Privacy Policy

1. Introduction

Bringabag, Inc. ("Bringabag," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use BringaBag.golf, the Bringabag mobile application, and related services (collectively, the "Service"). This Privacy Policy is incorporated by reference into, and should be read together with, our Terms of Service. By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, phone number, username, password, date of birth, and profile photo;
• Payment information: billing address and payment details, processed by our third-party payment processors;
• Golf performance data: scores, handicap index, statistics, and course play history you enter or sync;
• Communications: information you provide when you contact customer support or participate in surveys or promotions;
• User Content: photos, videos, reviews, and other content you submit through the Service.

2.2 Information Collected Automatically

• Device information: device model, operating system, unique device identifiers, IP address, and mobile network information;
• Location information: precise or approximate GPS location when you enable location services, used to identify nearby courses, track shot distances, and enable related features;
• Usage data: pages and features accessed, session duration, in-app interactions, crash logs, and diagnostic data;
• Cookies and similar technologies: as described in Section 6.

2.3 Information from Third Parties

We may receive information about you from Course Partners, payment processors, analytics providers, advertising partners, and publicly available sources, which we may combine with information we collect directly.

3. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service, including handicap tracking, course matchmaking, and loyalty features;
• Process transactions, subscriptions, and Caddy Cash balances and redemptions;
• Personalize your experience and provide relevant recommendations and offers;
• Communicate with you about your account, transactions, updates, security alerts, and administrative messages;
• Send marketing communications, subject to your choices and applicable law;
• Facilitate special rates, offers, and marketing from Course Partners and Brand Partners, as described in Section 4;
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service;
• Comply with legal obligations and enforce our rights; and
• Conduct analytics, research, and aggregate reporting to improve our Service and business.

4. How We Share Information

We may share your information as described below. As explained in Section 10.1, some of these disclosures may be considered a "sale" or "sharing" of personal information under the CCPA/CPRA, even though we do not sell information for cash.

4.1 Course Partners — Special Rates and Offers

One of the core features of the Service is enabling golf courses and clubs ("Course Partners") to offer you special rates, discounted tee times, membership upgrades, and other tailored offers directly. To make this possible, we share relevant information with Course Partners you interact with or who participate in our network, which may include your name and contact information, handicap and play history, location and proximity to the course, booking and redemption history, and Caddy Cash activity relevant to that course. Course Partners may use this information to present offers to you within the Service or to contact you directly, subject to their own privacy practices. Where a Course Partner offers you a discount, upgrade, or other benefit specifically in exchange for access to your profile or usage data, that arrangement is a financial incentive program described further in Section 10.1.

4.2 Golf Brand Marketing Partnerships

We work with golf equipment, apparel, and other golf-industry brands ("Brand Partners") to develop marketing and advertising programs directed at our user base. Depending on the specific program, this may include: (a) sharing aggregated or de-identified insights about our user base (for example, the number of Users in a region within a given handicap range); (b) enabling Brand Partners to deliver targeted advertising or offers to segments of Users within the Service based on criteria such as handicap, location, equipment interests, or play frequency, without the Brand Partner receiving your individually identifiable information; or (c) in some programs, sharing your individually identifiable contact and profile information directly with a Brand Partner so that the Brand Partner may market to you directly. We will identify which type of program applies at the point we introduce it, and options described in (b) and (c) may be treated as "sharing" or a "sale" of personal information under applicable state law, in which case the opt-out rights in Section 10.1 apply.

4.3 Other Disclosures

We may also share information with:

• Service providers: vendors who perform services on our behalf, such as payment processing, hosting, analytics, customer support, and insurance/risk administration for skill-contest prize pools;
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets;
• Legal compliance and protection: to comply with law, respond to legal process, or protect the rights, property, or safety of Bringabag, our Users, or the public;
• With your consent: in any other circumstances where you direct us to share information; and
• Aggregated or de-identified data: which does not identify you personally, for any purpose.

We do not permit Course Partners or Brand Partners to use information we share with them for their own unrelated purposes beyond the marketing and offer programs described in this Section 4, except as you separately authorize.

5. Payment and Virtual Currency Data

Payment card information is collected and processed by our PCI-compliant third-party payment processors; we do not store full payment card numbers. We maintain records of your Caddy Cash balance, earning history, and redemption activity as necessary to administer the loyalty program and comply with applicable recordkeeping and anti-fraud obligations.

