We may update this policy from time to time; the current version will always be on this page.

1. Who we are

OnlineProShops is an online marketplace where UK golf pro shops sell to golfers. The data controller responsible for your personal data in connection with this website is OnlineProShops Ltd. If you have questions about this policy or your data, you can contact us using the details on our contact page.

2. What data we collect and why

We collect only what we need to run the marketplace, process orders and support you.

• Account data. When you sign in with a Microsoft account, we receive and store your email address and a unique identifier from Microsoft so we can link your account to our systems. You can optionally save a default name and address in your account to speed up checkout. We do not store your Microsoft password.
• Order data. When you place an order, we collect and store your name, email address and delivery address so the pro shop can fulfil the order and we can send you order confirmations and updates. We also store details of the items ordered, payment status and delivery status.
• Payment data. We do not store your card number or full payment details. Payments are processed by Stripe. We store a reference (e.g. Stripe session ID) so we can match payments to orders. Stripe’s own privacy policy applies to the payment data they hold.
• Contact and support. If you contact us (e.g. by email or via our contact page), we will use the contact details and information you provide to respond and to help with any orders or enquiries.
• Basket. When you are signed in, your basket is linked to your account so we can show your items across devices. Basket contents are not shared with third parties until you place an order.

3. Legal basis for using your data

We use your data on the following bases:

• Contract. To create and manage your account, process orders and deliver the service you have asked for.
• Legitimate interests. To improve the site, prevent fraud, handle disputes and comply with legal obligations, where this does not override your interests.
• Consent. Where we use non-essential cookies or analytics (e.g. to understand how the site is used), we will only do so if you have agreed via our cookie banner. You can change your choices at any time.

4. Who we share your data with

We do not sell your personal data. We share it only where needed to provide the service:

• Microsoft. We use Microsoft external identity so you can sign in. Microsoft processes your sign-in in accordance with their privacy policy.
• Stripe. We use Stripe to take payments. They process card and billing details in line with their privacy and security standards.
• Pro shops (sellers). When you order from a pro shop, we share your name, delivery address and contact email (and order details) so they can dispatch your items and get in touch if needed.
• Couriers. Pro shops may use couriers to deliver your order. The pro shop may pass your name, address and contact details to the courier for delivery purposes.
• Email and hosting. We use third-party services to send emails and to host and run the website. Those providers process data only as necessary to provide the service to us.

Some of these providers may process data outside the UK. Where that is the case, we ensure appropriate safeguards (such as standard contractual clauses or adequacy decisions) are in place to protect your data.

5. How long we keep your data

We keep your data only for as long as necessary:

• Account data is kept while your account is active. You can ask us to delete your account and associated data; we will do so subject to any legal obligations to retain certain information (e.g. for completed orders).
• Order data is kept for as long as needed to fulfil orders, handle returns, resolve disputes and meet legal and tax obligations (typically several years after the order, depending on the requirement).
• Contact and support correspondence may be retained for a reasonable period to handle follow-ups and complaints.

If you would like details of our retention periods for a specific type of data, please contact us.

6. Your rights

Under UK data protection law you have rights over your personal data, including:

• Access – you can ask for a copy of the personal data we hold about you.
• Rectification – you can ask us to correct inaccurate or incomplete data.
• Erasure – you can ask us to delete your data in certain circumstances (e.g. where we no longer need it, subject to legal exceptions).
• Restriction – you can ask us to restrict how we use your data in certain circumstances.
• Data portability – where we process your data by automated means under contract or consent, you can ask for a copy in a structured, machine-readable format.
• Object – you can object to processing based on legitimate interests, including profiling. We will stop unless we have compelling grounds to continue.
• Withdraw consent – where we rely on consent (e.g. for non-essential cookies), you can withdraw it at any time via our cookie preferences.

To exercise any of these rights, please contact us using the details on our contact page. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data:

.

7. Cookies

We use a cookie consent banner so you can choose whether to allow strictly necessary cookies only, or also performance and analytics cookies to help us improve the site. Strictly necessary cookies are needed for the site to work (e.g. signing in, basket). Performance and analytics cookies help us understand how the site is used. You can change your choices at any time using the "Cookie preferences" link in the footer.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Sensitive operations (such as sign-in and payment) use industry-standard practices; we do not store card details on our own systems.

9. Contact and complaints

For any questions about this policy or your personal data, or to exercise your rights, please use the contact details on our contact page. If you are not satisfied with our response, you can complain to the ICO (see link in section 6).