import React from 'react';
import LegalLayout from '../components/legal/LegalLayout';
import { LEGAL_LAST_UPDATED } from '../constants/legal';
import SEO from '../components/seo/SEO';

const Privacy: React.FC = () => {
  const toc = [
    { label: 'What Information We Collect', href: '#collect' },
    { label: 'How GPS Tracking Works', href: '#gps' },
    { label: 'Why We Collect This Information', href: '#why' },
    { label: 'What Courses Can See', href: '#courses-see' },
    { label: 'How We Use Anonymised and Aggregated Data', href: '#anonymised' },
    { label: 'How Long We Keep Information', href: '#retention' },
    { label: 'When We Share Information', href: '#sharing' },
    { label: 'Where Data Is Stored', href: '#storage' },
    { label: 'Security', href: '#security' },
    { label: 'Your Rights (NZ Privacy Act)', href: '#rights' },
    { label: 'Children', href: '#children' },
    { label: 'Changes to This Policy', href: '#changes' },
    { label: 'Contact Us', href: '#contact' },
  ];

  return (
    <>
      <SEO
        title="Privacy Policy"
        description="Learn how WayFairer collects, uses, and protects your data. Clear privacy information for golf courses and players."
        url="https://wayfairer.com/privacy"
      />
      <LegalLayout
        title="Privacy Policy"
        subtitle="How we handle your data—explained clearly."
        breadcrumbs={[
          { label: 'Home', href: '/' },
          { label: 'Privacy Policy', href: '/privacy' },
        ]}
        toc={toc}
        navLinks={[
          { label: 'Terms of Service', href: '/terms' },
          { label: 'Document History', href: '/legal-history' },
          { label: 'Back to Home', href: '/' },
        ]}
      >
        <p>
          <strong>Last updated:</strong> {LEGAL_LAST_UPDATED}
        </p>
        <p className="text-sm text-gray-600 dark:text-gray-400 italic">
          View all <a href="/legal-history" className="text-emerald-600 dark:text-emerald-400 hover:underline">previous versions</a> of this document.
        </p>

        <p>
          This Privacy Policy explains what information WayFairer collects, why we collect it, how we use it, and the choices you have.
          We wrote this in plain English so course staff and players can understand it without needing a lawyer.
        </p>

        <p>
          "WayFairer", "we", "us", and "our" means WayFairer Labs Ltd, a New Zealand company.
          "You" means a golf course, a marshal, staff member, or player who uses our services.
        </p>

        <p>
          If you have questions, email <a href="mailto:privacy@wayfairerlabs.com">privacy@wayfairerlabs.com</a>.
        </p>

        <h2 id="collect">1. What Information We Collect</h2>
        <p>
          We collect different types of information depending on how you use WayFairer.
        </p>

        <p><strong>Players (using the app):</strong></p>
        <p>We collect:</p>
        <ul>
          <li>Name or nickname you enter</li>
          <li>GPS location during your round</li>
          <li>Movement, timing, and pace of play data</li>
          <li>Device information (e.g., app version, performance logs)</li>
        </ul>

        <p>We do not collect:</p>
        <ul>
          <li>Email addresses</li>
          <li>Phone numbers</li>
          <li>Contact information</li>
          <li>Payment information</li>
        </ul>

        <p><strong>Courses, staff, and marshals (dashboard users):</strong></p>
        <p>We collect:</p>
        <ul>
          <li>Name, email, and logon details for staff</li>
          <li>Course setup information</li>
          <li>Session and round data</li>
          <li>Dashboard actions (e.g., reports run, settings changed)</li>
        </ul>

        <p><strong>Website visitors:</strong></p>
        <p>We may collect:</p>
        <ul>
          <li>Basic analytics</li>
          <li>Technical logs</li>
          <li>Browsing behaviour on our site</li>
        </ul>

        <p>
          All data we collect is used to operate, improve, or secure the service.
        </p>

        <h2 id="gps">2. How GPS Tracking Works</h2>
        <p>
          GPS tracking is only active during a round of golf.
        </p>

        <p>Tracking turns on when:</p>
        <ul>
          <li>A round starts, or</li>
          <li>The player enters course boundaries (depending on course settings)</li>
        </ul>

        <p>Tracking turns off when:</p>
        <ul>
          <li>The round ends</li>
          <li>The player leaves the course for a set amount of time</li>
          <li>The player manually stops tracking (if the course allows it)</li>
        </ul>

        <p>
          We do not track players off-course.
        </p>

        <h2 id="why">3. Why We Collect This Information</h2>
        <p>We collect data to:</p>
        <ul>
          <li>Provide the WayFairer service</li>
          <li>Show real-time player positions to marshals</li>
          <li>Calculate pace of play</li>
          <li>Help courses manage rounds</li>
          <li>Improve the accuracy of our system</li>
          <li>Generate insights and analytics</li>
          <li>Keep the platform secure and running reliably</li>
        </ul>

