Legal

Privacy Policy

We take your privacy seriously. This policy explains what we collect, how we use it, and the choices you have.

Last updated: May 26, 2026  ·  Effective: May 26, 2026

1. Overview

TourVaultGolf (“we,” “us,” or “our”) operates the TourVaultGolf marketplace platform accessible at tourvaultgolf.com. This Privacy Policy describes how we collect, use, store, and disclose personal information when you visit our website, create an account, purchase or sell equipment, or otherwise interact with our services.

By using our site, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

The short version: We collect only what we need to run the marketplace, we never sell your personal data to third parties, and you can request deletion of your information at any time by emailing info@tourvaultgolf.com.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third-party services.

Information you provide directly:

  • Account information: Name, email address, and password when you create an account or sign in via Google.
  • Transaction information: Details you submit when buying or selling equipment — including item descriptions, photographs, condition notes, and asking prices.
  • Contact and inquiry information: Messages, equipment submissions, and cash offer requests sent through our contact forms.
  • Membership information: Email address and membership tier selection when you sign up for a Collector, Tour Access, or Vault Elite membership.
  • Payment information: When you complete a purchase, payment details are processed securely by our payment processor (Stripe). We do not store full card numbers or CVV codes on our servers.
  • Communications: Any correspondence you send to us via email or through the site.

Information collected automatically:

  • Usage data: Pages viewed, time spent, links clicked, and navigation paths through the site.
  • Device and browser data: IP address, browser type and version, operating system, device type, and referring URL.
  • Cookies and local storage: Session tokens, authentication state, and site preferences. See Section 5 for details.

Information from third parties:

  • Google Sign-In: If you authenticate via Google, we receive your name, email address, and profile photo from Google’s OAuth service.
  • Stripe: Stripe may share tokenized payment and fraud-prevention signals with us in connection with transactions.

3. How We Use Your Information

We use collected information for the following purposes:

  • Operate the marketplace: Process buy and sell transactions, authenticate equipment, manage listings, and coordinate shipping.
  • Account management: Create and maintain your account, verify identity, and provide access to membership benefits.
  • Customer support: Respond to inquiries, cash offer requests, and resolve disputes.
  • Communications: Send transactional emails (order confirmations, shipping updates, offer responses). With your consent, we may also send marketing emails about new inventory, exclusive drops, and membership offers. You can opt out at any time.
  • Fraud prevention and security: Detect, investigate, and prevent fraudulent transactions and abuse of our platform.
  • Legal compliance: Meet our legal obligations, resolve disputes, and enforce our Terms of Service.
  • Site improvement: Analyse usage patterns to improve the website, catalogue, and user experience.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Sharing & Disclosure

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

  • Service providers: We share information with trusted vendors who help us operate the site — including Firebase (Google Cloud) for database and authentication, Stripe for payment processing, and shipping carriers to fulfill orders. These parties are contractually bound to protect your data and may only use it to provide services on our behalf.
  • Business transactions: If TourVaultGolf is acquired, merges with another company, or sells assets, your data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the site before your information is transferred and becomes subject to a different privacy policy.
  • Legal requirements: We may disclose information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of TourVaultGolf, our users, or the public.
  • With your consent: We may share information with third parties when you have explicitly consented to such sharing.

5. Cookies & Tracking

We use cookies and similar technologies (browser local storage, session storage) to operate our site and remember your preferences.

  • Strictly necessary: Authentication tokens and session identifiers that keep you logged in. These cannot be disabled without breaking core functionality.
  • Functional: Site preferences such as your preview access status (tvg_preview), watchlist items, and cart state stored in localStorage.
  • Analytics: If enabled, anonymised usage analytics to understand how visitors interact with the site. No personally identifiable data is shared with analytics providers.

You can control cookies through your browser settings. Disabling cookies may affect site functionality, including the ability to stay signed in or access member-only features.

We do not use third-party advertising cookies or tracking pixels.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

  • Account data: Retained for the duration of your account. Upon deletion request, we will remove your profile within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes.
  • Transaction records: Order history and financial records are retained for a minimum of 7 years to comply with tax and accounting obligations.
  • Contact form submissions: Retained for up to 2 years to allow follow-up on inquiries and cash offer requests.
  • Authentication logs: Retained for up to 90 days for security and fraud investigation purposes.

7. Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

  • All data transmitted between your browser and our servers is encrypted via TLS (HTTPS).
  • User authentication is managed by Firebase Authentication, which implements secure password hashing and supports multi-factor authentication.
  • Payment data is handled exclusively by Stripe, a PCI DSS Level 1 certified processor. We never transmit or store raw card data on our infrastructure.
  • Access to production databases is restricted to authenticated personnel on a need-to-know basis.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. If you believe your account has been compromised, contact us immediately at info@tourvaultgolf.com.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data (“right to be forgotten”), subject to our legal retention obligations.
  • Portability: Request that we provide your data in a structured, machine-readable format.
  • Objection: Object to processing of your personal data for marketing purposes at any time.
  • Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, email us at info@tourvaultgolf.com with the subject line “Privacy Request.” We will respond within 30 days. We may need to verify your identity before processing your request.

California residents (CCPA): You have the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right not to be discriminated against for exercising your privacy rights. We do not sell personal information as defined under the CCPA.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the “Last updated” date at the top of this page.
  • Notify registered account holders via email.
  • Display a notice on the site for a reasonable period after the change.

Your continued use of our services after the effective date of the revised policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For formal data subject rights requests under GDPR or CCPA, use the subject line “Privacy Request” and include your full name and the email address associated with your account.