Privacy

What we hold, and why.

Golf Sessions runs golf events. That means we hold names, handicaps and scores — and not much else. This says exactly what, for how long, and who else sees it.

Last updated 1 September 2026

Who we are

Golf Sessions is operated by HJJ Consulting Ltd, registered in England and Wales, company number 16261277, whose registered office is at 52 Moor Street, Worcester, WR1 3DB, United Kingdom. We are the data controller for the personal data described here.

DetailRegistered entry
Company nameHJJ CONSULTING LTD
Company number16261277
Registered office52 Moor Street, Worcester, United Kingdom, WR1 3DB

For anything about your data — a copy of it, a correction, or a deletion — use the contact form, or write to us at the registered office above.

What we collect

DataWhy
Name and emailTo create your account, and to put your name on a scorecard and a leaderboard.
Handicap index and home clubTo work out your course and playing handicap. Optional, but without it your shots cannot be calculated.
ScoresHole by hole, for the events you play in. This is the product.
Profile photoOptional. Shown on your player page and the order of merit.
Event contentTeam names, colours, crests, cover photos and sponsor logos uploaded by an organiser.
Sign-in identifierFrom Apple, Google or an email link, so we know it is you next time.
Marketing consentA separate opt-in, never bundled into signing in. Recorded so we can prove you gave it.

We do not collect payment card details. Today an event is entitled by a code, not a card. When card payment launches, Stripe will process it and card numbers will never reach our systems.

If you buy the setup service, we keep the email address the payment was made with, the event it was bought for, and Stripe's reference for the payment. We keep it to do the work you paid for and to answer questions about the charge afterwards. It is not a marketing list and it is never added to one.

Who can see your data

A published event is public. That is the point of it — the board goes on a clubhouse television and the scores get shared into a group chat. Anyone with the link can see the event page, live scores, the board and the order of merit, without an account.

  • Public on a published event: your name, team, handicap index, scores, results and profile photo.
  • Visible to the organisers of your event: everything above, plus your email address.
  • Never public: your email address, your sign-in identifier, anything about payment.
  • An unpublished event is visible only to its organisers.

If you would rather your handicap index were not public, tell your organiser — they can leave it off your entry, though your shots will then be calculated from zero.

Who processes it for us

WhoWhat for
Base44Hosting, database and file storage. Our application runs on their platform.
StripeCard payment, when it launches. They will receive the organiser’s billing details, not the players’. Today entitlement comes from a code and nothing goes to Stripe.
Apple and GoogleSign-in, if you choose one. They confirm it is you; we receive an identifier and your email.
Google FontsTypefaces are served from Google’s font service when a page loads.

Some of these operate outside the UK and EEA. Where they do, transfers rely on the UK International Data Transfer Addendum or equivalent safeguards.

How long we keep it

  • Event and score data: kept while the event exists, so a society can look back at previous years. An organiser can delete an event from its manage screen, which removes it, its players, every score, the photos and the sponsors immediately and for good.
  • Your account: kept until you ask us to delete it.
  • Marketing consent: kept while you are subscribed, and for two years after you unsubscribe, as proof the consent existed.
  • Payment records: kept for six years, as UK tax law requires.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask us to send it elsewhere. Ask through the contact form and we will respond within one month.

One honest limit: we cannot delete you from a scorecard of an event that other people played in, any more than a club can erase you from a medal result. We can remove your profile photo, your email address and your account, and reduce your name on historic results to initials.

If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies and storage

We use no advertising or analytics cookies. The app stores a sign-in token so you stay signed in, keeps scores you enter without signal in your browser until they sync, and keeps a copy of the event you last looked at so the app still opens where there is no signal. All three are necessary for the app to work on a golf course, none of them tracks you anywhere else, and the copy of the event is deleted when you sign out.

Children

Golf Sessions is for adults organising and playing in golf events. Junior players are often entered by an organiser rather than signing up themselves; where that happens the organiser is responsible for having the right permission from a parent or guardian.

Changes

If we change this policy we will update the date at the top, and tell account holders by email if the change is significant. See also our terms.