NYCGOlf4ALL Privacy Policy

Effective Date: October 13, 2026

1. Introduction

NYCGOlf4ALL (“we,” “our,” or “us”) operates a WordPress website that allows visitors to contact us through an online Contact page.

This Privacy Policy explains how we collect, use, process, store, and protect information submitted through our website, including information transmitted using a WordPress SMTP plugin connected to Gmail.

We are committed to protecting personal information and complying with applicable privacy requirements and Google's API policies.

2. Information Collected Through Our Contact Form

When you submit a message through our Contact page, we may collect the information you provide, including:

• Your name.
• Your email address.
• The subject of your message, if provided.
• The contents of your message.
• Any additional information you voluntarily include.

Please do not submit passwords, payment card information, or other sensitive personal information through our Contact form.

We use this information to receive and respond to your inquiries, provide requested assistance, and maintain communications with website visitors.

3. Gmail and WordPress SMTP Integration

NYCGOlf4ALL uses a WordPress SMTP plugin configured to connect to a designated Gmail account for sending outgoing website emails.

This integration may be used to deliver contact form submissions, website notifications, and other legitimate communications initiated through our website.

When a message is sent, information such as the recipient's email address, sender details, subject line, message body, and relevant email headers may be transmitted through our website server to Google's email service.

Google processes and delivers these messages as the email service provider.

The integration is intended for outgoing email delivery. We do not intentionally use it to read unrelated Gmail messages, search the Gmail inbox, or manage or delete mailbox content.

4. Google OAuth Permissions and Authorization

The SMTP integration may use Google's OAuth 2.0 authorization process to connect WordPress to the designated Gmail account without requiring us to store the account password directly in the plugin.

Gmail SMTP OAuth authentication may request the following scope:

https://mail.google.com/

This permission provides broad access to Gmail mail operations, including reading, composing, sending, and permanently deleting email. Although the configured WordPress SMTP integration is intended to send outgoing website emails, the permission itself may allow broader access than the sending functionality requires.

We will use the authorization only in accordance with the configured integration, the functionality disclosed in this policy, and applicable Google policies. We will seek a narrower permission where technically supported and appropriate.

OAuth access tokens, refresh tokens, and related authorization information may be stored by the plugin or website server as necessary to maintain the authorized connection. We take reasonable steps to protect these credentials from unauthorized access.

The designated Google Account owner may revoke the application's access through Google's account permissions page:

https://myaccount.google.com/permissions

Revoking authorization may prevent the website from sending emails until the integration is reconfigured.

5. How We Use Contact Form and Email Data

We use contact form information and related email data to:

• Deliver visitor inquiries to our designated email account.
• Respond to questions, feedback, and requests.
• Send legitimate website-related notifications.
• Troubleshoot delivery failures and maintain the reliability of the email integration.
• Protect the website against unauthorized use and abuse.

We do not sell contact form information or use Gmail data for advertising or unrelated commercial purposes.

We do not use Google API data to train generalized artificial intelligence or machine-learning models.

6. Data Processing and Storage

Contact form information may pass through the WordPress application, the SMTP plugin, our website server, and Google's email infrastructure during message delivery.

We aim to process email content only for as long as necessary to transmit the message and complete the requested operation.

We do not intentionally maintain a separate permanent database of Gmail message content through the SMTP integration. However, contact form plugins, WordPress settings, diagnostic tools, server logs, backups, or the receiving Gmail account may retain copies of submitted information.

OAuth credentials and necessary technical records may be stored separately to maintain the connection, protect the website, and troubleshoot delivery issues.

We take reasonable technical and organizational measures to protect information and credentials against unauthorized access, loss, disclosure, or misuse.

7. Data Sharing and Disclosure

We do not sell personal information or Google user data to third parties.

Contact form information is transmitted to Google when necessary to deliver outgoing email. Google's processing of that information is subject to Google's applicable terms and privacy policies.

We do not intentionally use additional third-party processors to process Gmail message content as part of the SMTP integration described here. However, our WordPress hosting provider and other infrastructure services may process website information as necessary to operate and secure the website.

We may disclose information where required by law or where necessary to protect the website, investigate abuse, or comply with applicable legal obligations.

8. Human Access

We do not intentionally provide routine human access to Gmail message content through the SMTP integration.

Email delivery is intended to be performed automatically by the WordPress SMTP plugin and Google's email service. Access to website administration, email accounts, and authorization credentials is restricted to authorized personnel as appropriate for operating the website.

Any access to Google user data must comply with applicable law and Google's policies.

9. Data Retention and Deletion

Contact form information and email content are handled temporarily during transmission where possible.

We aim to process eligible deletion requests within 30 days of receiving them. Information that has already been discarded may no longer be available for deletion.

This commitment applies to personal information under our control. It does not automatically delete messages already delivered to Gmail, copies retained by email recipients, or information that must be retained under applicable law.

Because WordPress and its plugins may have separate storage or logging settings, we will review the applicable systems when handling a valid deletion request.

To request deletion of personal information held by NYCGOlf4ALL, contact us using the details below.

10. Google API Services Limited Use

NYCGOlf4ALL's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements:

https://developers.google.com/terms/api-services-user-data-policy

We use Google services only for the disclosed email (WP SMTP) functionality. We do not sell Google user data or use it for advertising, including personalized or interest-based advertising.

We do not transfer Google user data for unrelated commercial purposes. Any processing or transfer must be permitted by applicable Google policies and necessary for an authorized purpose.

We will request only the permissions necessary for our implemented functionality where technically feasible, and we will update our disclosures if our integration or data practices materially change.

11. Cookies and Technical Information

Our WordPress website and its plugins may process technical information, such as security logs, delivery errors, and basic website diagnostics, to maintain website operation and protect against misuse.

If we use cookies or other tracking technologies, we will provide disclosures and consent mechanisms where required by applicable law.

12. Your Privacy Choices

You may choose not to submit information through our Contact form.

You may also request access to, correction of, or deletion of eligible personal information held by NYCGOlf4ALL, subject to applicable law.

The designated Google Account owner may revoke OAuth authorization at:

https://myaccount.google.com/permissions

Revoking access may interrupt website email delivery but does not automatically delete messages already sent or stored.

13. Children's Privacy

Our website is not intended to knowingly collect personal information from children under 13 without appropriate authorization. If we become aware of information collected in violation of applicable law, we will take appropriate steps to address it.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our website, WordPress plugins, email integrations, data handling practices, or applicable legal requirements.

Any revised policy will be published on this page with an updated effective date.

15. Contact Us

For questions about this Privacy Policy or requests concerning personal information, contact:

Website: NYCGOlf4ALL
Website URL: www.NYCGolf4All.com
Privacy Contact Email: NYCGol4All@gmail.com

16. Google API Services Compliance

NYCGOlf4ALL's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:

https://developers.google.com/terms/api-services-user-data-policy