Privacy Policy — 1IRON Indoor Golf

Last modified: 3 May 2026 Data controller: 1IRON GOLF LTD (Company Number 11009050), Unit 1, Heathfield Gateway, Stacey Bushes, Milton Keynes, MK12 6BP Named data controller: Patrick Campbell, Manager Contact: hello@1irongolf.co.uk ICO registration: ZC103001

Introduction

We protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what data we collect, why we collect it, how we use it, who we share it with, and how long we keep it. It also explains your rights.

If you have any questions about how we handle your data, contact us at hello@1irongolf.co.uk.

What Data We Collect and Why

Enquiries and Contact Forms

When you contact us — whether through our website contact form, by email, or by phone — we collect:

• Your name
• Your email address
• Your phone number (if provided)
• The content of your message

Why: To respond to your enquiry and, where relevant, follow up as part of providing our services. Lawful basis: Pursuance of our legitimate interests — to manage and respond to customer enquiries.

Bookings

When you make a booking through our website or booking system (Your Golf Booking / YGB), we collect:

• Your name and contact details (email, phone number)
• Booking details (date, time, session type, group size)
• Payment information (processed securely by our payment provider — we do not store card details)
• For Junior and Family bookings: the child's month and year of birth

Booking data is forwarded from Your Golf Booking (YGB) into our CRM (GoHighLevel) via a webhook integration. This allows us to manage your relationship with us in one place.

Why: To process and confirm your booking, send you reminders and pre-visit information, and manage your account with us. Lawful basis: Performance of a contract — to fulfil your booking.

CRM (Customer Relationship Management)

We use GoHighLevel as our CRM platform to store and manage contact records. This includes:

• Identity and contact details
• Booking and visit history
• Purchase history (simulator sessions, fittings, events, gift vouchers)
• Customer segment tags (e.g., coaching interest, fitting interest)
• Communication history (emails sent, received, opened, clicked)
• Notes and interactions recorded by our team

This data helps us understand our customer base, deliver relevant communications, and provide a better service.

Why: To manage our customer relationships, track interactions, and improve our service. Lawful basis: Pursuance of our legitimate interests — to maintain accurate customer records and deliver relevant service.

Data processor: HighLevel, Inc. (GoHighLevel) — GoHighLevel Privacy Policy

Marketing Emails

If you have opted in to receive marketing communications from us, or if you are an existing customer and we are contacting you about similar products and services, we may send you:

• Promotional emails about offers, events, and new services
• Newsletters and updates
• Follow-up emails related to bookings or services you have previously used (e.g., regripping reminders, annual fitting prompts)
• Automated email sequences based on your interests and interactions

These communications are sent via GoHighLevel.

Why: To keep you informed about products and services that may be of interest to you. Lawful basis: Consent (for new contacts who have opted in) or legitimate interests (for existing customers under the UK PECR soft opt-in rule, where we contact you about similar products or services to those you have previously used).

How to opt out: Every marketing email includes an unsubscribe link. You can also email us at hello@1irongolf.co.uk to be removed from marketing communications at any time.

SMS Messages

With your consent, we may send you SMS messages including booking reminders, promotional offers, and follow-up messages. SMS communications are sent via GoHighLevel.

Why: To send you timely communications about your bookings or relevant offers. Lawful basis: Consent.

How to opt out: Reply STOP to any SMS message, or contact us at hello@1irongolf.co.uk.

Live Chat

Our website includes a live chat assistant (Caddy) powered by GoHighLevel. If you use live chat, we collect:

• Your name and email address (if provided)
• The content of your conversation

Chat transcripts may be stored in our CRM and used to follow up on your enquiry.

Why: To respond to your enquiry in real time and maintain a record of our communications. Lawful basis: Pursuance of our legitimate interests — to provide customer support efficiently.

Automated Profiling and Lead Scoring

We use automated tools within GoHighLevel to:

• Score contacts based on their engagement and behaviour (e.g., pages visited, emails opened, bookings made). This score is used internally to prioritise follow-up by our team.
• Segment contacts into categories (e.g., corporate prospect, coaching interest, lapsed customer) to deliver more relevant communications.
• Enrol contacts automatically into email or SMS sequences based on their segment or behaviour.

These processes do not produce legally significant decisions about you. They are used solely to help our team prioritise and personalise their outreach.

Why: To ensure our team focuses effort appropriately and that communications are relevant to you. Lawful basis: Pursuance of our legitimate interests — to manage customer communications efficiently.

