Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how IGOOD GOLF LIMITED, a Hong Kong limited liability company doing business as IGOOD GOLF, collects, uses, stores, shares, and protects personal information obtained through our website at www.igoodgolf.buzz, through any related digital properties, through our professional services, and through any other interactions you may have with our organization. This policy applies to all visitors, users, clients, prospective clients, vendors, and job applicants who interact with IGOOD GOLF.

IGOOD GOLF is a computer systems design and related services firm specializing in enterprise systems architecture, cloud infrastructure engineering, systems integration, cybersecurity, and managed IT operations. Our registered office is located at Room 704, 7th Floor, New Mandarin Plaza Tower A, 14 Science Museum Road, Hong Kong. Throughout this document, references to IGOOD GOLF, we, us, and our refer to IGOOD GOLF LIMITED and its affiliated operating entities. The website was developed and is maintained by the IGOOD GOLF engineering team.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision contained herein, you should discontinue use of our website and services immediately. We reserve the right to modify this policy at any time, and such modifications will be effective immediately upon posting to this page. Your continued use of our website or services after any changes constitutes your acceptance of the revised policy.

This Privacy Policy is designed to comply with applicable privacy laws in the jurisdictions where we operate, including but not limited to the Personal Data (Privacy) Ordinance of Hong Kong, the California Consumer Privacy Act as amended by the California Privacy Rights Act, the General Data Protection Regulation to the extent it governs our processing activities, and other applicable data protection legislation. We are committed to the principles of transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality in all of our data handling practices.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you interact with our website, communicate with our team, or engage our services. This includes information submitted through our contact forms, email correspondence, phone calls, service inquiry forms, and client onboarding documentation. The categories of information we may collect include your full name, business email address, personal email address if provided, telephone number, job title, organization name, physical business address, billing address, payment information including bank account details and credit card data where applicable for service engagement, tax identification numbers, and any other information you choose to include in messages, project descriptions, or service requests submitted to us.

When you engage IGOOD GOLF for professional services, we may also collect additional information necessary for the performance of our contractual obligations. This can include system access credentials provided under strict security protocols, network configuration data, infrastructure documentation, architectural diagrams, and other technical information related to your existing systems environment that you authorize us to review and optimize as part of the services we provide.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through standard web technologies. This automatic collection includes your Internet Protocol address, browser type and version, operating system type and version, device type and manufacturer, screen resolution, referring and exit pages, date and time stamps of your visit, pages viewed and time spent on each page, clickstream data including the sequence of links and buttons you interact with, and form interaction behavior. We also collect information about your network including Internet Service Provider name, approximate geographic location derived from your IP address at the city or regional level, connection speed, and language preferences as indicated by your browser settings. We use server logs, web beacons, tracking pixels, and similar technologies to collect this information. Server log data is typically retained for thirty days before being archived and purged, unless required for security investigations or legal compliance.

2.3 Information from Third Parties

We may receive information about you from third-party sources to supplement our own records and to help us provide more relevant services. These sources may include business intelligence platforms, publicly available business registries, professional networking platforms, trade association directories, credit reporting agencies where applicable for business account verification, and referral partners who introduce you to our services. We treat all information received from third-party sources in accordance with this Privacy Policy and applicable law.

3. How We Use Your Information

We use the information we collect for specific business purposes necessary to provide our services, operate our business, and comply with legal obligations. We use your information to provide, maintain, and improve our services including the delivery of contracted computer systems design, architecture consulting, cloud infrastructure engineering, systems integration, cybersecurity assessment, and managed IT operations services. This includes using your contact information to communicate about project status, deliverables, milestones, and service-related notifications. We use your information to respond to inquiries submitted through our website, by email, or by telephone, providing responsive and personalized replies based on the content of your inquiry. We use your information to process payments, manage billing and invoicing, maintain financial records, and fulfill accounting obligations including transaction processing, invoice generation, payment reconciliation, and financial reporting. We use your information to send marketing communications about our services, industry insights, technical white papers, event invitations, and company updates where you have provided consent or where otherwise permitted by applicable law. You may opt out of marketing communications at any time. We use your information to analyze website usage patterns, improve user experience, optimize website performance, and develop aggregate statistical insights. We use your information to protect the security and integrity of our systems, networks, and data, including monitoring for unauthorized access, investigating security incidents, detecting fraud, enforcing our Terms of Service, and complying with legal obligations.