        <p>
          We do not sell personal information.
        </p>

        <h2 id="courses-see">4. What Courses Can See</h2>
        <p>Courses can see:</p>
        <ul>
          <li>Players currently on their course</li>
          <li>Live location and pace</li>
          <li>Session history for their own course</li>
          <li>Behavioural patterns linked to a WayFairer ID</li>
        </ul>

        <p>Courses cannot see:</p>
        <ul>
          <li>Player data from other courses</li>
          <li>Any player's home address, phone number, or contact details</li>
          <li>Raw GPS data beyond their own course operations</li>
        </ul>

        <h2 id="anonymised">5. How We Use Anonymised and Aggregated Data</h2>
        <p>
          We anonymise data by removing anything that identifies a specific person or course.
        </p>

        <p>We use anonymised and aggregated information to:</p>
        <ul>
          <li>Improve algorithms</li>
          <li>Train pace-of-play models</li>
          <li>Run performance analysis</li>
          <li>Build historical reports</li>
          <li>Improve WayFairer as a product</li>
          <li>Benchmark trends across regions</li>
        </ul>

        <p>
          This type of data does not identify you or your course.
        </p>

        <p>
          We may keep anonymised data indefinitely.
        </p>

        <h2 id="retention">6. How Long We Keep Information</h2>
        <p>
          Different types of information have different retention periods:
        </p>
        <ul>
          <li><strong>Raw GPS data:</strong> kept for a short operational period</li>
          <li><strong>Session summaries & pace history:</strong> up to 7 years</li>
          <li><strong>Staff logon and account details:</strong> stored while the account is active</li>
          <li><strong>Anonymised aggregated data:</strong> kept indefinitely</li>
        </ul>

        <p>
          If a course stops using WayFairer, we securely archive or anonymise data where appropriate.
        </p>

        <h2 id="sharing">7. When We Share Information</h2>
        <p>
          We do not sell your information.
          We only share it when necessary to run and improve the service.
        </p>

        <p>We may share data with:</p>
        <ul>
          <li>Our hosting provider (OVH Cloud)</li>
          <li>Our email service provider</li>
          <li>System and error monitoring tools</li>
          <li>Mapping or geospatial tools we rely on</li>
        </ul>

        <p>
          These providers follow strict data protection standards.
        </p>

        <p>We may also share information if:</p>
        <ul>
          <li>Required by NZ law</li>
          <li>Needed to protect someone's safety</li>
          <li>Needed to investigate misuse, fraud, or security issues</li>
        </ul>

        <p>
          We never share identifiable player information with other courses.
        </p>

        <h2 id="storage">8. Where Data Is Stored</h2>
        <p>
          Data is stored on secure servers.
          We operate regional servers (NZ, Australia, and others as needed).
          Early on, data for nearby regions may be processed on a shared server (for example, Australian courses may temporarily use the NZ region).
        </p>

        <p>
          We will always protect your data under this Policy, regardless of the region used.
        </p>

        <h2 id="security">9. Security</h2>
        <p>
          We use industry-standard practices to keep your information secure.
        </p>

        <p>
          However, no online system is completely safe.
          If someone gains unauthorised access due to hacking or criminal activity, we cannot guarantee absolute protection (see our <a href="/terms">Terms of Service</a> for details).
        </p>

        <p>If a data breach occurs, we will:</p>
        <ul>
          <li>Investigate it quickly</li>
          <li>Notify affected parties if required</li>
          <li>Work to prevent it happening again</li>
        </ul>

        <h2 id="rights">10. Your Rights (NZ Privacy Act)</h2>
        <p>
          Under New Zealand law, you have the right to:
        </p>
        <ul>
          <li>Ask what information we hold about you</li>
          <li>Ask for a copy of your information</li>
          <li>Ask us to correct information that is wrong</li>
          <li>Ask us to delete certain information where appropriate</li>
        </ul>

        <p>
          Players can contact us directly, even if their course set up their session.
        </p>

        <p>
          We may need to verify your identity before releasing data.
        </p>

        <h2 id="children">11. Children</h2>
        <p>
          WayFairer is not designed for children under 13.
          If a junior player uses the app, the course is responsible for ensuring appropriate consent is obtained from a parent or guardian.
        </p>

        <h2 id="changes">12. Changes to This Policy</h2>
        <p>
          We may update this Privacy Policy from time to time.
          Significant changes will be noted on our website.
        </p>

        <p>
          Using the service after changes means you accept the updated Policy.
        </p>

        <h2 id="contact">13. Contact Us</h2>
        <p>
          WayFairer Labs Ltd<br />
          Email: <a href="mailto:privacy@wayfairerlabs.com">privacy@wayfairerlabs.com</a><br />
          Website: <a href="https://wayfairerlabs.com">https://wayfairerlabs.com</a>
        </p>
      </LegalLayout>
    </>
  );
};

export default Privacy;