6. Cookies and Tracking Technologies

We and our service providers use cookies, mobile device identifiers, SDKs, and similar technologies to recognize your device, remember your preferences, analyze usage, and deliver relevant content and advertising. You can control cookies through your browser settings and manage mobile advertising identifiers through your device settings. Disabling certain technologies may limit functionality of the Service.

7. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with our legal obligations (including tax, accounting, and anti-fraud recordkeeping), resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete, de-identify, or anonymize it.

8. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. Children's Privacy

The Service is not directed to children under thirteen (13) years of age, and we do not knowingly collect personal information from children under 13 without verifiable parental consent, consistent with the Children's Online Privacy Protection Act ("COPPA"). Where a parent or legal guardian enables limited use of the Service by a minor under a supervised parental account, we collect and use the minor's information only as reasonably necessary to provide the supervised feature, and the parent or guardian may review, request deletion of, or refuse further collection of the minor's information by contacting us at the address in Section 14. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete such information promptly.

10. Your Privacy Rights

10.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: know what personal information we collect, use, and disclose; request deletion of your personal information, subject to certain exceptions; request correction of inaccurate personal information; limit the use of sensitive personal information; and not be discriminated against for exercising these rights.

Sale and Sharing of Personal Information. As described in Sections 4.1 and 4.2, we may disclose personal information to Course Partners and Brand Partners in exchange for benefits made available to us or to you, and we may enable Brand Partners to deliver targeted advertising within the Service based on your profile and activity. Under the CCPA/CPRA, these disclosures may be considered a "sale" of personal information or "sharing" of personal information for cross-context behavioral advertising, regardless of whether money changes hands. You have the right to opt out of both.

To opt out, you may: (a) use the "Do Not Sell or Share My Personal Information" link available in the app settings or at BringaBag.golf/privacy-choices; (b) contact us using the information in Section 14; or (c) where technically applicable, use an opt-out preference signal recognized by us. Opting out will stop new sales or sharing of your information going forward but will not affect disclosures that already occurred. If you opt out, you may still receive Course Partner offers presented directly within the Service based solely on your own account and booking activity with that Course Partner, which is not a "sale" or "sharing" under the CCPA.

Notice of Financial Incentive — Course Partner Special Rates. Certain Course Partners may offer you discounted rates, upgraded tee times, or other benefits in exchange for our sharing your profile and usage data with that Course Partner as described in Section 4.1. Participation in any such program is optional. The value of the data exchanged is reasonably related to the value of the offer extended by the Course Partner, as reflected in the discount or benefit presented to you at the time of the offer. You may withdraw from a specific Course Partner's program at any time through your account settings or by contacting us, which will stop future data sharing with that Course Partner but will not affect discounts or benefits already received.

To exercise any of the rights described in this Section 10.1, contact us using the information in Section 14. We will verify your request using information associated with your account before responding.

10.2 Other U.S. State Residents

Residents of other states with comprehensive privacy laws (including, where applicable, Virginia, Colorado, Connecticut, Utah, and other states as their laws take effect) may have similar rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of certain processing, including targeted advertising and profiling. We will honor valid requests as required by applicable law.

10.3 International Users

If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have data protection laws different from those in your jurisdiction. Where applicable data protection law (such as the GDPR or UK GDPR) applies to our processing of your information, you may have additional rights, including the right to access, rectify, erase, restrict, or object to processing, and the right to data portability and to lodge a complaint with a supervisory authority. We rely on appropriate safeguards, such as standard contractual clauses, for any such cross-border transfer.

11. Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is not yet an accepted industry standard for how to respond to such signals, the Service does not currently respond to them.

12. Third-Party Links and Services

The Service may contain links to, or integrations with, third-party websites, Course Partners, or services that are not owned or controlled by us. This Privacy Policy does not apply to such third parties, and we encourage you to review their privacy policies before providing information to them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in our sole discretion. Any changes are effective immediately upon posting the revised policy on BringaBag.golf or within the Bringabag application, with the "Effective Date" updated accordingly. Your continued use of the Service after a change is posted constitutes your acceptance of the revised Privacy Policy. Where required by applicable law, we will provide additional notice or obtain consent for material changes.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Bringabag, Inc.
Attn: Privacy Officer
[Registered address on file — Miami-Dade County, Florida]
Email: privacy@bringabag.golf