4. Legal Bases for Processing

For individuals located in jurisdictions that require a specified legal basis for the processing of personal data, we rely on the following legal grounds. Contractual Necessity means processing is necessary for the performance of a contract with you, such as delivering services you have engaged us to provide, or to take steps at your request prior to entering into a contract. Legitimate Interests means we process information where necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your data protection rights. Our legitimate interests include operating and improving our business, providing customer support, protecting against fraud and security threats, conducting business analytics, and marketing our services to existing and prospective clients in a business-to-business context. Consent means that where required by applicable law, we obtain your consent before processing your personal data for specific purposes, such as sending direct marketing communications or placing non-essential cookies on your device. You have the right to withdraw consent at any time. Legal Obligation means we process information where necessary to comply with applicable laws, regulations, court orders, government requests, or other legal processes to which we are subject. Vital Interests means that in rare circumstances, we may process information where necessary to protect your vital interests or those of another natural person.

5. Disclosure of Your Information

We do not sell your personal information. We do not rent, trade, or otherwise disclose your personal information to third parties for their independent commercial use. We may share your information only in limited circumstances and always subject to appropriate confidentiality and data protection obligations. We may share information with service providers and subcontractors who perform functions on our behalf, including cloud hosting providers, payment processors, customer relationship management platform operators, email service providers, analytics services, professional advisors including legal counsel and accountants, auditors, and insurance providers. Each service provider is bound by contractual obligations that limit their use of your information to the specific purpose for which it was disclosed and require appropriate technical and organizational security measures. We may disclose information as required by law, regulation, legal process, or governmental request, including responding to subpoenas, court orders, or search warrants. We will make reasonable efforts to notify you of such disclosure unless prohibited by law. We may disclose information in connection with a corporate transaction, including a merger, acquisition, or sale of assets. We may disclose aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you for any lawful purpose.

6. Data Retention

We retain personal information for no longer than is necessary to fulfill the purposes for which it was collected, or as required by applicable law, regulation, or contractual obligation. Contact form submissions and inquiry correspondence are retained for two years from the date of last communication. Client engagement records including contracts, project documentation, and communications are retained for the duration of the client relationship plus seven years following termination. Financial records including invoices and accounting documentation are retained for seven years in accordance with applicable tax laws. Website server logs are retained for thirty days before being purged. Anonymized aggregate analytics data may be retained indefinitely for trend analysis and business planning.

7. Data Security

We implement and maintain comprehensive administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your personal information. Our security program is aligned with industry standards and is regularly reviewed and updated. Technical safeguards include TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, multi-factor authentication for all administrative access, role-based access controls with the principle of least privilege, automated vulnerability scanning and penetration testing, intrusion detection and prevention systems, endpoint detection and response capabilities, SIEM with real-time alerting, and regular third-party security assessments and audits. Administrative safeguards include a documented information security policy reviewed annually, mandatory security awareness training for all personnel, background checks for employees and contractors with access to sensitive systems, formal incident response procedures with defined escalation paths, vendor risk management with security assessments for all third-party service providers, business continuity and disaster recovery plans tested at least annually, and data classification and handling procedures that define protection requirements based on information sensitivity. While we implement robust security measures, no method of electronic transmission or storage is perfectly secure. In the event of a data breach affecting your personal information, we will notify you and relevant authorities in accordance with applicable legal requirements.

