Privacy Policy

Privacy Policy Birdie Haus LLC Effective date: October 1, 2026 1 About this policy Birdie Haus LLC (Birdie Haus, we, us, or our) explains in this Privacy Policy how we handle personal data when you visit birdie-haus.com, create an account, purchase a membership or pass, reserve a simulator bay, attend an event, visit our facility, contact us, or interact with our marketing. Personal data means information linked or reasonably linkable to an individual. This policy does not govern another business’s independent websites or services, or employment records. Some practices below depend on the features and providers used for the service you select. Where a practice is described as conditional, it applies only when that feature is enabled. We will provide any additional notice or consent request required by law before using personal data in a materially different way. 2 Personal data and its sources Information you provide includes your name, email address, telephone number, mailing or billing address, account and login information, preferences, membership details, reservation information, guest information, event requests, messages, waivers, and customer support communications. For minors permitted to use the facility, we may receive age or eligibility information and parent or guardian contact and consent information from the parent or guardian. Please provide another person’s information only when you have authority to do so. Transaction information includes purchases, payments, refunds, balances, membership renewals, reservation and attendance history, and payment confirmations. Our payment or booking providers may collect card numbers, billing details, and other payment credentials directly. We may receive payment status, transaction identifiers, card type, limited card details such as the last four digits, and a token for authorized future charges. A provider’s own privacy notice also governs its independent processing. Automatically collected information may include IP address, device and browser type, operating system, cookie and advertising identifiers, referring URLs, pages viewed, links clicked, session dates and times, approximate location inferred from IP address, and reservation or purchase events. Cookies, pixels, tags, local storage, and similar technologies may collect this information. SDKs may collect comparable information if used in an app or connected feature. Facility information may include access credential identifiers, entry and exit timestamps, access attempts, incident records, and security camera images where cameras or automated access systems are used. Simulator or connected technology may also generate usage, session, or gameplay data associated with an account. We may receive information from booking, payment, access, simulator, analytics, and advertising providers, from people who arrange a booking for you, and from social platforms when you interact with our pages, ads, or lead forms. 3 How we use personal data We use account, contact, reservation, transaction, and relevant usage data to provide the Services; manage memberships, access, bookings, guests, and events; process authorized payments and refunds; provide support; and send operational messages such as confirmations, reminders, billing notices, and service changes. We use relevant device, usage, access, and incident information to maintain and improve our website and facility, troubleshoot problems, understand service use, prevent fraud and unauthorized access, protect people and property, investigate incidents, enforce agreements, and comply with legal obligations. We use contact details and marketing interactions to send promotional communications where permitted and subject to your choices. Advertising uses are described separately below. We limit collection to information reasonably necessary for the purposes disclosed. Where applicable law requires consent for sensitive data or a use incompatible with disclosed purposes, we obtain that consent before processing. This policy is not a request for sensitive information; please avoid sending health, government identification, financial account, or other sensitive details unless needed for a specifically identified service or request. 4 Disclosures and recipients Service providers and processors may receive contact and account data, reservation and transaction records, device and usage data, access logs, and relevant images as needed for hosting, booking, payments, customer support, communications, analytics, simulator operation, access control, security, and storage. Providers acting as our processors handle data under appropriate contractual instructions and restrictions. Payment networks and providers may also process payment and fraud information for their own lawful purposes. Advertising and social partners, when enabled, may receive online identifiers, device and browsing information, ad interactions, reservation or purchase events, and contact identifiers used for audience matching, subject to your choices and required consent. These recipients may include Google and other search advertising platforms, Meta (Facebook and Instagram), TikTok, advertising networks, and comparable social or measurement providers. Their independent processing is governed by their privacy notices. Hashing an email address for matching does not necessarily make it anonymous. We may share relevant records with professional advisers, insurers, and authorities when reasonably necessary for legal advice, claims, safety, legal process, or compliance. A potential or completed merger, financing, acquisition, asset sale, or similar transaction may involve disclosure of relevant business records subject to appropriate confidentiality and legal protections. We may disclose information at your direction, such as to someone you authorize to manage a booking. We do not make private account information public merely because you use our facility. 