Skip to main content

Tourney Command

Menu
Get Started

Effective date: July 16, 2026
Last updated: July 16, 2026

1. Who we are

Tourney Command is operated by Carl Zuzart, a sole proprietor operating as Zedden I.T., based in Milton, Ontario, Canada.

We are responsible for the personal information we collect through this website. If you have a question about this policy or about how we handle your information, contact:

Carl Zuzart
[email protected]
863 Gazley Circle
Milton, Ontario L9T 6L6
Canada

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we are required to designate an individual accountable for our compliance with privacy obligations. That person is Carl Zuzart.

2. What this policy covers

This policy applies to the Tourney Command marketing website at tourneycommand.com — the site you are reading now.

It does not cover individual tournament websites that we build and host for event organizers. Those sites collect information from golfers, sponsors and donors, and each is operated by the organizer who runs that event. If you registered for a specific golf tournament, that event's organizer is responsible for your information, and you should contact them directly. [Once client provisioning is live, add: "Each tournament site carries its own privacy notice."]

3. Information we collect

3.1 Information you give us

When you fill in the contact form on this site, we collect:

  • Your name
  • Your email address
  • The message you write, including anything you choose to tell us about your event

You choose what to put in the message field. Please don't include sensitive personal information — we don't need it, and we'd rather not hold it.

If you email or phone us directly, we hold whatever you send us, for as long as we need it to deal with your enquiry.

3.2 Information collected automatically

Like nearly every website, our web server records technical information each time a page is requested. This includes:

  • Your IP address
  • The date and time of the request
  • The page or file requested
  • Your browser type and version, and your operating system
  • The referring page, if you arrived via a link

We use this to keep the site running, diagnose faults, and protect against abuse.

3.3 Visitor statistics

We measure how the site is being used, so we know which pages people actually read. We use two tools, and neither stores anything in your browser, and neither stores your IP address:

  • Burst Statistics — runs on our own server in Milton and keeps its data in our own database. It records which pages were viewed, roughly how long each was read, the website you arrived from, your browser, device and platform, and the city and country your connection suggests you are in. It works out that location when you arrive and keeps only the result — your IP address is never written down. It sets no cookies.
  • Cloudflare Web Analytics — counts visits and measures how quickly pages load. It is cookieless by design.

Because Burst sets no cookie, it distinguishes one visit from another using a short-lived code derived from your connection. That code is not your name, your email, or your IP address, and we cannot work backwards from it to identify you.

These tools tell us that a page was read, not who read it. We do not build a profile of you, and we cannot follow you to other websites.

3.4 Security logging

We run a security plugin (Wordfence) to protect the site from attacks and password-guessing. It records IP addresses, request details and login attempts. These logs stay on our own server — they are not sent to the plugin's vendor or anyone else. Failed logins are also written to our server's system log and blocked at the firewall. This is security housekeeping, not tracking.

3.5 What we do not collect

  • We do not run advertising, advertising trackers, or cross-site tracking of any kind.
  • We do not sell, rent, or trade your personal information to anyone, for any purpose.
  • We do not use your information for automated decision-making or profiling.
  • We do not sell, rent or trade the statistics we collect.
  • We do not take payments on this website. [Delete this line once a billing path exists, and describe it.]
  • We do not ask you to create an account on this website.

4. Why we collect it, and your consent

We collect personal information for these purposes only:

  • To answer you. If you send us a message about running a tournament, we use your name and email to reply and to have that conversation.
  • To keep the site working and secure. Server logs, and protecting the site against attacks and abuse.
  • To understand how the site is used. Cookieless visitor statistics, so we know which pages are worth improving.

Under PIPEDA we rely on your consent. By submitting the contact form you consent to us using your details to respond to you. You can withdraw that consent at any time (see section 8) — though if you withdraw it, we may not be able to continue the conversation.

We will not use your information for a new purpose without asking you first.

5. Cookies and similar technologies

Cookies are small files a website stores in your browser. This site sets one, and it is there for security:

  • cf_clearance — set by Cloudflare's bot protection. It records that your browser passed an automated security check, so you are not challenged on every page. Without it we cannot tell real visitors from bots.

If you log in to the site as an administrator, WordPress and our security plugin set additional cookies to keep that session working. Those apply to us, not to visitors.

We set no analytics, advertising, or tracking cookies. Our visitor statistics (section 3.3) are cookieless — they store nothing in your browser and cannot follow you to other sites.

Because the only cookie we set is necessary for security, and we do nothing that tracks you, we do not show a cookie consent banner. There is nothing to opt out of.

You can block or delete cookies through your browser settings. If you block cf_clearance you may be repeatedly challenged before pages load.