8. Your Privacy Rights

Depending on your jurisdiction of residence, you may have certain rights regarding your personal information. We honor all applicable privacy rights and will respond to verified requests in accordance with the timelines and requirements set forth by governing law. Rights may include access and data portability, correction of inaccurate or incomplete personal information, deletion under certain circumstances, restriction of processing, opt-out of sale or sharing (IGOOD GOLF does not sell personal information and has not done so in the preceding twelve months), and non-discrimination for exercising privacy rights. To exercise any of these rights, please submit a verifiable request using the contact information provided in Section 16. We will acknowledge receipt of your request within ten business days and provide a substantive response within the time period required by applicable law, typically forty-five calendar days. We may extend the response period by an additional forty-five days when reasonably necessary. Before fulfilling your request, we will verify your identity by matching information you provide against our existing records. We may require additional verification for sensitive requests involving particularly sensitive categories of personal information.

9. Cookies and Tracking Technologies

Our website uses cookies, web beacons, tracking pixels, local storage, and similar technologies to enhance your browsing experience, analyze website traffic, and understand where our visitors originate. Essential cookies enable core functionality such as security, network management, and accessibility and do not require your consent under most privacy regulations. Analytics cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. You may configure your browser settings to block, delete, or alert you about cookies. Disabling essential cookies may affect website functionality. We do not currently respond to browser-based Do Not Track signals in a standardized manner.

10. Children's Privacy

Our website and services are directed at business professionals and are not intended for use by individuals under the age of eighteen. We do not knowingly collect, solicit, maintain, or process personal information from children under the age of thirteen. If we become aware that we have inadvertently collected personal information from a child without verified parental consent, we will take immediate steps to delete such information from our records.

11. International Data Transfers

IGOOD GOLF is headquartered in Hong Kong, and our data processing activities may occur in Hong Kong, the United States, and other jurisdictions where our service providers operate. If you are visiting our website or using our services from a different jurisdiction, your information may be transferred to, stored in, and processed within jurisdictions that may have data protection laws different from those of your country of residence. When we transfer personal information across international borders, we implement appropriate safeguards to ensure your information receives an adequate level of protection as required by applicable data protection laws. By using our website or services, you acknowledge that your information may be subject to the laws of the jurisdictions where processing occurs.

12. Third-Party Services and Links

Our website may contain links to third-party websites and services not owned or controlled by IGOOD GOLF. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of every third-party website you visit before providing any personal information. When we engage third-party service providers, we conduct due diligence to assess their data protection practices and enter into written agreements imposing data protection obligations consistent with this Privacy Policy.

13. Do Not Track Signals

Certain web browsers offer a Do Not Track feature that sends a signal requesting that websites refrain from tracking browsing activities. At present, there is no consensus among industry participants, standards bodies, or regulatory authorities regarding the meaning of Do Not Track signals. As a result, our website does not currently respond to Do Not Track signals. You may manage tracking preferences through the cookie controls described in Section 9.

14. Data Breach Notification

In the event of a security incident resulting in unauthorized access to, disclosure of, or loss of personal information under our control, we will execute our incident response procedures to contain the incident, assess scope and impact, and notify affected individuals and relevant regulatory authorities in accordance with applicable legal requirements. Notifications will include a description of the incident, the categories and approximate number of affected individuals, categories of personal information involved, likely consequences, measures taken to address the breach, and contact information for obtaining additional information.

15. Changes to This Privacy Policy

We reserve the right to update, modify, or replace this Privacy Policy at any time. When we make material changes, we will post the updated policy on this page with a new Last Updated date and provide additional notice where required by applicable law. We encourage you to review this Privacy Policy periodically to stay informed about our information practices.

16. Contact Us About Privacy

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or our data handling practices, or if you wish to exercise your privacy rights, please contact us at:

IGOOD GOLF LIMITED
Attn: Privacy Office
Room 704, 7th Floor, New Mandarin Plaza Tower A
14 Science Museum Road
Hong Kong

Email: support@igoodgolf.buzz
Phone: +1 (903) 991-5879
Website: www.igoodgolf.buzz

The IGOOD GOLF engineering team developed and maintains this website with data privacy and security as foundational design principles embedded throughout our technology stack.