This Privacy Policy explains how GolfConnecting ("we", "us", "our"), a digital brand of Mega Commercial Enterprises Limited (Registered in Ireland · Company Number 726999), 77 Camden Street Lower, Dublin, D02 XE80, Ireland, collects, uses and protects your personal data when you use golfconnecting.com (the "Site"). We are committed to handling your data lawfully, fairly and transparently, in line with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018 and, where they apply, the privacy laws of the country you live in.
1. Who We Are
The data controller for the Site is Mega Commercial Enterprises Limited. You can contact us about anything in this policy at [email protected] or by post at the address above. We are not required to appoint a Data Protection Officer and have not done so; the founder, Inga Barkauskaite, is responsible for data protection.
2. What Data We Collect
Data you give us: when you submit a concierge request, contact form, cancel form or business listing enquiry, we collect the details you provide — typically your name, email address, your phone number if you give it, and the information in your message (such as location, dates, handicap or level, budget or golfing preferences). For a paid engagement we also hold your brief and the correspondence about it; for a business listing, the business details you supply.
Purchase details: what you bought, when, the amount and the email address used. Card details are handled by our payment provider; we never see or store your full card number. A bank transfer shows us the name on your account.
Data collected automatically: your cookie choice and, only if you accept analytics cookies, how you use the Site (pages visited, time on page, device type, approximate location). Our hosting, network and security providers also process IP addresses to deliver and protect the Site. See our Cookie Policy for details.
Data we do not collect: we do not ask for dates of birth, passport or ID numbers or bank account details, and we do not collect special-category (sensitive) data. Please do not include such information in messages to us. Our services are for people aged 18 and over; we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, tell us and we will delete it.
3. How We Use Your Data
We use personal data to: respond to your concierge requests and enquiries; provide, personalise and improve our services; take payment and keep payment, tax and accounting records; connect you with courses, coaches, providers or partners where you have asked us to; administer business directory listings; handle withdrawals, complaints and legal claims; maintain the security of the Site; and comply with legal obligations. We do not sell your personal data.
4. Legal Bases
We process your data on the following legal bases: performance of a contract or pre-contract steps (paid engagements, purchases and the enquiries that lead to them); legitimate interests (replying to people who contact us, running, improving and securing the Site, basic analytics, fraud prevention and handling complaints); consent (non-essential cookies, marketing emails, and any introduction of your details to a third-party provider); and legal obligation (payment, tax, accounting and regulatory requirements). Where we rely on legitimate interests we have balanced them against your rights; you can object at any time (section 8).
5. Sharing Your Data
We use the following kinds of provider (“processors”) to run the Site and our services. They act on our instructions under data processing terms.
Website hosting provider — hosts the Site, its database and its backups (United States). Content delivery and security network — delivers and protects the Site and blocks attacks (global network; United States company). Form software — runs on our own website; it emails your answers to us and does not store them in our database. Email delivery service — delivers emails sent by the Site, such as form notifications and confirmations (European Union). Payment provider — takes payments; it is also an independent controller for its own fraud-prevention and legal duties (Ireland and the United States). Website analytics service — site analytics, only with your consent (Ireland; data may be processed in the United States). Search performance tool — shows us how the Site appears in search results using aggregated data, not data about individual visitors. Backup software — runs on our own website and stores backups on our web host only.
Others who may receive your data: golf partners (courses, coaches, operators, retailers, event companies) only when you ask us to make an introduction, and only the details they need to quote — they act as independent controllers under their own privacy policies; our own advisers (accountants, lawyers) where needed; authorities where the law requires; and a buyer of our business, if that ever happens, under the same protections.
We do not use AI tools to make decisions about you, and we do not enter your name, contact details or personal circumstances into AI tools.
6. International Transfers
Our website and its backups are hosted in the United States, and our network, security, analytics and payment providers process data there. Where personal data leaves the European Economic Area, we rely on the EU–U.S. Data Privacy Framework where the provider is certified under it, or on the European Commission’s Standard Contractual Clauses with additional safeguards where it is not. Our email delivery service keeps data in the European Union. You can ask us which safeguard applies to a particular provider.
7. How Long We Keep Data
Enquiry and concierge correspondence that does not lead to an engagement: 24 months after our last contact. Client files (briefs, reports, plans, correspondence): 7 years after the engagement ends. Payment, refund and accounting records, and cancellation notices: 6 years after the end of the financial year they relate to. Business listing records: while the listing is live, then 6 years. Complaints: 3 years after the complaint is closed. Analytics data: 14 months. Your cookie choice (gc-consent cookie): 12 months. Website backups: the most recent backups only; older backups are deleted automatically when new ones are made. Security and server logs: as set by each provider, used only to keep the Site running and secure.
You can ask us to delete your data at any time; we keep only what the law requires us to keep.
8. Your Rights
Under the GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data erased; restrict or object to processing; receive your data in a portable format; withdraw consent at any time where processing is based on consent; and not be subject to decisions made only by automated means with legal effects on you — we make no such decisions. To exercise any right, email [email protected]. We reply within one month, free of charge, and may ask you to confirm your identity. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority; we would appreciate the chance to put things right first.
If you live in the United States: several U.S. states have consumer privacy laws. Given the size of our business these laws may not apply to us, but we offer U.S. residents the same rights anyway: to know and access the personal information we hold, to delete and correct it, and not to be discriminated against for using these rights. We do not sell or share personal information as those laws define “sell” and “share”, and we do not use advertising cookies.
9. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), a firewall and security monitoring, access limited to the people who need it, and reputable hosting providers. No method of transmission over the internet is completely secure, but we work to protect your data in line with industry good practice. If a breach puts your rights at risk, we will tell you and the Data Protection Commission as the law requires.
10. Third-Party Links
The Site links to third-party websites, including affiliate partners. Their privacy practices are their own; we encourage you to read their policies. See our Affiliate Disclosure for how affiliate links work on this Site.
11. Changes to This Policy
We may update this policy from time to time. The “Last updated” date at the top shows the current version. If a change affects how we use data you have already given us, we will tell you by email where we have your address.
Questions? Contact us at [email protected] or Mega Commercial Enterprises Limited, 77 Camden Street Lower, Dublin D02 XE80, Ireland.