Highlighted items need filling in or confirming before this page goes live. Have it checked by your GDPR adviser. Remove this box before publishing.
Who we are
CRESIO Golf (“we”, “us”) is run by [your full legal name, or company name and company number], [postal address]. We are the data controller for the personal data described in this policy. Our ICO registration number is [ICO registration number].
Contact us about privacy at privacy@cresiogolf.com.
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Name, email address, password (stored securely by our sign-in provider), whether you are a player or a coach | To create and run your account | Contract |
| Date of birth | To show events you are eligible for and to apply our rules for under-18s | Contract; legitimate interests (safeguarding) |
| County, club and location | To show relevant events and help players and coaches find each other | Contract |
| Rounds, scores and shot-by-shot stats, targets | To give you your stats, and to show them to coaches you have linked with | Contract |
| Schedule: events entered or planned, personal events, tee times, hotels and notes | To give you your schedule, reminders, and to share it with linked coaches | Contract |
| Coach and player links, lesson notes, videos and photos you upload | To connect players and coaches and share coaching content with the people you choose | Contract |
| Reports and blocks | To keep users safe and deal with misuse | Legitimate interests |
| Course cards and event suggestions you add | To build the shared course and event lists | Legitimate interests |
| [Confirm: app usage analytics or crash reports, if switched on] | To find and fix problems | Legitimate interests |
We do not sell your personal data, and we do not use it for advertising.
Who can see your data
- Coaches you link with can see your profile, stats, rounds and schedule once you accept the link. You can remove a link at any time.
- Other users can find you by name in search if you are a coach, or a player aged 18 or over. Players under 18 do not appear in coach search.
- Personal events you add are visible only to you and your linked coaches.
- Course cards you add are shared with all users, without your name.
Children
Players must be at least [13] to use CRESIO Golf. Coaches cannot send link requests to players under 18; a player under 18 must request the coach. Coaches cannot copy a player's events to their own calendar. [Confirm any parent or guardian consent steps with your GDPR adviser.]
Service providers
- Google Firebase (Google Ireland Ltd and Google LLC) provides sign-in, our database and file storage. Uploaded videos and files are stored in London. [Confirm the database location.] Some sign-in data may be processed in the United States under the UK International Data Transfer Addendum or the UK–US data bridge.
- Booking.com: when you tap Places to stay near the venue, you leave the app for Booking.com. We send the venue location and dates, not your name or account details. Booking.com's own privacy policy applies to anything you do there.
- postcodes.io: we look up the location of event venues by postcode. No personal data is sent.
- [Email provider used to send account emails, if different from Firebase.]
How long we keep it
We keep your data while your account is open. When you delete your account, we delete your personal data within 30 days, apart from anything we must keep by law. Backups are overwritten within [90] days. Course cards you added stay in the shared list without your name.
Your rights
Under UK data protection law you can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format. Email privacy@cresiogolf.com. We will reply within one month.
You can delete your account at any time in the app or by email. See Delete your account.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Security
Data is encrypted in transit and at rest by our providers. Access rules in our database limit each user to their own data and the data shared with them.
Changes
We will post any changes here and tell you in the app if they are significant.