Privacy Policy · The Starter House

1. Who we are

This website, starterhouse.golf, and its family accounts are operated by Gunning Industries Corp, doing business as The Starter House (“The Starter House”, “we”, “us”). This policy explains what information we collect, how we use and share it, how long we keep it, and the choices you have. Questions and requests: josh@starterhouse.golf.

2. A website for parents and guardians

Family accounts are held by adults: a parent or legal guardian. Children do not have accounts and are not asked to use the website. Information about a child comes from the parent or guardian who enrolls them. We do not knowingly collect personal information directly from a child; if we learn that a child has sent us information themselves, we will delete it unless we need to keep it for safety reasons, and we will contact the parent where we can.

3. Information we collect

Information you give us when you create and use a family account:

Parent or guardian: first and last name, email address (confirmed with a one-time code), mobile phone number, city if you give it, and whether you would like text-message updates in future (we do not send text messages at present).
Each child you add: first and last name, date of birth, golf experience, an emergency contact’s name and phone number, whether they may appear in club photographs, and any notes you choose to share with coaches. Notes may include accommodations or health information you decide coaches should know; please share only what is needed to include your child safely.
Reservations: the classes you hold, reserve or wait for, waitlist offers, refund requests and their outcome, and which versions of our terms, notices and reservation policies you were shown or accepted, with the date.
Payments: Stripe processes every payment. We receive and keep the amount, currency and status, Stripe’s reference numbers for the customer, payment, charge and any refund, the card brand and last four digits as Stripe reports them, and the receipt link. Full card numbers and security codes go directly to Stripe; we never receive or store them.

Participation waiver records. When you sign a participation waiver in your account, we keep a record of the signing so that we, and you, can show exactly what was signed. The record holds: the exact document text and version you signed and its fingerprint (a SHA-256 hash); your child’s name and date of birth, the term and the class as they were at signing; the legal name you typed, your stated relationship to the child and each statement you confirmed; your account email, account identifier and sign-in session identifier, with the session’s start time and security level; the time our server recorded the signature; and the IP address and browser description (user agent) our server received with the request, when available.

Information from our other forms:

Preferred class times: your name, email address and city, your child’s age (not their date of birth), golf experience, preferred level, days and times, and any notes.
Coach applications: name, email address, phone number, city, the role you are interested in, coaching experience, certifications, your story, a link you share, availability, how you heard about us, and your acknowledgement of a background check.

Information collected as you use the website:

Sign-in and security: our authentication provider keeps records of sign-in codes and sessions. To prevent abuse we count requests using one-way scrambled (hashed) identifiers rather than raw email addresses or IP addresses. We keep an internal log of changes to enrollment, payment and other records showing which account made a change and when, and a record of each email we ask our email provider to send: the recipient, the kind of message and whether the provider accepted it.
Hosting: like any website, our hosting provider receives each visitor’s IP address and browser details to deliver pages and keep the service secure, and keeps them in its own operational logs.
Cookies: we use cookies that keep you signed in and remember whether to keep you signed in on a device. These are needed for the account to work. On the public pages described in section 6 only, Google Analytics sets cookies to measure visits.

4. How we use information

To run family accounts and sign-in, and to reserve, hold, waitlist and confirm class places.
To take payments and handle refunds, and to keep accounting and tax records.
To contact you by email about your account, reservations, waitlist offers and classes.
To run classes safely: placing children in the right age group, telling coaches what they need to know, and reaching you or your emergency contact.
To keep and show records of what was accepted or signed, including participation waivers.
To protect the website, our families and our business from fraud, abuse and security threats, and to meet legal obligations.
To understand, in aggregate, how visitors use our public pages, so we can improve them.

5. Who we share information with

We share information only as described here. Our service providers process it on our behalf, for the purposes above:

Supabase: our database and account sign-in.
Vercel: website hosting.
Resend: delivery of our emails.
Stripe: payment processing and refunds. Stripe also uses payment information under its own privacy policy, for example to prevent fraud.
Google Analytics: measurement of visits to our public pages only (section 6).

Our coaches and staff see the information they need to teach and look after your child. We may also disclose information when the law requires it, to protect the safety of a child or anyone else, to protect our rights in a dispute, to our professional advisers under a duty of confidentiality, or as part of a sale, merger or transfer of our business, in which case it would remain protected as described in this policy.

We do not sell or rent personal information, and we do not share it with anyone for targeted (cross-context behavioral) advertising.

6. Analytics, cookies and tracking

We use Google Analytics to count visits to our main public pages: the home, club, approach, classes, FAQ and coaching pages, and individual class pages. Policy pages such as this one, sign-in, family account, enrollment, payment and club office pages are not measured, and no family, child, form or payment details are sent to Google. Advertising features and Google signals are turned off for our site.

Google Analytics and Stripe are other parties that may collect information about your online activity on our website: Google on the measured public pages, and Stripe on our payment page, where its payment form collects device and connection details to process payment and prevent fraud. Google may combine this with information about your activity on other websites under its own policies.

Your choices: you can block or delete cookies in your browser settings, and you can stop Google Analytics from measuring your visits with Google’s opt-out browser add-on at tools.google.com/dlpage/gaoptout. Blocking the sign-in cookies stops the family account from working.

Do Not Track: some browsers can send a “Do Not Track” signal. Our website does not currently change how it works when it receives that signal.

7. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy:

Account and child details: while your account is open, and afterwards only as long as needed for the records below.
Reservation, payment and refund records: as long as needed for accounting, tax and legal purposes and to resolve any dispute.
Signed participation waivers and other records of what was accepted, with their signing evidence: as long as they may be needed to show what was agreed, including after an account is closed or a request to delete it.
Preferred-times requests and coach applications: until they are no longer needed for planning classes or hiring, or until you ask us to delete them.
Security and operational logs: for a limited period set by us or our providers.

8. Your choices and requests

You can see and correct your family’s details, your children’s details, photo permission and text-message preference in your account at any time.
You can ask us for a copy of the personal information we hold about you or your child, to correct it, or to delete it, by emailing josh@starterhouse.golf. A parent or guardian may make these requests for their child.
To protect your family, we verify requests, for example by asking you to send the request from, or confirm it through, the email address on the account.
When we delete information, we may still keep records we need for payments, refunds, tax and accounting, signed waivers and other acceptance records, security, or a legal claim. We will tell you what we kept and why.
We will respond to requests and provide the rights available to you under the law that applies to you. We will not treat you differently for making a privacy request.

9. Security

We protect information with encrypted connections, one-time sign-in codes, and database rules that let each family see only its own records and limit club office access to a single verified account. No system is perfectly secure; if a security incident affects your information, we will tell you as the law requires.

10. Where information is processed

We are based in California, and our main database is hosted in the United States. Our service providers may also process information in other countries where they or their subprocessors operate. Where that happens, we rely on the safeguards in our providers’ terms for the information they process for us.

11. Changes to this policy

Each version of this policy is dated and published on this website, and earlier versions remain available. If we make an important change, we will tell account holders by email or in their account before it takes effect.

12. Contact

Privacy questions and requests: josh@starterhouse.golf.