Privacy Notice

1. Who we are

Grass Roots Golf is operated by Ben Koech ("we", "us"). We are the data controller for personal data processed through this Service. Contact: bkoech1992@gmail.com.

2. Data we collect

• Account data: name, email, password (hashed), profile details.
• Service data: rounds, scores, courses, tournaments, chat messages, photos you upload.
• Support data: messages you send us.
• Usage and device data: IP address, device identifiers, log data, telemetry.
• Cookies: essential cookies for authentication and session management.

3. How we use your data

• Create and manage your account (contract performance).
• Provide the Service: round logging, leaderboards, tournaments, chat (contract performance).
• Security, fraud prevention, and abuse detection (legitimate interests).
• Customer support (contract performance / legitimate interests).
• Improving the Service (legitimate interests).
• Legal and regulatory compliance (legal obligation).

4. Sharing your data

We share data only with:

• Service providers for hosting, database, and infrastructure.
• Paddle.com, our Merchant of Record, for payments, subscription management, tax, and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities when required by law.

5. Data retention

We retain personal data while your account is active and as needed to provide the Service. When no longer needed, data is deleted or anonymized. Some data may be retained longer where required by law (e.g. tax records).

6. International transfers

Your data may be processed outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Your rights

Subject to applicable law, you have the right to:

• access, rectify, or erase your personal data;
• restrict or object to processing;
• data portability;
• withdraw consent where processing is based on consent;
• lodge a complaint with your local supervisory authority.

To exercise these rights, contact us at bkoech1992@gmail.com. We respond within one month.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and regular security reviews to protect your personal data.

9. Cookies

We use essential cookies required for authentication and session state. We do not use advertising cookies. You can manage cookies through your browser settings; disabling essential cookies may prevent you from signing in.

10. Changes

We may update this Privacy Notice from time to time. Material changes will be notified through the Service.