NICOLE GOLF LAB PRO

Privacy Policy

How NICOLE GOLF LAB PRO collects, uses, shares, protects and deletes personal data

Version reference: 1.9.33 | Draft date: 1 October 2026

IMPORTANT: This document is a detailed operational draft prepared from the current application features. Before publication, the operator must insert the legal entity, address, contact details, designated privacy contact, retention periods, and the exact names of all external processors. Obtain a qualified legal review for the jurisdictions in which the service is offered.

1. Who We Are

This Privacy Policy applies to the NICOLE GOLF LAB PRO mobile application, its related websites, account services, community features, trainer directory, private messaging, video analysis and customer support services (together, the “Service”).

Data controller: the legal entity operating NICOLE GOLF LAB PRO. Before publication, the operator must insert its full legal name, registered address, company identification number where applicable, and a working privacy contact email. The operator may also designate a data protection contact or Data Protection Officer where required by law.

Privacy contact: [insert official privacy email address]. Website: https://nicolesport.com/

2. Scope and Acceptance

This Policy applies when you create an account, use the Service as a guest, upload or analyze a video, communicate with a trainer, publish or interact with community content, purchase membership, submit a report, contact support, or otherwise interact with the Service.

The Service is intended for adults and users who meet the minimum age required in their jurisdiction. It is not intentionally directed to children. If you believe a child has provided personal data unlawfully, contact the privacy address above.

3. Personal Data We Process

4. How We Use Data and Legal Bases

Where consent is used, you may withdraw it at any time. Withdrawal does not affect processing that occurred before withdrawal or processing based on another lawful basis.

5. Video, Photography and AI Processing

The Service allows users to select or record golf videos and upload them for classic or AI analysis. The Service may generate thumbnails, annotated frames, skeleton overlays, tempo and posture metrics, swing-phase markers and other technical outputs. The analysis is intended for sports coaching and performance support only.

Do not upload another person’s image or video unless you have the necessary permission. Do not upload medical records, payment-card information, government identification documents or other information that is not needed for golf analysis.

AI outputs may be generated or assisted by a configured AI processing provider or proxy. The operator must maintain an up-to-date list of the actual AI provider and its applicable data processing terms. AI outputs can be inaccurate and must not be treated as medical, legal or guaranteed coaching advice.

6. Community, Private Messages and Ratings

The Service provides community posts, replies, private conversations between amateurs and professionals, trainer ratings, comments, reports, appeals and moderation. Private messages are shown to the intended participants, subject to safety operations such as user reports, moderation, abuse prevention, legal requests and account security. Messages may be retained as necessary to investigate reports, appeals, fraud, security incidents or legal claims.

Public content, including trainer profiles, approved ratings and community posts, may be visible to other users according to the feature settings. Users remain responsible for content they submit. The Service may hide, remove, restrict or preserve content under the Terms of Use and applicable law.

7. Sharing and Processors

We do not sell personal data. We may disclose data to service providers who process it on our instructions, to the extent necessary for the Service:

• Hosting, database, storage and server infrastructure providers;

• The operator’s WordPress and WooCommerce environment for account, membership, community, trainer, moderation and order functions;

• Stripe or the payment processor used by WooCommerce for payment processing and payment security;

• The configured AI provider or proxy used for requested swing analysis;

• Email delivery providers used for account, moderation, support and transactional messages;

• Push notification infrastructure used to deliver notifications;

• Professional advisers, auditors, insurers, authorities or other recipients where required by law or necessary to protect rights and safety;

• A buyer or successor in a merger, acquisition or business transfer, subject to appropriate safeguards.

The operator must replace generic provider descriptions with the exact current provider names and links before publication, and must maintain appropriate data processing agreements where required.

8. International Transfers

Some service providers may process data outside the European Economic Area or the United Kingdom. Where required, the operator will use an adequacy decision, Standard Contractual Clauses, the UK International Data Transfer Agreement or another lawful transfer mechanism, together with appropriate supplementary safeguards.

9. Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, to provide the Service, meet legal and accounting obligations, resolve disputes, enforce agreements and protect security. The operator must publish or link to a retention schedule that identifies the intended periods for account data, videos, photos, AI history, messages, reports, audit logs and payment records.

When an account is deleted, we delete or anonymise account-related data unless retention is required by law or necessary for a documented legal, security or fraud-prevention purpose. Backups may take a limited additional period to cycle out and remain protected during that period.

10. Security

We use reasonable technical and organisational measures appropriate to the risk, including HTTPS/TLS for data in transit, access controls, authentication sessions, rate limits, moderation controls, audit logging and restricted administrative access. No internet service can guarantee absolute security. Users must protect their password and report suspected compromise immediately.

11. Your Rights

Subject to legal conditions and exemptions, you may request access, correction, deletion, restriction of processing, portability, objection to processing based on legitimate interests, and withdrawal of consent. You may also object to direct marketing at any time.

Requests may be submitted to [insert privacy email] or through the account tools. We may request reasonable verification to protect accounts and prevent fraudulent requests. You may complain to the supervisory authority in your country. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (ÚOOÚ).

12. Account and Data Deletion

Users can request account deletion in the application. The operator must also maintain a public web page where users can request deletion without signing in: [insert public account-deletion URL]. The deletion page must explain what is deleted, what may be retained by law, how long a request takes and how the user can contact support.

13. Cookies and Similar Technologies

The websites may use strictly necessary cookies and, where applicable, analytics, security, payment or preference technologies. Website cookies are described in a separate Cookie Policy and managed through the available consent controls. The mobile application may use local storage for settings, cached data and analysis history.

14. Changes to This Policy

We may update this Policy when the Service, law or processing activities change. We will publish the updated version with a new effective date. Where required, we will provide additional notice or obtain consent.

15. Contact

Privacy contact: Anna Nicole Kučerová

Controller: Panenska 29, Jablonec nad Nisou 46601 , Czech republic

General support: https://nicolesport.com/support/

• email: info@nicolesport.com