5 Cookies analytics and advertising Essential technologies support login, reservations, payment flow, security, and preference storage. Optional analytics technologies measure visits, feature use, traffic sources, and service performance. Advertising technologies can measure conversions, build audiences, match customer contact identifiers, and show or measure ads on other websites and apps. Browser storage may persist between visits; pixels and server-side event connections may transmit data even when they do not create a cookie. If enabled, tools such as Google Analytics, Google Ads or other search advertising tools, Meta Pixel or Conversions API for Facebook and Instagram, TikTok Pixel or Events API, and similar tags, APIs, or SDKs may receive identifiers and interactions described above. Remarketing or retargeting uses previous interactions to reach you again. Audience matching may use contact identifiers to find existing customers on a platform; similar or lookalike audiences may help reach others. We do not represent that every listed tool is currently installed. Cross-site or cross-app advertising based on your activity over time may be targeted advertising under applicable law. Contextual ads based only on a current search or page and certain performance measurements are treated differently under Indiana law. Advertising disclosures can qualify as a sale or sharing under some state laws even without a cash payment. Indiana’s sale definition generally requires monetary consideration and has statutory exceptions. Your advertising and sale choices are described below. We do not sell personal data for monetary consideration. The tools described in this section are examples of technologies we may use, rather than confirmation that they are currently active. Any future use will be subject to this policy, applicable law, and any required notice or consent. 6 Advertising and communication choices To request that we stop using your personal data for targeted advertising, email info@birdie-haus.com with the subject Privacy Opt Out. Include the email associated with your account and, if relevant, the browser or device involved. You do not need to create an account. We will apply the choice to information we can reasonably associate with you, subject to applicable law. Essential service and security processing can continue. Where website cookie or privacy controls are offered, use them to reject optional analytics or advertising technologies or change a prior choice. You can also block or delete cookies in your browser or adjust mobile advertising settings; this may affect functionality. Browser controls alone may not stop server-side audience matching, so contact us for an account-related advertising opt out. Choices may need to be repeated across devices, browsers, or after clearing cookies. An opt out does not remove all advertising or automatically erase data previously disclosed. You may also use Google My Ad Center (myadcenter.google.com), Meta account advertising preferences, and TikTok account advertising settings to manage those platforms’ advertising. These platform choices are separate from a request to Birdie Haus LLC. Where applicable law requires recognition of a valid universal opt-out signal, such as Global Privacy Control, we honor it as required. Do Not Track signals have no uniform industry meaning; use the request methods above for a clear choice. You may unsubscribe from promotional emails using the message’s unsubscribe link or by contacting info@birdie-haus.com. If we offer text marketing, follow the message’s instructions, including replying STOP where supported. Consent to marketing is not a condition of purchase. We may still send necessary booking, billing, safety, and other nonpromotional messages. Marketing choices do not cancel a membership or reservation. 7 Sensitive data Where the Indiana Act applies, we obtain required consent before processing sensitive data, including data revealing racial or ethnic origin, religion, health diagnoses, sexual orientation, citizenship or immigration status, genetic or biometric identifiers used to identify a person, precise geolocation, and data of a known child. Ordinary video images are not necessarily biometric identifiers, but identification technology can create biometric data. Any new sensitive-data processing requires the applicable notice and consent; general acceptance of Terms is not a substitute. 8 Security cameras and facility access Where installed, security cameras and access logs help protect people and property, investigate incidents, detect unauthorized entry, and operate an automated or unstaffed facility. Authorized personnel and relevant security, access, or hosting providers may access these records; relevant records may be shared with insurers, advisers, or authorities for incidents or lawful requests. Footage is not necessarily monitored live and does not guarantee safety. Any advertising use of an identifiable customer image is handled separately under applicable law and any required consent. A security notice or membership purchase alone does not grant unlimited permission to use your likeness for advertising. 