Privacy Policy

Last updated: 1 August 2026

This policy explains what personal information Hole-In-One ("we", "us") collects when you use www.holeinoneworld.com, how we use it, and the rights you have. We are the "data controller" for this information. If you have any questions, contact us at [your contact email].

Information we collect

Information you give us. When you place an order we collect your name, email address, delivery address and the details of what you ordered.

Your account. To order from us you need an account. We store your name, email address and a securely hashed password — we never store your password itself, and we cannot see it. If you ask to reset your password we create a temporary, single-use link that expires after one hour.

Trade accounts. If you apply for a trade account we also collect your company or trading name, your trade type, and (if you give it) your VAT number, so we can verify you and apply your discount.

Reviews. If you review a product we store your name, your rating and your review text, along with a record that you bought that product. Approved reviews are shown publicly with your name — your email address is never shown.

Saved items and your bag. If you save items for later, or leave items in your bag while signed in, we store that so we can show them to you next time and — if you leave without ordering — send you a reminder email. You can empty your bag or remove saved items at any time.

Enquiries. If you contact us through the website we store your name, email address, subject and message so we can reply and keep a record of the conversation.

Information collected automatically. When you browse the site we record basic, privacy-conscious usage data — the pages viewed, the referring site, and your browser type. Your IP address is stored only as a one-way "hashed" value, not in a form that identifies you. This analytics data is only collected if you accept analytics cookies (see our Cookie Policy).

Payment information. Payments are handled by PayPal. We never see or store your card details — PayPal processes the payment and tells us only whether it succeeded, plus a transaction reference and the delivery address you confirm.

How we use your information

To take and fulfil your order, and to contact you about it (including dispatch notifications).
To run your account, verify your identity, and let you reset your password.
To provide customer support and handle returns or refunds.
To publish product reviews, and to confirm the reviewer genuinely bought the product.
To remind you about items left in your bag, if you were signed in when you left them.
To assess and administer trade accounts and their discounts.
To understand how the site is used so we can improve it (analytics).
To keep the site secure and prevent fraud.
To meet our legal obligations, such as keeping records for tax purposes.

Our legal bases (UK GDPR)

Contract — to process and deliver the orders you place, and to run your account.
Legitimate interests — to keep the site secure and running well, to prevent fraudulent reviews, to assess trade applications, and to remind you about items you left in your bag. You can object to bag reminders at any time by contacting us, and every reminder email tells you how to stop receiving them.
Consent — for analytics cookies, which you can accept or decline.
Legal obligation — to keep financial records required by law.

Who we share it with

We do not sell your personal information. We share it only with the services that help us run the shop: PayPal (payments), our hosting provider Hostinger (which stores the site and its database), and delivery partners where needed to send your order. Each only receives what it needs, and we may disclose information if required by law.

How long we keep it

We keep order and transaction records for as long as needed to provide the service and to meet legal and tax requirements (in the UK this is generally six years). Analytics data is kept in a limited, aggregated form.

Your account — until you ask us to close it.
Password reset links — these expire after one hour and can only be used once.
Saved bags and saved items — until you order, empty them, or ask us to remove them.
Reviews — kept while published; removed if you ask us to withdraw yours.
Enquiries — kept while we deal with your query and for a reasonable period afterwards.

You can ask us to delete information we are not legally required to keep.

Your rights

You have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive a copy in a portable format. To exercise any of these, email [your contact email]. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Where your data is stored

Customer account information, reviews and enquiries are held in a separate database from our shop and order records, so that personal data is kept apart from day-to-day trading data. All data is stored on servers within the UK/EU.

Security

The site runs over a secure (HTTPS) connection, passwords are stored in hashed form, and access to the back office requires two-factor authentication.

Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it last changed.

Contact

Hole-In-One — [your business name and address] — [your contact email].

This policy is a starting template based on how the site works. Please review it, fill in the details in brackets, and consider having it checked before you rely on it.