Privacy Policy — OnCourse

Last updated: May 10, 2026

We collect only the information necessary to deliver your beverages and operate our platform. We do not sell, rent, or monetize your personal data — ever.

1. Introduction

OnCourse ("Company," "we," "our," or "us") is a Canadian company operating a web-based beverage ordering and delivery platform designed for use at participating golf courses across Canada. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you access or use the OnCourse platform (the "Service"), in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

By using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Service.

2. Information We Collect

We collect information in the following categories:

Account Information: When you register or place an order, we may collect your name, email address, and phone number.
Order and Transaction Data: Details of items ordered, hole or delivery location, timestamps, order history, and any special instructions.
Location Data: With your explicit permission, we collect GPS coordinates during active orders to route your delivery accurately. See Section 5 for full details.
Communications: Messages exchanged through the in-app chat between you and your delivery driver during an active order.
Technical Data: Browser type, operating system, device type, and general usage data collected automatically to support service performance and troubleshooting. This data does not identify you personally.
Age Verification Data: Confirmation that you meet minimum age requirements when ordering alcoholic beverages, as required by law.

We do not collect payment card information directly. Payment processing, where applicable, is handled by the participating golf course or their designated payment processor.

3. How We Use Your Information

We use the information we collect for the following purposes:

To receive, process, and fulfill your beverage orders
To route delivery drivers to your location on the golf course
To facilitate real-time communication between you and your delivery driver
To send order confirmations, status updates, and delivery notifications
To authenticate your identity and maintain the security of your account
To comply with applicable legal obligations, including alcohol service regulations
To analyze aggregate, de-identified usage patterns and improve our Service
To respond to your inquiries and provide customer support

We do not use your personal information for targeted advertising, and we do not build behavioral profiles for marketing purposes.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to any third party. We share your information only in the limited circumstances described below:

Participating Golf Courses: We share your order details (items ordered, hole location, and order status) with the golf course where you placed your order, solely to fulfill your delivery.
Delivery Drivers: Drivers receive your first name, delivery location, and order contents — only the information necessary to complete the delivery. Driver access is limited to active orders only.
Technology Service Providers: We use Google Firebase for data storage, authentication, and application hosting. Firebase operates under Google's enterprise-grade privacy and security agreements. For details, see Google Firebase Privacy Information.
Legal and Regulatory Requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of OnCourse, our users, or the public.

5. Location Data

OnCourse uses real-time GPS location to guide delivery drivers to your position on the golf course. The following conditions apply to all location data collection:

Location data is collected only after you explicitly grant permission through your browser's location prompt.
Location data is used solely during an active order and is not retained beyond the completion of that delivery.
We do not track, store, or analyze your location outside of active delivery sessions.
Your location is shared only with the driver assigned to your order, in real time, and only for the duration of the delivery.
You may revoke location permissions at any time through your browser settings. Doing so may affect our ability to deliver accurately to your position.

6. Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected:

Account information is retained for the duration your account is active, and for a reasonable period thereafter to resolve disputes or comply with legal obligations.
Order history is retained for up to 12 months to support customer service and order-related inquiries.
Location data is not retained beyond the completion of the associated delivery.
In-app chat messages are retained for the duration of the active order and may be reviewed in the event of a service dispute.

You may request deletion of your account and associated personal data at any time by contacting us. See Section 8 for how to exercise this right.

7. Data Security

We implement industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

TLS encryption for all data transmitted between your browser and our servers
Firebase Security Rules that enforce role-based access control at the database level
Authentication requirements for all user-facing and administrative actions
Principle of least privilege — each user role (golfer, driver, course administrator) has access only to the data required for their function
Periodic review of security configurations and access controls

While we take reasonable steps to secure your information, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Right to Access: You may request a copy of the personal information we hold about you.
Right to Correction: You may request that we correct inaccurate or incomplete information.
Right to Deletion: You may request that we delete your account and associated personal data, subject to any legal obligations requiring retention.
Right to Data Portability: Where technically feasible, you may request your data in a structured, machine-readable format.
Right to Withdraw Consent: Where processing is based on your consent (such as location data), you may withdraw consent at any time without affecting prior processing.
Right to Object: You may object to processing of your personal information in certain circumstances.

Canadian Residents — PIPEDA Rights: As a Canadian company, we are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have the right to access personal information we hold about you, to challenge its accuracy, and to request correction. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, please contact us using the information in Section 13. We will respond to verified requests within 30 days.

9. Cookies and Local Storage

OnCourse uses browser local storage to remember your selected golf course between sessions, so you do not need to re-scan the QR code on repeat visits to the same course. This data is stored locally on your device and is not transmitted to our servers.

We do not use advertising cookies, cross-site tracking technologies, or third-party analytics cookies. Our Service does not participate in behavioral advertising networks.

10. Third-Party Links and Services

Our Service may contain links to third-party websites or services (such as golf course websites). This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.

11. Children's Privacy

The OnCourse platform is intended for adults only. Users must meet the legal drinking age in their province or territory to order alcoholic beverages (19 years of age in most provinces; 18 in Alberta, Manitoba, and Quebec). Users must be at least 18 years of age to use the Service for non-alcoholic orders. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided personal information through our Service, please contact us immediately and we will take prompt steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the Service after any such changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Email:

We are committed to working with you to resolve any concerns about your privacy in a timely and transparent manner.