9 Retention and security We retain personal data only as long as reasonably necessary for the disclosed purposes, including active memberships, reservations, account support, accounting, legal obligations, disputes, and security. Retention depends on the nature of the data, service relationship, legal requirements, and the need to preserve incident or claim evidence. Backup records may remain until ordinary backup rotation, subject to restricted use. When no longer needed, records are deleted or rendered unusable or de-identified as appropriate. We use reasonable administrative, technical, and physical safeguards appropriate to the information and risks, including limits on authorized access and reasonable provider controls. No system is completely secure. Protect your password and access credentials and notify us promptly of suspected misuse. We provide any security breach notices required by Indiana Code article 24-4.9 and other applicable laws. Data may be processed in the United States or elsewhere by providers, subject to applicable protections. 10 Minors A minor’s ability to visit the facility is governed by our Terms and facility rules. Parents or guardians should manage bookings and provide any required consent. Our online account and marketing services are intended for adults and are not directed to children under 13. We do not knowingly collect personal data online from a child under 13 without the notice and verifiable parental consent required by COPPA, unless a lawful exception applies. Where COPPA applies, parental rights include reviewing a child’s information, requesting deletion, and refusing further collection or use. Separate verifiable parental consent is required for covered third-party disclosures, including targeted advertising, unless a rule exception applies; unnecessary information is not required as a condition of participation. Contact info@birdie-haus.com if you believe a child’s data was collected improperly. We will investigate and take appropriate action. Facility records about minors are also subject to applicable privacy protections. 11 Third party services and policy updates Links, embedded features, social pages, booking services, and payment services may be operated by other businesses. Review their notices for processing they control independently. We remain responsible for obligations that apply to our own processing and to processors acting for us. We may update this policy to reflect changes in services, practices, or law and revise the effective date. We provide additional notice and obtain consent where legally required. A later policy does not retroactively authorize incompatible uses of previously collected data without any required consent. 12 Contact us Birdie Haus LLC Email: info@birdie-haus.com Website: birdie-haus.com Mail: 9141 E 109th Ave, Crown Point, IN 46307 For questions about personal data or requests to access, correct, or delete it, email info@birdie-haus.com with the subject Privacy Request or write to the mailing address above. For advertising choices, use Privacy Opt Out. We review requests subject to applicable law, identity verification where appropriate, and lawful retention needs. We honor any consumer rights and response requirements that apply to our business. Do not email complete payment card numbers, account passwords, or access credentials. Data Sharing • Customer data is not shared with 3rd parties for promotional or marketing purposes. • Mobile opt-in and consent are never shared with anyone for any purpose. Any information sharing that may be mentioned elsewhere in this policy excludes mobile opt-in data. Messaging Program Terms and Conditions 1. The messaging program may consist of general customer care messaging to answer questions and provide support to customers, and/or marketing messaging that include discount codes, special deals or texts promoting our products/services, depending on which programs(s) you opt in to. We will only send content you have explicitly signed up to receive via our opt-in process. Messages will be sent from (219) 388-7410. 2. You can cancel the SMS service at any time. Just text 'STOP' to the phone number from which you received messages. After you send the SMS message 'STOP' to us, we will send you an SMS message to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us. If you want to join again, just sign up as you did the first time and we will start sending SMS messages to you again. 3. If you are experiencing issues with the messaging program you can reply with the keyword HELP for more assistance, or you can get help directly at paola@birdie-haus.com. 4. Carriers are not liable for delayed or undelivered messages. 5. As always, message and data rates may apply for any messages sent to you from us and to us from you. Message frequency will vary based on communication needs. If you have any questions about your text plan or data plan, it is best to contact your wireless provider. 6. If you have any questions regarding privacy, please read our privacy policy details contained in the rest of this page or contact us at info@birdie-haus.com