Privacy Notice

This notice explains how Golf Anytime (UEN 53494721B) collects, uses, discloses and protects personal data, and how you can access or correct the data we hold about you. It is written to meet the Personal Data Protection Act 2012 (Singapore).

Last updated: 5 October 2026

Who we are

Golf Anytime (UEN 53494721B) operates the indoor golf simulator facility at 785E Woodlands Rise, #01-09, Singapore 735785, and this booking website. Golf Anytime is the organisation responsible for your personal data.

You can reach us on WhatsApp or by phone at +65 8819 0861. For anything about your personal data, please contact our Data Protection Officer using the details at the end of this notice.

What personal data we collect

We collect only what the booking and the door need. We do not use advertising networks or analytics trackers on this site.

Your contact details: full name, email address and mobile number. You give these when you book a bay, and again if you create a member account.
Your booking records: the dates, times and bay you booked, how long for, the party size, your booking reference, what you paid, and any cancellation or reschedule.
Your membership records: the credit packages you bought, credits used and remaining, expiry dates, and any refund.
Your account credentials: if you set a password, we store only a one-way cryptographic hash of it (argon2id). We never store, and cannot recover, the password itself.
Google sign-in data: if you choose “Continue with Google”, we receive from Google the account identifier and the name and email address on that account. We never receive your Google password.
Sign-in session data: for each signed-in session we record the IP address and browser user-agent it was created from, and when it was created, last used and expires. This lets us end a session that is being misused.
Audit records: actions taken on your record by our staff, including who viewed or re-sent a door access code, with the time, the IP address and the browser used. This exists so that access to a door code can be accounted for.
Your acceptance of our terms: which version of the Terms & Conditions and Liability Waiver you accepted, and when.
Messages we send you: the booking confirmation, door access code, email verification and password-reset emails we send you, the email address they went to, and whether delivery succeeded or failed.
CCTV footage: video of the bays and entrance (see “CCTV” below).

We do not ask for, and have no use for, your NRIC, FIN, passport number, date of birth or any other identification number. Please do not send them to us.

Why we collect it

To take, confirm, change and cancel your booking.
To verify your email address, and to send you the door access code for your session. The code is never shown in a browser, so that it is not left behind in browser history, a screenshot or a shared device.
To sell, track and expire membership credits, and to process refunds.
To let you sign in, stay signed in, and recover your account.
To keep the facility and its customers secure: detecting misuse of a door code, investigating a complaint or an incident, and preventing fraud and abuse of the booking system.
To answer your enquiries and handle disputes about a booking, a charge or damage to equipment.
To meet our legal, accounting and tax obligations.

We do not sell your personal data, and we do not send marketing or promotional messages. Every message described above is part of delivering a booking you made. If that ever changes, we will ask for your consent first, and for calls and text messages to Singapore numbers we would check the national Do Not Call Registry as the law requires.

Consent, and how to withdraw it

By making a booking or creating an account you consent to us collecting, using and disclosing your personal data for the purposes above. You can withdraw that consent at any time by contacting our Data Protection Officer.

Withdrawing consent has a practical consequence we would rather you knew in advance: we cannot send you a door access code or a confirmation, so we cannot deliver a booking. Withdrawal does not undo anything we have already lawfully done, and it does not oblige us to delete records we are required to keep for legal, accounting or dispute-handling reasons.

Who we share it with

We disclose personal data only to the service providers that make the booking work, and only the minimum each one needs. We do not sell or rent it to anyone.

Our email provider receives your name and email address to deliver booking confirmations, door access codes, verification links and password resets.
Our payment provider: card and PayNow payments are processed by Stripe. You are taken to Stripe’s own hosted payment page, where you enter your card details or scan the PayNow QR code. Your card number never reaches our servers. We receive only a payment reference and whether the payment succeeded. Stripe’s privacy policy governs what it does with the data you give it.
Google: only if you use “Continue with Google”. The exchange is between you and Google, and we receive the result.
Our hosting provider: the application and database run on a server operated on our behalf. The provider is required to protect your data.
Professional advisers, insurers and the authorities: where we are legally required to disclose, or need to establish or defend a legal claim.

