Privacy policy

Stripped Golf, Nairobi, Kenya, decides how the personal data described here is used, and handles it in line with the Kenya Data Protection Act, 2019. This page explains what we collect, why, who we share it with and what you can ask us to do.

What we collect

Only what you give us on our forms, what we record while serving you, and basic sign-in records.

• Orders: your email and mobile number; the recipient's name, delivery address and directions (or that you're collecting); what you bought; how you paid (M-PESA, cash or bank) and any payment reference; deposits, refunds and returns.
• Account (optional): your name and email, and if you add them, your mobile number, saved addresses, saved items, hand, handicap and home course. Your confirmation that you're 18 or over, and when you gave it. Your password is handled by our sign-in provider; we can't see it.
• Sign-in records: the browser and device (including the phone or computer model and system version your browser shares), IP address, the approximate town and country it points to, and the times of your sign-ins, so you can see and sign out of your devices. Device details are deleted when that device signs out.
• Fittings: your name, email, mobile number, hand, handicap and anything you tell us you want from the fitting; afterwards, the fitter's recommendations and the club specifications on your fit card. For junior fittings, see Children.
• Repairs and custom builds: your name, email and mobile number, the clubs and work involved, the build specification, and your swing speed if you give it.
• Corporate enquiries: your name, role, company, work email and mobile number, and the event or order details you send (dates, numbers, budget range, county).
• Messages: your name, email, mobile number if you give it, order number and what you write.
• Reviews: the name you choose to show, your rating and review. Published reviews are public.
• Alerts: your email, if you ask us to tell you when something is back in stock or when a service opens.

Our customer records. We keep one record per email address that brings together the orders, bookings, workshop jobs, enquiries and messages made with it, plus notes our staff make about calls, messages, meetings and follow-ups. Which staff can see them depends on their role.

Why we use it

• To take and deliver your orders, run fittings, repairs and builds, prepare quotes and handle returns: we need it to do what you've asked.
• To keep accounting and tax records: the law requires it.
• To answer your messages, keep a history of how we've helped you, prevent misuse of our forms and improve the store: our legitimate interest in running the business, balanced against your rights.
• For junior fittings: with the agreement of the player's parent or guardian.

We don't sell your data. We don't send marketing messages; if we ever want to, we'll ask first.

Children

Accounts and orders are for adults, 18 or over. We sell junior equipment and run junior fittings, but we ask a parent or guardian to place the order or make the booking with their own contact details. When you buy for a junior, we don't need anything about them.

When a parent or guardian books a junior fitting, we keep the player's first name, hand and handicap, what the fitter recommends, and the parent or guardian's confirmation that they agree. We don't ask for a junior's age, date of birth, school or photo.

We ask people to confirm they're 18 or over, but we don't check. If you think a child has given us their personal details without a parent or guardian, please tell us. We'll remove what we don't need to keep; records of a sale may have to stay for tax purposes.

Who we share it with

• Couriers: only the name, phone number and address they need to deliver.
• Service providers who run parts of the store for us, under agreements that protect your data: Supabase (database and sign-in), Vercel (website hosting) and Resend (email). If we switch on card or online payments, Paystack processes them; we never receive full card details or M-PESA PINs.
• Authorities, when the law requires it.

Where it's stored

Our database is hosted in Frankfurt, Germany. Our website host and email provider may process data in other countries, including the United States. We use providers that commit to protecting personal data, as Kenyan law requires for transfers outside Kenya.

Cookies

We use only essential cookies: to keep you signed in, remember your bag and saved items, and let you open your orders and bookings. Your browser also remembers that you've seen our cookie notice. We don't use advertising or analytics cookies.

Your rights

You can ask to see the personal data we hold about you, to correct it, to delete it, or to object to how we use it. You can edit your account details yourself under Account. Deleting your account removes your sign-in, saved addresses and saved items; our records of your orders, bookings and messages, and our notes, stay unless you ask us to remove them. To ask, use the contact page. You can also complain to the Office of the Data Protection Commissioner.

How long we keep it

Order, payment and accounting records are kept as long as tax law requires, even if you delete your account or ask us to delete your data. Other data is deleted when it's no longer needed or when you ask, unless the law requires us to keep it.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you first.