Last updated: [DATE TO BE SET AT LAUNCH]
Note: This is a reasonable template. Have a UK data-protection-competent solicitor review before going live. ICO registration may be required — see ico.org.uk.
1. Who We Are
GTI Global Ltd (“we”, “us”, “our”) is a company registered in England and Wales, registered office 13 Northlands Road, Sheffield, S5 8DU.
We are the data controller for personal information collected through this website (golfdayproducts.co.uk).
2. What We Collect
We collect the following personal data when you interact with our website:
- Name, email address, phone number, and company name when you submit an enquiry form
- Delivery address and billing address when you place an order
- Payment information (processed by third-party payment providers — we do not store card details)
- Your IP address, browser type, and browsing behaviour (via cookies and server logs)
- Communications you send us by email or form submission
3. How We Use Your Data
We use your personal data to:
- Respond to your enquiries and provide quotes
- Process and fulfil orders
- Send order confirmations, dispatch notifications, and invoices
- Maintain records for accounting and tax purposes (required by UK law)
- Contact you about your order or related matters
- Improve our website and services
We will never send you marketing emails without your explicit opt-in consent. You can withdraw consent at any time.
4. Legal Basis
Under UK GDPR, we process your personal data on the following legal bases: contract (to fulfil your order), legitimate interest (to respond to enquiries and operate our business), legal obligation (to keep financial records), and consent (for any marketing communications).
5. Who We Share Data With
We share personal data only with:
- Couriers and shipping providers (to deliver your order)
- Payment processors (to process your payment)
- Our accountant and HMRC (for tax purposes, as required by law)
- Hosting and email providers (Fasthosts) who store this data on secure servers
We do not sell or rent your data to anyone, ever.
6. How Long We Keep Data
We keep personal data for as long as necessary to fulfil the purposes described above. Order and invoice data is kept for seven years as required by HMRC. Enquiry-form submissions are kept for up to two years, after which we delete or anonymise them.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (where we have no legal obligation to keep it)
- Object to processing for direct marketing
- Request data portability (receive your data in a structured format)
- Lodge a complaint with the Information Commissioner’s Office (ico.org.uk)
To exercise any of these rights, email hennie@gti-global.co.uk.
8. Cookies
This website uses cookies for essential website functionality, analytics, and (if you opt in) marketing. You can manage cookie preferences via the banner on your first visit. For more detail, see our Cookie Policy [to be added].
9. Security
We protect your personal data with technical and organisational measures including encryption in transit (HTTPS), restricted access, and secure hosting. No system is 100% secure, but we take this seriously.
10. Changes to This Policy
We may update this policy from time to time. The ‘last updated’ date at the top of this page will change. Significant changes will be notified by email to customers where we have a valid contact address.
11. Contact
Questions about this policy or your data? Email hennie@gti-global.co.uk or write to GTI Global Ltd, 13 Northlands Road, Sheffield, S5 8DU.