Effective date: 31/08/2026 — Last updated: 31/08/2026

This Privacy Policy explains how [BGX Legal Entity Name] ("BGX," "we," "us"), a company organized under the laws of Colombia, collects, uses, shares, and protects personal information when you visit www.bogotagolfexperience.com (the "Site") or book our golf travel Services, including when you are located in the United States.

Because BGX is a Colombian company, we process personal data under Colombian Law 1581 of 2012 and Decree 1377 of 2013 (habeas data), supervised by the Superintendencia de Industria y Comercio (SIC), in addition to complying with applicable US state privacy laws for our US-based Guests as described below.

1. Information We Collect

● Identity and contact data: name, email, phone number, mailing address.
● Booking and travel data: passport details (if required for reservations), golf handicap, group size, dietary or accessibility needs, travel dates.
● Payment data: processed by our payment processor, Stripe; BGX does not store full card numbers.
● Communications: messages you send us via forms, email, WhatsApp, or chat.
● Usage and device data: IP address, browser type, pages visited, referring URLs, and similar data collected automatically via cookies and similar technologies (see our Cookie Policy).
● Marketing preferences: whether you've opted in to emails, SMS, or newsletters.
2. How We Use Your Information

We use personal information to: process and manage bookings; communicate with you about your trip; provide customer support; process payments; send marketing communications (only with your consent or as permitted by law, and always with an opt-out); improve the Site and our Services; detect and prevent fraud; and comply with legal obligations (including tax and immigration-related recordkeeping).

3. How We Share Information

We share personal information with:

● Service providers who perform functions on our behalf, such as payment processing (Stripe), email/CRM platforms, analytics providers, and hosting providers, under confidentiality obligations.
● Golf clubs, hotels, transportation providers, and other partner suppliers, only to the extent necessary to fulfill your booking.
● Legal and safety purposes: when required by law, regulation, legal process, or to protect the rights, property, or safety of BGX, our Guests, or others.
● Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
We do not sell your personal information for money. Depending on the analytics/advertising tools used on the Site (e.g., ad pixels), some US state privacy laws may classify certain cookie-based data sharing with advertising partners as a "sale" or "share" — see Section 6 below on your choices.

4. Cookies and Tracking Technologies

The Site uses cookies and similar technologies as described in our separate Cookie Policy, which explains the categories of cookies used and how to manage your preferences.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements (for example, Colombian tax law generally requires retention of commercial records for several years), after which it is deleted or anonymized.

6. Your Privacy Rights

If you are a resident of Colombia

Under Law 1581/2012, you have the right to know, update, rectify, and delete your personal data, and to revoke consent for its processing, by contacting us at [privacy email]. You may also file a complaint with the Superintendencia de Industria y Comercio.

If you are a resident of the United States

A growing number of US states — including California, Colorado, Connecticut, Virginia, Texas, and others — give residents rights over their personal information. Where applicable to BGX, we honor requests to:

● Know / access the personal information we hold about you.
● Correct inaccurate personal information.
● Delete your personal information, subject to legal exceptions (e.g., records we must keep for completed bookings or tax purposes).
● Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising, and of profiling for certain automated decisions.
● Data portability, where technically feasible.
● Non-discrimination for exercising any of these rights — we will not charge you a different price or deny you Services because you exercised a privacy right.
To exercise these rights, email [privacy email] with your name, the right you wish to exercise, and enough information to verify your identity. We will respond within the timeframe required by applicable law (generally within 45 days, extendable once by 45 additional days where permitted). You may designate an authorized agent to submit a request on your behalf.

Global Privacy Control (GPC): where required by applicable state law, we honor GPC browser signals as a valid opt-out request for the browser/device on which the signal is sent.

Note: many of the state law rights above legally apply only to businesses that meet certain revenue or data-volume thresholds. BGX may fall below those thresholds today; we describe these rights on a best-practices basis so Guests know what to expect and so this Policy stays accurate as the business grows. Confirm applicable thresholds with counsel as your customer volume changes.

7. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without parental consent, consistent with the US Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us personal information, contact us at [privacy email] and we will delete it.

8. International Data Transfers

Because BGX is based in Colombia and Guests are often located in the United States, your personal information will be transferred to, stored, and processed in Colombia and potentially other countries where our service providers operate. We take reasonable steps to protect information transferred internationally consistent with this Policy and applicable law.

9. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links

The Site may link to third-party websites (e.g., golf clubs, hotels, payment processors). We are not responsible for the privacy practices of those third parties; review their policies separately.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be reflected by an updated "Last updated" date, and where required by law, we will provide additional notice.

12. Contact Us

MarketingEmocional

General contact: alejo@alejobernal.com