Your right to object: You have the right to object to profiling. To do so, contact us at hello@1irongolf.co.uk.

Advertising and Retargeting

We use advertising tools from Google and Meta (Facebook/Instagram) to measure the performance of our ads and to show relevant ads to people who have visited our site or are similar to our existing customers.

This involves:

• Google Analytics 4 (GA4): We track visitor behaviour on our website (pages visited, sessions, conversions) to understand how people use our site and to measure the effectiveness of our marketing. Data is collected via cookies and the Google Tag.
• Google Ads (including GCLID tracking): When you click one of our Google Ads, a click identifier (GCLID) is added to the URL. If you go on to make a booking, we may send this back to Google as an offline conversion, allowing us to measure which ads lead to bookings.
• Meta Pixel: We use the Meta Pixel to track actions on our website (such as page views and completed bookings) and to measure the performance of our Facebook and Instagram advertising.
• Meta Conversions API (CAPI): In addition to the Pixel, we use server-side event forwarding to send conversion events to Meta. This improves measurement accuracy.
• Custom Audiences: We may share hashed (encrypted) contact details (email addresses and/or phone numbers) with Meta and Google to create Custom Audiences. This allows us to show ads specifically to our existing contacts, or to create Lookalike Audiences of people with similar characteristics.

Why: To measure and improve our advertising, and to show relevant ads to people likely to be interested in 1IRON. Lawful basis: Pursuance of our legitimate interests — to market our services effectively. Where these activities depend on non-essential cookies, your consent is required (managed via our cookie consent tool).

How to opt out:

• Google: Google Ad Settings
• Meta: Meta Ad Preferences
• You can also manage cookie preferences via our cookie settings tool on this website.

AI Systems

We use AI tools to help our team manage and respond to enquiries more efficiently.

What our AI systems do: When you contact us by email, our systems may use AI software to classify and prioritise your message and to draft an initial response for review by a member of our team.

Human oversight: No reply is sent without human review. Our AI is a drafting tool only — it does not make automated decisions about you or your enquiry.

What data AI systems see: AI tools may process the content of your message, including your name, email address, and any other information you include.

AI service providers:

• Anthropic (Claude) — Anthropic Privacy Policy

How to opt out: If you would prefer your enquiry not to be processed by AI tools, state this clearly at the start of your message. We will handle your enquiry manually.

Lawful basis: Pursuance of our legitimate interests — to respond to enquiries efficiently while maintaining human oversight of all communications.

Children's Data

Junior and Family bookings may involve the collection of a child's month and year of birth. We use this only to confirm age eligibility for Junior sessions. We do not use children's personal data for marketing purposes.

If you are booking on behalf of a child, by making the booking you confirm that you have the authority to provide their details and agree to this privacy policy on their behalf.

We will delete a child's personal data upon request. Contact us at hello@1irongolf.co.uk.

Third-Party Processors

The following third parties process personal data on our behalf. Each acts as a data processor under a written agreement with us.

International Data Transfers

Some of our third-party processors are based in the United States (including HighLevel/GoHighLevel, Google, Meta, Vercel, and Anthropic). When personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved under UK GDPR, or reliance on an adequacy decision where applicable.

How Long We Keep Your Data

Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to restrict how we process your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests, including profiling and direct marketing
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at hello@1irongolf.co.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data correctly.

Security

We use Transport Layer Security (TLS/SSL) to encrypt data transmitted to and from our website. Access to personal data is restricted to team members who need it to perform their duties. All third-party processors are required to maintain appropriate security measures under the terms of our agreements with them.

Cookies

Our website uses cookies and similar technologies. Non-essential cookies (including analytics and advertising cookies) are only set with your consent, managed via our cookie consent tool.

For full details of the cookies we use, see our Cookie Policy.

Third-Party Websites

This website contains links to third-party websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.

Changes to This Policy

We may update this policy from time to time. The date at the top of this page will be updated when changes are made. Where changes allow wider use of your data, they will apply only to data collected after the update date.

Contact Us

For any questions about this privacy policy or to exercise your rights:

1IRON GOLF LTD (Company Number 11009050) Unit 1, Heathfield Gateway, Stacey Bushes, Milton Keynes, MK12 6BP Data Controller: Patrick Campbell, Manager Email: hello@1irongolf.co.uk

*Registered with the Information Commissioner's Office (ICO). Registration number: ZC103001*