One further external check is worth naming: when you choose a password we test it against the Have I Been Pwned breached-password service. Only the first five characters of a one-way hash of the password are sent, so the service cannot learn your password, your identity or which account the check was for. No personal data leaves us in that request.

Where your data is held, and transfers overseas

Your booking and account records are stored in a database run on our behalf by our hosting provider. Some of our service providers operate outside Singapore, which means your personal data may be transferred out of Singapore. Where that happens we require the recipient to protect the data to a standard comparable to the Personal Data Protection Act 2012.

How long we keep it

Singapore’s PDPA requires us to stop keeping personal data once it no longer serves the purpose it was collected for and there is no legal or business reason to retain it. We do not keep records indefinitely simply because it is easier.

Booking records: 6 years from the booking date.
Payment records: 5 years from the transaction date.
Acceptance of our Terms and Liability Waiver: 6 years from the booking date.
Member accounts: while the account is active, and for 12 months after it is closed or last used. Any unused credit is refunded or honoured before deletion.
Sign-in session records, audit records and message delivery records: 12 months.
CCTV footage: 30 days, unless needed to investigate an incident, in which case we keep the relevant clip until the matter is resolved.

When a period ends, we delete the data or anonymise it so it can no longer identify you.

Some retention is built into the system itself: a sign-in session has a fixed expiry and stops working at it, and email verification and password-reset links expire and can be used only once.

CCTV

Our bays and entrance are monitored by CCTV for security, safety, and the investigation of incidents and disputes. Footage is viewed only by authorised staff and is kept for the period set out above.

How we protect it

The site is served over an encrypted connection.
Passwords are stored only as argon2id hashes. Session tokens, door-code links and password-reset links are stored only as one-way hashes, so a copy of the database does not yield a working credential.
Door access codes are never displayed in a browser. Every time a member of staff views or re-sends one, that is recorded against your booking.
Staff access to customer records is restricted to the people who need it to run the facility, through a separate administration login.
If a data breach occurs that is likely to result in significant harm to you, or that affects a significant number of people, we will notify the Personal Data Protection Commission and affected individuals as the PDPA requires.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Your rights: access and correction

You have the right to ask us:

for a copy of the personal data we hold about you, and how we have used or disclosed it in the past year;
to correct anything that is wrong or out of date;
to stop using your data, by withdrawing your consent.

If you have a member account, the fastest route is to sign in and open your profile, where you can update your name and mobile number yourself, and your bookings, which lists your booking history. To change the email address on your account, or for anything you cannot change there, including a guest booking made without an account, contact our Data Protection Officer.

We will respond to an access or correction request as soon as we reasonably can, and in any case within the time the PDPA allows. We will verify your identity first, for example by confirming the mobile number or booking reference used for the booking, so that your data is not given to someone else. We may charge a reasonable fee for an access request, which we will tell you about before proceeding. If we cannot fulfil a request we will tell you why.

Cookies

This site sets a session cookie once you sign in, to keep you signed in. It holds a random token, not your name or email. Staff signing in to the administration console get an equivalent cookie, and a short-lived cookie is used during Google sign-in to protect that exchange and is discarded immediately afterwards.

We do not use advertising or analytics cookies. The “Find us” link opens Google Maps, and the WhatsApp link opens WhatsApp. Once you follow them you are on those services, and their own policies apply. Clearing the session cookie in your browser signs you out.

Contacting us about your data

Please direct any question, access or correction request, or complaint about how we handle personal data to our Data Protection Officer:

Data Protection Officer, Golf Anytime (UEN 53494721B)

WhatsApp / phone: +65 8819 0861

We aim to reply within 3 working days.

Address: 785E Woodlands Rise, #01-09, Singapore 735785

If you are not satisfied with our response, you may raise the matter with the Personal Data Protection Commission of Singapore.

Changes to this notice

We will update this page when what we do with personal data changes. Where a change is significant we will tell you before it takes effect. Please check this page from time to time.

← Back to booking