Privacy Policy
How we collect, use, and protect your personal data.
Last updated: 12 September 2026
BookGolfDirect ("we", "us") operates https://bookgolfdirect.com. This policy explains what personal data we collect, why, and the rights you have over it under the EU General Data Protection Regulation (GDPR).
Data we collect
- Golfer accounts: name, email, phone, country, handicap.
- Course manager accounts: name, email, phone, club association.
- Terms acceptance: the Terms version accepted and the date/time of acceptance, retained to demonstrate account consent and legal notice.
- Bookings: name, email, phone, preferred date/time, player count, message.
- Reviews: five service and course scores, written review, booking linkage, name, email, invitation metadata, and IP address (used only to prevent spam/abuse). Reviews are checked by an administrator before publication.
- Payments: processed entirely by Stripe — we never see or store card details.
- Analytics: approximate location, device/browser type, and pages viewed, only if you accept cookies — see our Cookie Policy.
Why we use it
- To create and manage your account (contract necessity).
- To send booking requests to golf clubs and confirmations to you (contract necessity).
- To invite golfers to review a course after their requested play date and moderate approved reviews (contract necessity / legitimate interest).
- To send account emails: verification, password reset, booking updates (contract necessity / legitimate interest).
- To understand site usage and improve it, only with your consent (consent).
- To prevent fraud and abuse, e.g. rate-limiting and spam detection (legitimate interest).
Who we share it with
We do not sell personal data. We share the minimum necessary with:
- Golf clubs — booking details, so they can respond to your request.
- Stripe — payment processing for course-manager credit purchases.
- Our email/SMTP providers — to deliver transactional emails.
- Google Analytics — only if you accept analytics cookies.
- Booking.com — only if you accept cookies and use the hotel search widget on club/course/hotel pages.
How long we keep it
Account data is kept while your account is active. Booking and review records are kept for as long as needed for club/customer support and legal/accounting obligations, after which they are deleted or anonymised. You can request earlier deletion at any time (see your rights below).
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request erasure ("right to be forgotten").
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time (e.g. for analytics cookies) without affecting prior processing.
- Lodge a complaint with your national data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD).
To exercise any of these rights, contact us or email admin@bookgolfdirect.com.
Cookies
We use a small number of cookies, described in full in our Cookie Policy. Analytics cookies are only set after you accept them.
Security
Passwords are stored using industry-standard one-way hashing. Access to admin and course-manager accounts is protected by rate-limited logins, CSRF protection, and role-based permissions.
Contact
Questions about this policy or your data? Contact us or email admin@bookgolfdirect.com.