Privacy Notice
Last updated: 11 August 2026
This notice explains how GolfSec Ltd collects and uses personal data through this website and in providing the GolfSec Pro service. It is written to be read, not to be waded through — if anything here is unclear, please ask.
Who we are
GolfSec Ltd is the data controller for the personal data described in this notice.
- Registered name: GolfSec Ltd
- Registered in: England and Wales, company number 17166847
- Registered office: Floor 1, Room 1, 10-12 East Parade, Leeds, West Yorkshire, LS1 2BH
- Contact: info@golfsec.co.uk
What we collect, and why
When you enquire or sign up
Our signup form asks for the following. Only the first five are required.
| Information | Why we need it |
|---|---|
| Club name | To identify and set up your account |
| First and last name | To know who we are dealing with |
| Email address | To contact you and send service correspondence |
| Telephone number | To contact you about onboarding and support |
| Club website | To understand your club's online presence |
| Number of computers and devices | To size the monitoring and anti-virus deployment |
| Number of staff needing training | To size the security-awareness training |
| IT or administrative contact name and email | To arrange the technical rollout |
| Anything else you tell us | Whatever you choose to share |
If you email us instead, we hold the contents of that correspondence.
When you pay
Direct Debit mandates are set up and collected through GoCardless Ltd. Your bank details are entered directly into GoCardless's own secure pages. GolfSec Ltd never sees, handles or stores your bank account number or sort code. We receive confirmation that a mandate exists and the status of payments against it.
When you use the website
We use cookies and similar technologies. These are explained in full in our Cookie Policy.
Our lawful bases
- Contract — to provide the service you have signed up for, take payment, and support you.
- Legitimate interests — to respond to enquiries, keep records of our dealings with you, and keep our own systems secure. We use this only where it does not override your rights.
- Consent — for non-essential cookies, and for any marketing email you have opted into. You can withdraw consent at any time.
- Legal obligation — to meet accounting, tax and other statutory duties.
Who we share it with
We do not sell personal data. We share it only with providers who help us run the service, each bound to process it only on our instructions:
| Provider | What they do |
|---|---|
| HubSpot | Hosts this website, our signup form and our customer records. Our HubSpot data is held in the European Union. |
| GoCardless Ltd | Sets up and collects Direct Debit payments (UK-based, FCA-authorised). |
| Cloudflare | Provides DNS, content delivery and protection against malicious traffic for this website. |
| Microsoft | Our business email and document storage. |
Delivering the service also involves security tooling deployed to your club's own systems — remote monitoring, security-awareness training and endpoint anti-virus. We will tell you which providers are used before anything is installed, and name them in your service documentation.
We may also disclose information where we are legally required to, or to establish or defend legal claims.
Where your data is held
Our HubSpot data is hosted in the European Union. Some providers may process data outside the UK. Where they do, that transfer is covered by UK adequacy regulations or by standard contractual clauses with appropriate safeguards.
How long we keep it
We keep personal data only as long as we need it:
- Enquiries that do not become customers — deleted once it is clear no service will follow, unless you have asked to stay in touch.
- Customer records — for the life of the service and afterwards where we need them for support history, disputes or legal claims.
- Financial records — retained for the period required by UK tax and company law.
Your rights
Under UK data protection law you have the right to: be told how your data is used; get a copy of it; have inaccurate data corrected; have data erased; restrict or object to how we use it; receive it in a portable format; and withdraw consent where consent is the basis we rely on.
To exercise any of these, email info@golfsec.co.uk. We will respond within one month. We do not charge for this.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
If we change how we use personal data we will update this page and change the date at the top. Where a change is significant we will tell affected customers directly.