Clear about your data.
Careful with it.

01

Overview and who is responsible

OpenTees recommends personalised golf tee-time opportunities. It is not a booking platform: when you choose to view or book a tee time, you are sent to the relevant golf course or third-party booking provider.

For UK data-protection law, the controller responsible for the personal information described in this notice is [Your full legal name], trading as OpenTees.

02

Information we collect

Depending on how you use OpenTees, we may process:

• Identity and contact information: your name, email address and information you provide when contacting us.
• Location information: your postcode, chosen search area and travel radius. We use this to identify relevant courses; we do not need precise live GPS location for the current service.
• Golf preferences: preferred courses, days, tee-time windows, budget, player count and other choices you submit.
• Recommendation information: matches, scores, reasons and other inferences generated from your preferences and available tee times.
• Course requests: requested course, email, location and any optional notes you submit.
• Usage and interaction information: recommendation and email interactions, links selected, outbound booking clicks, pages or features used, and timestamps.
• Technical and security information: IP address, browser or device information, diagnostic records, request logs and security events generated when you use the website or service.
• Communication and consent records: support messages, email delivery status, marketing choices, unsubscribe requests and evidence of consent where applicable.

We generally collect information directly from you and automatically through your use of OpenTees. Tee-time and course information comes from golf courses, booking providers and other sources used to provide the recommendation service.

OpenTees does not intentionally ask for special-category information such as health, biometric, religious or political information. Please do not provide it in free-text fields.

03

How and why we use information

Where we rely on legitimate interests, we consider the benefit to OpenTees and its users, whether the processing is necessary, and its effect on your rights. You may object as explained below.

04

Personalised recommendations and profiling

OpenTees automatically compares live tee-time information with the preferences you provide. Factors may include location and distance, preferred courses, day, time, budget and player count. The service ranks available opportunities and may explain why a match was selected.

This is profiling because it evaluates your preferences to personalise recommendations. It does not decide whether you may play golf, set the provider’s price, complete a booking, or produce a legal or similarly significant decision about you. You decide whether to follow a link and any booking is governed by the course or booking provider.

You can change your profile and preferences or ask us about the information used for your recommendations by contacting us.

05

Recommendation emails and marketing

Emails needed to provide a service you request—such as tee-time recommendations, profile confirmations, security notices and a requested notification that a course is available—are service communications. You can stop recommendation emails by changing your preferences or using the unsubscribe facility provided.

We treat separate promotional newsletters, offers and product marketing as direct marketing. We send these only where PECR permits it, normally with your consent. Where we rely on the soft opt-in, we will have collected your details directly while discussing or providing our own similar service and offered a clear opt-out both then and in every marketing message.

You can object to direct marketing or withdraw marketing consent at any time by using the unsubscribe link or emailing us. We may retain the minimum information needed on a suppression list so we continue to respect your choice.

06

Cookies, similar technologies and measurement

OpenTees and its service providers may use browser storage, cookies, pixels or similar technologies to operate the website, protect forms, remember choices, understand use and measure email or link interactions.

Strictly necessary technologies may be used without consent where the law allows. We will not activate non-essential analytics, advertising or similar tracking technologies until you have made the required consent choice. You can change that choice through the website’s cookie controls. Refusing non-essential technologies will not prevent use of the core service.

A separate cookie notice should list each technology actually deployed, its provider, purpose and duration.

07

Who receives your information

We may disclose information only as reasonably necessary to:

• Supabase, which provides database, storage, authentication and server-side infrastructure used by OpenTees;
• Framer, which provides website publishing and hosting functionality;
• email-delivery and communication providers that send service and permitted marketing messages;
• analytics, security, error-monitoring and automation providers, but only where they are actually enabled and subject to appropriate controls;
• professional advisers, insurers, auditors and contractors who need information to provide their services;
• courts, regulators, law-enforcement bodies or public authorities where disclosure is required or legally permitted; and
• a buyer, investor or successor if OpenTees is reorganised, financed, sold or transferred, subject to appropriate confidentiality and legal safeguards.

Service providers act under contractual restrictions and may use personal information only for agreed purposes. We do not sell personal information. We do not give golf courses or booking providers your OpenTees profile merely because you follow an outbound link. Those third parties collect information directly from you under their own privacy notices if you use their services.

08

International transfers

Some suppliers or their subprocessors may store or access information outside the United Kingdom. Where this is a restricted transfer, we use a lawful transfer mechanism appropriate to the destination and supplier. This may include UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to approved standard contractual clauses, together with supplementary safeguards where required.

You may contact us for more information about the safeguards relevant to your information.

09

How long we keep information

We keep identifiable information only for as long as reasonably needed for its purpose. Our current retention framework is:

• Profile and preference information: while you actively use OpenTees, followed by review after 24 months without meaningful activity.
• Course requests and related notifications: up to 24 months after the request is resolved or your last interaction, unless retained in anonymised form to understand demand.
• Usage, booking-link and recommendation-interaction records: normally up to 14 months, after which they are deleted or aggregated unless needed for security or a legal claim.
• Security and diagnostic logs: normally up to 12 months, with shorter periods where practicable.
• Support communications: normally up to 24 months after the matter closes.
• Marketing-consent evidence: while relied upon and for up to six years afterwards where necessary to demonstrate compliance.
• Suppression records: the minimum email and opt-out information needed to respect an unsubscribe, for as long as that remains necessary.
• Backups: information may remain in protected rolling backups for up to 90 additional days before being overwritten.

We may keep relevant information longer where required by law, necessary for fraud or security investigations, or needed to establish, exercise or defend legal claims. We periodically review information and delete or anonymise it when it is no longer needed.

10

Security

We use proportionate technical and organisational measures designed to protect information against accidental or unlawful destruction, loss, alteration, disclosure or access. These include access controls, restricted administrative permissions, encrypted network connections, managed infrastructure, logging, backups and review of service-provider safeguards where appropriate.

No online service can guarantee absolute security. If a personal-data breach creates a risk to people, we will assess it and notify the ICO within the legally required period where notification is required. We will also notify affected individuals where the law requires it.

11

Your data-protection rights

Depending on the circumstances and lawful basis, you may have the right to:

• be informed about how we use your information;
• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information;
• ask us to restrict how information is used;
• receive information you provided in a portable format;
• object to processing based on legitimate interests;
• object at any time to direct marketing, including related profiling;
• withdraw consent at any time, without affecting earlier lawful processing; and
• raise concerns about automated processing or ask for information about recommendation profiling.

To exercise a right, email hello@open-tees.com. We may ask for information needed to verify your identity. We normally respond within one month, although the law permits extensions for complex or numerous requests. Rights are not absolute, and if an exemption applies we will explain it.

12

Children

OpenTees is not currently designed for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information to us, please contact us so we can investigate and delete it where appropriate. Golf courses and booking providers may apply their own age and supervision rules.

13

Changes and contact

We may update this notice when OpenTees, its suppliers or the law changes. The effective date at the top identifies the current version. If a change materially affects how we use existing information, we will provide an appropriate additional notice and seek consent where the law requires it.

Questions or requests should be sent to hello@open-tees.com.