This policy explains how Discount Golf Store ("we", "us") collects, uses and protects your personal information when you use our website, shop in store, or contact us.
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who we are
Discount Golf Store is the trading name of Centregolf Limited, the data controller responsible for your personal information.
- Company number: 12482544
- Registered office: Orbital House, 20 Eastern Road, Romford, Essex, RM1 3PJ
- ICO registration: ZB031530
- Contact: orders@discountgolfstore.co.uk | 01277 218714
2. What we collect
Information you provide
We only collect personal data that is necessary for the purpose stated.
- Name, billing and delivery addresses, email, phone number
- Account credentials (passwords stored as encrypted hashes), order history, wish lists, loyalty points
- Payment method selection (full card details are handled by Stripe and Opayo, not stored by us)
- Customer service correspondence (email, phone, live chat, contact form)
- Marketing preferences and consent choices
- Reviews, ratings and survey responses
- Custom fitting data (swing measurements, physical measurements, equipment preferences)
Information collected automatically
- IP address, browser type, device type, operating system, screen resolution, referring URL
- Pages visited, time on page, clicks, searches, products viewed, basket and checkout activity
- Anonymised session recordings via Microsoft Clarity (mouse movements, clicks, scrolls; no form field keystrokes recorded)
- Cookies and similar technologies (see Section 10)
Information from third parties
- Klarna and Omni Capital: finance application outcomes (approved/declined/amount)
- Google and Meta: aggregated campaign performance data
- Trustpilot and Reviews.io: review content you choose to leave (Reviews.io is our primary review platform; Trustpilot remains active)
3. Why we use your information and our lawful basis
UK GDPR requires a lawful basis for every processing activity. We rely on four: performance of a contract (when fulfilling orders), legitimate interests (when the processing is proportionate and expected), consent (when you opt in), and legal obligation (when the law requires it).
| Purpose | Lawful basis | Retention |
|---|---|---|
| Processing and fulfilling orders, payments, delivery and returns | Contract | 7 years (HMRC) |
| Managing your account and loyalty points | Contract | Until account closed + 12 months |
| Fraud prevention | Legitimate interests | 7 years |
| Marketing emails (products, offers, events) | Consent, or soft opt-in for existing customers (PECR Reg. 22) | Until unsubscribe, or 24 months from last engagement |
| Website personalisation (recommendations, recently viewed) | Consent (cookie banner) | 13 months |
| Analytics and performance measurement | Consent (cookie banner) | 14 months (GA4 default) |
| Customer service | Legitimate interests | 3 years from last contact |
| Sending post-purchase review invitations (via Reviews.io) | Legitimate interests | 90 days from purchase |
| Publishing reviews and ratings (on Trustpilot and Reviews.io) | Consent | Until you request removal |
| Custom fitting service (swing measurements, physical measurements, equipment preferences) | Contract | 3 years from last fitting, or until account closed (whichever is later) |
| Tax, accounting and regulatory compliance | Legal obligation | 7 years minimum |
| Defending legal claims | Legitimate interests | 6 years (Limitation Act 1980) |
4. Marketing
We send marketing emails only if you have opted in or have previously bought a similar product from us and have not opted out (the "soft opt-in" under PECR Regulation 22). In our context, "similar products" means golf equipment, clothing, accessories and related services.
Every email contains an unsubscribe link. You can also email orders@discountgolfstore.co.uk or update preferences in your account. If you unsubscribe, we add you to a suppression list. You will still receive transactional emails (order confirmations, delivery updates, returns).
5. Who we share your information with
We do not sell your personal information. We share it only with the providers below, each contractually required to protect your data and use it only for the stated purpose.
