Privacy Policy

Introduction

BoxGolf UK (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and protect personal data about visitors to our website, customers, newsletter subscribers and others who interact with our services in the United Kingdom. It also explains your rights under UK data protection law, including the UK GDPR and the Data Protection Act 2018.

Controller

BoxGolf UK is the data controller for personal data collected through our website and services.

Personal data we collect

We may collect and process the following personal data:

  • Identity information: name, title.

  • Contact information: billing and delivery addresses, email address, phone number.

  • Account and login data: username, password, account preferences.

  • Transaction and payment data: purchase history, payment card details (processed via our payment provider), invoices.

  • Marketing and communication data: marketing preferences, correspondence history.

  • Technical data: IP address, device type, browser type and version, operating system, cookies and usage data collected via analytics tools.

  • Customer service data: enquiries, feedback and communications with our support team.

  • Other data you choose to provide, including photographs, reviews or social media content.

How we collect personal data

  • Directly from you when you create an account, make a purchase, subscribe to marketing, contact customer support, participate in promotions or complete forms.

  • Automatically from your device and browser through cookies and similar technologies when you use our website.

  • From third parties such as payment processors, delivery partners, analytics providers, and publicly available sources.

Legal bases for processing

We process personal data only where we have a valid lawful basis, which may include:

  • Performance of a contract: to fulfil orders, manage accounts and provide services you request.

  • Legitimate interests: to operate and improve our business, prevent fraud, ensure network and information security, and communicate essential administrative information.

  • Consent: where you have agreed to receive marketing communications or where required by law for certain cookies.

  • Legal compliance: to comply with statutory obligations and to defend legal claims.

How we use personal data

We use personal data for purposes including:

  • Processing and delivering orders, handling payments and returns.

  • Managing customer accounts and providing customer support.

  • Sending transactional communications such as order confirmations, invoices and service updates.

  • Personalising and improving our website, products and services.

  • Fraud prevention, security and risk management.

  • Marketing and promotional communications where you have consented or where we have a legitimate interest (with an option to opt out).

  • Compliance with legal obligations and responding to legal requests.

Sharing personal data

We may share personal data with:

  • Service providers and processors who perform services on our behalf (payment processors, delivery companies, IT and hosting providers, analytics providers, marketing platforms).

  • Third parties where necessary to complete a transaction (payment networks, banks).

  • Professional advisers such as lawyers, auditors or accountants.

  • Regulatory, law enforcement or government bodies where required by law or to protect our rights.

  • Potential buyers or advisers in connection with a merger, sale or reorganisation of our business (subject to privacy protections).

International transfers

Some of our service providers may process data outside the UK. When we transfer personal data internationally we will ensure appropriate safeguards are in place (for example, standard contractual clauses, UK adequacy decisions or other lawful mechanisms) to protect your data.

Cookies and similar technologies

We use cookies and similar technologies to enable website functionality, remember preferences, measure and improve performance and deliver advertising. You can manage cookie preferences through your browser settings or via the cookie banner where provided. Certain cookies are necessary for the website to function and cannot be switched off.

Data retention

We retain personal data only for as long as necessary for the purposes set out in this policy, to meet legal obligations, resolve disputes, enforce agreements and for legitimate business purposes. Retention periods vary depending on the type of data and purpose; for example, transactional records and financial information are retained in accordance with tax and accounting requirements.

Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse or alteration. While we strive to safeguard your data, no method of transmission or storage is completely secure; you should take care with your account credentials and report any suspected security incidents to us promptly.

Your rights

Under UK data protection law you have rights including:

  • Right of access: request a copy of the personal data we hold about you.

  • Right to rectification: ask us to correct inaccurate or incomplete data.

  • Right to erasure: request deletion of your data in certain circumstances.

  • Right to restriction of processing: ask us to limit processing in certain situations.

  • Right to data portability: obtain and reuse certain personal data in a structured, machine-readable format.

  • Right to object:

Contact us

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to raise a concern about how we have handled your personal data, please contact us:

We will acknowledge your request within five working days and aim to resolve all matters within one calendar month. Where a request is complex, we may extend this to three months, in which case we will inform you of the reason for the extension.