1. Who we are
Heathland Links is the controller responsible for the personal information described in this policy.
- Service
- Heathland Links website and application
- Address
- 13 Parkway, Sutton-in-Ashfield, Nottinghamshire, NG17 2HL, United Kingdom
- Privacy contact
- cameron@heathlandlinks.com
In this policy, “Heathland Links”, “we”, “us” and “our” refer to the operator of the Heathland Links service. “You” means an individual who visits or uses the service.
2. Information we collect
Information you provide
- Account and profile information: such as your name, email address, username, profile photograph and account preferences.
- Golf activity: courses you mark as played or save, collection progress, ratings, reviews, achievements and related activity.
- Social content: posts, photographs, comments, reactions, friend connections, community memberships and other content you choose to share.
- Communications: enquiries, support requests, feedback and other correspondence you send to us.
- Club information: information submitted by authorised golf-club representatives when enquiring about or managing a club profile.
Information collected automatically
When you use the service, we may receive technical and usage information such as your IP address, device and browser type, operating system, app version, language, approximate region, pages or screens viewed, interaction times, crash information and security logs.
Device permissions
With your permission, the application may access:
- Location information to show nearby courses, position the map and support location-based discovery.
- Camera and photo library so you can upload a profile image or share photographs and social content.
- Notifications so we can send service, account, friend, community or activity updates you choose to receive.
You can manage these permissions through your device settings. Some features may not work without the relevant permission.
3. How and why we use your information
| Purpose | Typical lawful basis |
|---|---|
| Provide your account, course discovery, mapping, golf passport, collections and social features | Performance of our contract with you |
| Operate the news feed, friend connections, communities, ratings and reviews | Performance of our contract and our legitimate interests in providing an interactive golf community |
| Secure the service, prevent fraud, enforce rules and moderate harmful or unlawful content | Our legitimate interests and, where relevant, legal obligations |
| Measure performance, diagnose faults and improve the service | Our legitimate interests; consent where required for non-essential analytics |
| Use precise location, photographs, camera access, optional notifications or non-essential cookies | Your consent or device permission, where required |
| Send marketing communications | Your consent where required, or our legitimate interests where permitted by law |
| Respond to enquiries and manage club-profile requests | Steps requested before entering a contract, performance of a contract and our legitimate interests |
| Meet legal, regulatory, tax and law-enforcement requirements | Compliance with a legal obligation |
Where we rely on legitimate interests, we consider the impact on your rights and use your information only where those interests are not overridden by your interests or fundamental rights. You may object to processing based on legitimate interests as explained below.
7. International transfers
Some service providers may process information outside the United Kingdom. Where required, we use a lawful transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another safeguard recognised by applicable law. You may contact us for more information about safeguards relevant to your information.
8. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, security and dispute-resolution requirements. Our usual maximum periods are:
- Account and profile information: while your account is active and for up to 24 months after closure where needed to resolve disputes, prevent abuse or meet legal obligations.
- Social and golf activity: while your account or the relevant content remains active. Content may be deleted or anonymised following account deletion, subject to legal and safety exceptions.
- Support correspondence: up to 24 months after the request is closed.
- Usage, analytics and security logs: generally up to 24 months, unless a longer period is necessary to investigate security, fraud or legal issues.
- Marketing preferences and consent records: while relevant and for as long as necessary to demonstrate and respect your choices.
Residual copies may remain in protected backups until they are overwritten under our backup schedule. Anonymous information that can no longer identify you may be kept for statistical purposes.
9. Security
We use reasonable technical and organisational safeguards designed to protect personal information against loss, misuse and unauthorised access, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure, so you should protect your account credentials and contact us promptly if you suspect unauthorised access.
10. Your privacy rights and account deletion
Depending on the circumstances, UK data-protection law may give you the right to:
- request access to your personal information;
- correct inaccurate or incomplete information;
- request deletion of your information;
- restrict certain processing;
- object to processing based on legitimate interests or direct marketing;
- receive certain information in a portable format; and
- withdraw consent at any time, without affecting earlier lawful processing.
Your right to object: you may object at any time to direct marketing. You may also object to processing based on our legitimate interests, and we will stop unless we have compelling legitimate grounds or the processing is needed for legal claims.
You may update available profile information and privacy choices through your account settings. To request account and personal-data deletion, email cameron@heathlandlinks.com from the address associated with your account. We may ask you to verify your identity. Some information may be retained where required by law, for security and fraud prevention, or to establish, exercise or defend legal claims.
We normally respond to valid rights requests within one month, subject to lawful extensions. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.
11. Children
Heathland Links is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided information to us, please contact us so we can investigate and remove it where appropriate.
12. Changes to this policy
We may update this policy when our service, practices or legal obligations change. We will post the updated version here and revise the date above. Where a change materially affects your rights or how we use your information, we will provide additional notice where required.
13. Contact us
Questions, privacy requests and complaints can be sent to:
Heathland Links
13 Parkway
Sutton-in-Ashfield
Nottinghamshire, NG17 2HL
United Kingdom
This policy is intended to describe the current Heathland Links service in clear language. It does not form part of any employment or other contract and does not limit rights provided by applicable law.
4. News feed, friends and communities
Heathland Links includes interactive social areas. Depending on your choices and the feature you use, your profile name, image, played-course activity, collection progress, posts, photographs, ratings, reviews, comments, reactions, friend connections and community activity may be visible to friends, community members, other users or the public.
Information posted publicly or shared with other users can be copied, reshared or captured by others. Do not post personal information that you do not want the relevant audience to see.
We may use reports, automated signals and human review to detect spam, abuse, fraud, harmful content and breaches of our rules. We may restrict or remove content or accounts where reasonably necessary to protect users, the service or the public.