Privacy policy

Updated 23 October 2026. This policy covers RGCCbook, the booking and community app for Regnum Golf & Country Club, on the web, iOS and Android. Contact the RGCCbook operator at [email protected] for privacy questions or requests.

Information we use

We store your email, a password hash, name, profile category, gender, handicap, verification state and access role to provide and secure your account. We store bookings, partner requests, chat messages, event participation, posts, photos, comments, likes and scorecards when you use those features. We record acceptance of community terms, blocks and reports to enforce the rules.

Who can see it

Published events, posts, photographs, comments, playing-partner captions and shared scorecards are public, including to visitors without accounts. Booking availability and selected player/partner details are visible to other visitors. Do not share private information or photographs without permission. Booking chat is restricted to the booker and accepted players; reports can be inspected by club administrators. Blocks hide members' content in your signed-in feeds and stop direct partner interactions; they do not make your public posts private.

Service providers and device storage

The service uses its server and SQLite storage, Cloudflare for secure traffic delivery, and the configured email provider for verification and password-reset messages. These providers process information needed to deliver those services, including network addresses and email destinations. The web interface also requests Bootstrap, FullCalendar, fonts, icons and some editorial images from external providers, which receive your IP address when loaded. Their processing may occur outside your country.

The browser stores your sign-in token, theme/language settings and optional scorecard drafts on your device. iOS stores live tokens in Keychain; Android protects tokens with Keystore encryption. Native demo data stays on the device. The app has no advertising or cross-app tracking integration. The current native app needs internet access, not your contacts or precise location.

Retention and deletion

Account information and content remain until you remove them or delete your account. Use Profile → Delete account or the online deletion page. After password confirmation, the active database removes your account, bookings, partner requests/messages, posts/photos/scorecards, comments/likes, event participation, created events and their shared moments, related reports and access history. Existing sessions stop working. Deletion cannot be undone. We do not retain your active account just because a booking is upcoming.

Private backup copies may contain earlier data. The supplied backup workflow expires local archives older than 30 days each time a new backup succeeds and preserves an erasure ledger that must be reapplied before any restore is exposed to users. A small ledger of account identifiers and request timestamps is retained to prevent deleted accounts from returning during a restore. It is not used to sign in or contact you. The operator must schedule backups and apply the same limit to off-device copies and service-provider records; contact us about a specific copy or request. Security or legal records held separately may be retained only where required for a documented legal or security purpose.

Choices and security

You can edit your profile, cancel bookings, delete your posts, withdraw event participation and manage blocks. Use the contact above for access/correction requests, local drafts on another device, or support when you cannot sign in. Transport uses HTTPS in production; passwords are hashed and access is checked on the server. No system is guaranteed to be risk-free.

Younger members

The Youth player category is a sporting category, not proof of age or parental consent. A parent or guardian should contact the operator about youth accounts and privacy requests. Do not publish a child's personal information or image without appropriate permission.