1. Introduction

We protect your personal data in line with the requirements of the General Data Protection Regulation (GDPR).
The GDPR requires data controllers such as ourselves to document our
lawful basis for processing personal data. It also gives you rights over
how your data is processed. This privacy policy documents the data we
collect, why and how we process it, and how to exercise your rights.

1.1 Data controller

The data controller responsible for this website is Caddy Club Golf Ltd,
who can be contacted at 74 Main Street, Dickens Heath, Solihull West
Mids, B90 1UA, United Kingdom.

If this website contains links to third-party websites, which have
their own data controllers and privacy policies. This privacy policy
applies only to this website.

1.2 Lawful basis for processing

For each method by which we collect personal data, this privacy policy
documents our lawful basis for processing the data. Where we rely on
your consent to process your data, we explain how you can withdraw your
consent and delete your data.

1.3 Individual rights

The GDPR gives you rights over how your personal data is processed. You
can exercise your rights by contacting us. In some cases you can also
exercise your rights through automated systems, as described at the
relevant points in this privacy policy.

1.4 Security

The GDPR requires us to implement appropriate technical measures to
protect data. We verify the identity of any individual who requests
access to data before granting access. We use Transport Layer Security
(TLS, also known as SSL) to encrypt any data you supply to us through
our website. Additional technical measures are described at the relevant
points in this privacy policy.

1.5 Disclosures

In addition to any sharing of data described elsewhere in this privacy
policy, we may disclose data for legal reasons. If we suspect criminal
activity we may disclose data relating to those involved or affected to
the appropriate authorities. We may also be obliged to disclose data if
we receive a request from an appropriate authority.

1.6 Changes to this privacy policy

We may occasionally make changes to this privacy policy. Following any
changes, the date at the top of this privacy policy will be updated. If
any change allows for wider access to data, such changes will only apply
to data collected after the date of the updated privacy policy.

2. Cookies

Cookies are small pieces of text that are stored by your browser.
Each cookie has a name and is associated with a particular site. When
your browser sends a request to a site (for example, to download a page,
image, or video), the computer that responds (known as a server) may
tell your browser to set one or more cookies. When your browser makes
further requests to the same site it sends the cookies back to the
server. This allows the server to remember you as you browse the site,
and provide features such as shopping baskets or password-protected
areas. For more information on the cookies we use, see our cookie policy.

3.Data collected by our shop

3.1 Orders

When you place an order we collect your name, e-mail address, telephone
number, company, delivery and billing addresses, and any comments you
choose to leave.

Lawful basis for processing: Performance of a contract

Why? To enable us to enter into a contract with you and fulfil our obligations under it

Lawful basis for processing: Compliance with a legal obligation

Why? To maintain a record of financial transactions for taxation purposes

3.2 Payment through Worldpay

When you make a payment through Worldpay, we send Worldpay your name,
billing address, e-mail address, and telephone number. After you enter
your card details, Worldpay attempts to take payment and tells us
whether the payment was successful. For more information on how Worldpay
handles the data it collects, see Worldpay’s privacy policy.

Lawful basis for processing: Performance of a contract

Why? To enable you to pay for your purchase

4. Data collected by third parties on our behalf

4.1 Cloudflare

Our site is served through Cloudflare. Cloudflare helps our site load
faster by storing copies of our content in data centres around the
world, and defends our site from attacks by logging requests to detect
and block suspicious traffic. For more information on how Cloudflare
handles the data it collects, see Cloudflare’s privacy policy.

Lawful basis for processing: Compliance with a legal obligation

Why? To comply with the GDPR obligation to implement appropriate technical measures to protect data

4.3 Google Analytics

We use Google Analytics to track visitor interaction with our site in
order to produce statistical reports. Google collects details of the
pages you view and the time you viewed them, the features of your
browser, and your IP address. We have enabled IP anonymisation so that Google will not store your complete IP address. For more information on how Google handles the data it collects, see Google’s privacy policy.

To opt out of Google Analytics tracking on our site, see the Google Analytics section of our cookie policy. To opt out of Google Analytics tracking on all sites, use the Google Analytics Opt-out Browser Add-on.

Lawful basis for processing: Pursuance of our legitimate interests

Why? To allow us to analyse how visitors interaction with our site in order to improve our site and our services.