Privacy Policy
Last updated: 30 August 2026
1. Who we are
GolfFlip (Golf Flip Ltd, a company registered in England and Wales, company number 17429818, registered office 27 St Marys Road, Eastbourne, BN21 1QD) is the data controller for the personal data described in this policy. Contact us at support@golfflip.co.uk with any privacy question or request.
2. What we collect
Account details (name, username, email address, and password, stored securely hashed, never in plain text); listing content and photos you upload; messages between buyers and sellers; delivery address and postcode where you provide one; and transaction data (orders, payment status, shipping/tracking references) needed to run the marketplace. If you sign up with Google, we receive your name and email from Google, we don't see your Google password.
3. How we use it, and why we're allowed to
We use your data to operate listings and search, process payments and escrow, generate shipping references, communicate with you about orders, resolve disputes, and keep the Platform secure. Most of this processing is necessary to perform our contract with you (running your account and transactions); some, like fraud prevention, relies on our legitimate interest in keeping the Platform safe. We don't sell your personal data to third parties, and we don't use it for third-party advertising.
4. Who we share it with
Payments and seller payouts are handled by Stripe, our payment processor, GolfFlip does not store full card details. Our database, authentication and photo storage run on Supabase. Automated account and order emails (order confirmations, offer and dispute notifications, and similar) are sent via Resend; your support inbox correspondence is handled through Zoho Mail. Delivery addresses are shared with our shipping/courier partner solely to fulfil delivery once a courier is contracted. None of these providers may use your data for their own marketing purposes on our behalf.
5. Where your data is processed
Some of our providers (including Stripe and Supabase) may process data on servers outside the UK. Where that happens, we rely on their standard contractual safeguards for international transfers, as required under UK GDPR.
6. How long we keep it
We keep account and transaction data for as long as your account is active, plus a period afterward where needed for dispute resolution, fraud prevention, or legal and accounting obligations (for example, transaction records relevant to tax). If you delete your account, we remove personal data that we no longer need to retain for those reasons.
7. Your rights
Under UK GDPR you can ask us to: give you a copy of your data, correct inaccurate data, delete your data (subject to the retention reasons above), restrict or object to certain processing, or receive your data in a portable format. Email support@golfflip.co.uk to make a request, we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
We use essential cookies to keep you signed in. No third-party advertising or tracking cookies are set at this stage; if that changes, we'll update our policies and ask for consent where required. See our Cookies Policy for the full detail.
9. Children
GolfFlip is not intended for anyone under 18, and we don't knowingly collect data from children.
10. Keeping your data secure
We use industry-standard measures, encrypted connections, access controls, and row-level security on our database, to protect your data. No system is completely risk-free, but we take reasonable steps to keep your information safe and to notify you if a breach affecting you occurs, as required by law.
11. Changes to this policy
We may update this policy as the Platform develops. We'll post the updated version here with a new "last updated" date.