6. Service providers, and information leaving Canada

We keep this list short on purpose. These are the only third parties involved in serving this website, and we do not use any others:

  • Cloudflare, Inc. (United States, with servers worldwide) — delivers and protects this website. Cloudflare processes your IP address and connection details in order to serve pages to you, to block malicious traffic (this is what sets the cf_clearance cookie), and to provide the cookieless visit statistics described in section 3.3. Your connection may be handled by a Cloudflare server outside Canada.
  • Google LLC (United States) — fonts. The typefaces used across this site are served from Google Fonts. When you load a page, your browser requests the font files from Google's servers, which means Google receives your IP address and browser details. We do not send Google any information you type into the form.
  • Google LLC — Google Drive (United States) — offsite backups. We keep an encrypted-in-transit copy of the website's database and files in Google Drive, so the site can be restored if our server fails. That database includes our security logs (section 3.4), which do contain IP addresses, and our visitor statistics (section 3.3), which do not. It does not include the messages you send us through the contact form — those are stored only as email on our own server (see below). Google stores the backup; it does not read it or use it for its own purposes.
  • Our own servers — this website, and the mailbox that receives contact form messages, run on infrastructure we own and administer ourselves, located in Milton, Ontario, Canada. Contact form messages are stored there as email. They are not stored in the website's database.

What this means for you: when personal information is held or processed in another country, it is subject to that country's laws, and may be accessible to that country's courts, law enforcement, and national security authorities. We use these providers because they are necessary to run a secure website, and we've kept the number as small as we can.

We may also disclose personal information if we are legally required to — for example, in response to a valid court order or a lawful demand from a government authority.

7. How long we keep it

  • Contact form messages and email correspondence: 24 months from our last contact with you, after which we delete them, unless we have an ongoing business relationship with you or a legal reason to keep them.
  • Server logs: 90 days, then overwritten.
  • Visitor statistics: 12 months, then permanently deleted. Golf is seasonal, so we keep a full year in order to compare one season against the next. Cloudflare Web Analytics retains its own data for a fixed period that we do not control.
  • Security logs: 30 days, and no more than the most recent 2,000 records, whichever comes first. Our security plugin deletes older entries automatically.
  • Backups: we keep the two most recent backups. Older ones are deleted automatically as new ones are made. Backups are a snapshot. If we delete something at your request, a copy may survive in a backup until that backup ages out. We do not restore backups to recover deleted personal information.

PIPEDA requires us to keep personal information only as long as we actually need it for the purpose we collected it, and to destroy it after that. We are not required by any law to retain your enquiry, and we don't. If you ask us to delete your information sooner and we have no outstanding reason to keep it, we will.

8. Your rights

Under PIPEDA you have the right to:

  • Know whether we hold personal information about you, and to be told what we use it for and who we've disclosed it to.
  • Access that information, and receive a copy of it.
  • Correct it if it's wrong or incomplete.
  • Withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice.
  • Ask us to delete information we no longer need.
  • Complain if you think we've mishandled your information.

To exercise any of these, email [email protected]. We will respond within 30 days, as PIPEDA requires. We may need to verify your identity first, so that we don't hand your information to someone else. There is no charge.

If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec, K1A 1H3
Toll-free: 1-800-282-1376
www.priv.gc.ca

9. Security

We protect personal information with safeguards appropriate to how sensitive it is. In practice that means: the site is served over HTTPS; the mailbox holding your contact messages sits on infrastructure we own and administer in Milton, Ontario, with access restricted to the owner only; failed login attempts are logged and blocked at the firewall; and we keep the software up to date.

Backups of the website are stored offsite in Google Drive (section 6) so the site can be restored after a failure. They travel over an encrypted connection and sit in a private account we control.

No method of transmitting or storing information is completely secure, and we can't guarantee absolute security. If a breach occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner, as PIPEDA requires.

10. Children

This website is aimed at adults organizing golf tournaments. We don't knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we'll delete it.

11. Visitors from outside Canada

This site is operated from Canada and intended for organizers in Canada. If you visit from elsewhere, your information will be handled in Canada under Canadian law. [If you actively market to the EU or UK, this policy is not sufficient — GDPR imposes additional requirements including a lawful basis, data subject rights, and possibly a representative. Get advice before deleting this note.]

12. Changes to this policy

If we change this policy we'll update the "last updated" date above. If the change is significant — for instance, if we start collecting something new or add a service provider — we'll say so clearly on this page. Material changes affecting how we use information you already gave us will not be applied without your consent.

13. Contact us

Questions, requests, or complaints about privacy:

Carl Zuzart
[email protected]
863 Gazley Circle
Milton, Ontario L9T 6L6
Canada
Milton, Ontario, Canada