top of page

ENZO GOLF DATA PROTECTION NOTICE 

Play with Friends, Improve with Precision
 

1. Introduction
Enzo Golf is committed to protecting the privacy and security of our customers’ personal data. This Data Protection Policy outlines how we collect, use, store, and protect your data in compliance with the UK General Data Protection Regulation (UK GDPR).
 

2. Business Information

  • Business Name: Enzo Golf

  • Services: Food & drink, indoor golf simulators, golf lessons, tournaments, memberships
     

3. Data We Collect

  • Name

  • Address

  • Phone number

  • Email address

  • Payment details

  • Booking and membership history
     

4. How We Collect Data

  • Website forms

  • Point-of-sale systems

  • Membership sign-ups

  • Event and tournament registrations
     

5. Legal Basis for Processing
We process your personal data under the following lawful bases:

  • Bookings, memberships, and payments: necessary for the performance of a contract.

  • Marketing emails and promotions: based on your consent, which you can withdraw at any time.

  • Fraud prevention, record keeping and compliance with law: legal obligation or legitimate interest.
     

6. Purpose of Data Collection

  • Process bookings for simulators, lessons, and tournaments

  • Manage memberships

  • Communicate marketing promotions, newsletters, and offers

  • Process payments securely

  • Meet legal and regulatory obligations
     

7. Data Sharing
We may share personal data with trusted third-party service providers who help us deliver our services. These include (as applicable):

  • Payment processors (e.g., Stripe, Square, PayPal)

  • Booking and scheduling systems

  • Email service providers (if used for newsletters)

All third parties are bound by contracts requiring them to protect your data and use it only for agreed purposes.
 

8. International Data Transfers
Some of our service providers may store or process personal data outside the UK/EEA. Where this occurs, we ensure that appropriate safeguards (such as UK-approved Standard Contractual Clauses or adequacy decisions) are in place to protect your data.
 

9. Data Storage and Security
We store personal data on secure servers and/or encrypted local systems. Access to personal data is restricted to authorised staff only. We implement:

  • Password protection

  • Encryption

  • Access controls

  • Regular security updates
     

10. Data Breach Procedures
We have procedures in place to detect, investigate, and report personal data breaches. Where legally required, we will notify the UK Information Commissioner’s Office (ICO) and affected individuals promptly.
 

11. Marketing and Communications
We send marketing communications only to customers who have opted in. You may unsubscribe at any time by following the instructions in our emails or contacting us directly.
 

12. Cookies and Online Tracking
Our website uses cookies to enhance user experience and may use analytics services (such as Google Analytics) to understand visitor behaviour. Visitors can manage cookie preferences through our cookie banner or browser settings.
 

13. Customer Rights
Under UK GDPR, you have the right to:

  • Access your data

  • Correct inaccurate data

  • Request data deletion

  • Object to data processing

  • Request data portability

We respond to all data subject requests within one month. Requests can be made by contacting us at mhillman@enzoinc.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/
 

14. Data Retention
We retain personal data only as long as necessary to provide our services:

  • Membership data: retained during membership and securely deleted 2 years after expiry.

  • Enquiries and leads with no booking: securely deleted after 12 months.

  • Marketing lists: retained until you unsubscribe, then deleted within 30 days.
     

15. Children’s Data
We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us so we can delete it.
 

16. Compliance and Contact
We comply with the UK GDPR and regularly review our data protection practices.

bottom of page