. • Regular software updates and vulnerability scans. • Website firewall and malware scanning. However, no system is 100% secure. Please use strong, unique passwords and promptly notify us of any suspicious activity.

9. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside your jurisdiction (e.g., the U.S.). Where applicable, we rely on authorized transfer mechanisms (EU-U.S. Data Privacy Framework, Standard Contractual Clauses) to ensure adequate data protection.

10. User Rights

Depending on your residence, you may have certain legal rights over your personal data:

10.1 Rights Under the GDPR (EU)

1. Right of Access: Obtain confirmation of processing and a copy of your personal data.
2. Right to Rectification: Correct inaccurate or incomplete data.
3. Right to Erasure: (“Right to be forgotten”) Delete your personal data when no longer needed, subject to exemptions.
4. Right to Restrict Processing: Limit processing of your data under certain conditions.
5. Right to Data Portability: Receive your data in a structured, machine-readable format and transfer to another controller.
6. Right to Object: Object to processing based on legitimate interests or direct marketing activities.
7. Rights Related to Automated Decisions: Opt out of decisions based solely on automated processing, including profiling.
8. Right to Withdraw Consent: At any time where processing is based on consent.

10.2 Rights Under the CCPA (California)

1. Right to Know: Request categories or specific pieces of personal data collected in the past 12 months.
2. Right to Delete: Request deletion of personal data, with certain exceptions.
3. Right to Opt-Out of Sale/Sharing: Instruct us not to sell or share your personal data, including via the Global Privacy Control signal.
4. Right to Non-Discrimination: You may not be discriminated against for exercising your CCPA rights.
5. Right to Correct and Right to Limit: For inaccurate data and use of sensitive personal data, respectively (added by CPRA).

To exercise any of these rights, please contact us as described in Section 13. We will verify your identity and respond within the legally required time frame (usually 30 days).

11. Children’s Data

Our Site is not directed at children under 16 (or under 13 in certain jurisdictions). We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from someone under the applicable age, please contact us to request deletion.

12. Changes to This Privacy Policy

We review and update this Privacy Policy at least once every 12 months or whenever our data practices or legal requirements change. We will notify you by: • Updating the “Effective Date” at the top of this policy. • Displaying a prominent notice on our Site’s homepage. • Sending you an email notification if you have an account with us. Your continued use of the Site after such updates constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Privacy Team: Mountain Lake Golf Course Email: mountainlakegolfcourse1@gmail.com Phone: (507) 427-3869 Address: 56500 Lakeshore Dr, Mountain Lake, MN 56159 You may also submit privacy rights requests via our website’s contact form. Thank you for trusting MtLakeGolfCourse.com with your personal information. We are committed to safeguarding and respecting your privacy.