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Sayu Ltd | Website hosting, development and maintenance | All website-related personal data | UK |
| Stripe, Inc. | Apple Pay, Google Pay, card tokenisation | Card details, billing address, transaction amount | USA (EU-US DPF) |
| Opayo by Elavon | Card payment processing | Card details, billing address, transaction amount | UK / EU |
| Klarna Bank AB | Buy-now-pay-later finance | Name, address, email, phone, DOB, order amount | Sweden (EU adequacy) |
| Omni Capital Retail Finance | 0% finance | Name, address, email, phone, DOB, financial details | UK |
| Mailchimp (Intuit Inc.) | Email marketing | Name, email, purchase history, engagement data | USA (EU-US DPF) |
| Royal Mail, DPD, Parcelforce | Delivery | Name, delivery address, phone, email | UK |
| Google LLC | Analytics and advertising | Truncated IP, device data, usage events | USA (EU-US DPF) |
| Meta Platforms Inc. | Advertising and conversion tracking | Hashed email, device data, on-site events | USA (EU-US DPF) |
| Microsoft Corporation | Clarity session recordings | Anonymised session data, heatmaps | USA (EU-US DPF) |
| Trustpilot A/S | Customer reviews (active; secondary platform) | Name, email, order reference | Denmark (EU adequacy) |
| Reviews.io Ltd | Customer reviews and review invitations (primary platform) | Name, email, order reference | UK |
| HMRC, courts, regulators | Legal obligations | Only what is legally required | UK |
6. International transfers
Where providers process data outside the UK (primarily in the USA), we rely on the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to Standard Contractual Clauses. You can request details of the safeguards for any specific transfer by emailing us.
7. How long we keep your information
Retention periods are listed in Section 3. When data reaches the end of its retention period it is securely deleted or irreversibly anonymised.
8. Your rights
Under UK GDPR you have the right to:
- Access a copy of your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data in certain circumstances
- Restrict processing while a query is resolved
- Receive your data in a portable, machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time (without affecting earlier processing)
We do not make decisions about you using solely automated processing that produces legal effects.
To exercise any right, email orders@discountgolfstore.co.uk with the subject "Data Rights Request". These requests are free. We respond within one calendar month (extendable by two months for complex requests, with notice to you). We may verify your identity before acting.
9. Data protection complaints
Under the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), you have the right to make a data protection complaint directly to us if you believe we have processed your personal data in breach of data protection law.
To make a complaint, email orders@discountgolfstore.co.uk with the subject "Data Protection Complaint". We will acknowledge your complaint within 30 days, investigate without undue delay, and inform you of the outcome.
If you are not satisfied with our response, you can complain to the Information Commissioner's Office:
- Website: ico.org.uk
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Cookies
We use cookies and similar technologies in four categories:
| Category | Purpose | Consent required |
|---|---|---|
| Strictly necessary | Site function (basket, login, checkout, security) | No (PECR exempt) |
| Analytics | Measuring site usage (Google Analytics, Microsoft Clarity) | Yes |
| Functional | Remembering preferences (recently viewed, saved filters) | Yes |
| Advertising | Showing relevant ads and measuring campaigns (Meta Pixel, Google Ads) | Yes |
Non-essential cookies require your consent via our cookie banner before they are set. You can change your preferences at any time by clicking "Cookie settings" in the website footer, or through your browser settings. See our Cookie Policy for full details.
11. Security
We protect your data with HTTPS/TLS encryption, PCI-DSS compliant payment processing (we never see or store full card numbers), encrypted password storage, role-based access controls, regular security reviews with Sayu, and staff training.
If we become aware of a breach likely to result in a high risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.
12. Children
Our website is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 16. If you believe we have, contact us and we will delete it.
13. Links to other websites
Our site links to third-party websites (manufacturers, social media, review platforms). We are not responsible for their privacy practices.
14. Changes to this policy
We review this policy regularly. The "Last updated" date at the top shows when it was last revised. For significant changes we will notify you by email or a notice on the website.
15. Contact
- Email: orders@discountgolfstore.co.uk
- Phone: 01277 218714
- Post: Centregolf Limited, Orbital House, 20 Eastern Road, Romford, Essex, RM1 3PJ
Your Account
Discount Golf Store Newsletter