Privacy Policy

1. Who We Are

This website is operated by Andy Griffiths, trading as Mr Mallorca Golf, based in Mallorca, Spain.

For all data protection enquiries, contact: info@mrmallorcagolf.com

2. What Data We Collect

We collect personal data only when you voluntarily provide it or when you visit our website. This includes:

• Contact form submissions: your name, email address, phone number, and any message you send us
• Email and WhatsApp enquiries: your name and contact details when you reach out directly
• Course Selector and email signup forms: your email address, and any optional information you choose to provide when requesting planning notes or shortlist follow-ups
• Analytics data: anonymous usage data collected by Google Analytics (see Section 5)

We do not collect payment card details. All payments are handled offline via bank transfer.

3. How We Use Your Data

We use the data you provide to:

• Respond to your enquiry and arrange your golf experience
• Communicate with you about your booking or planned visit
• Send Course Selector follow-up emails and Mallorca golf planning notes where you have chosen to opt in
• Improve our services based on general usage patterns (analytics only)

We will not use your data for unsolicited marketing without your explicit consent. If you sign up for Course Selector results or planning emails, you can unsubscribe at any time using the link in the email or by contacting us directly.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR and Spanish data protection law (LOPDGDD):

• Contractual necessity: to fulfil or prepare a booking in response to your enquiry
• Legitimate interests: to respond to your messages and manage our business operations
• Consent: where you have explicitly agreed, for example by submitting a contact form or opting in to future communications

5. Google Analytics

This website uses Google Analytics to understand how visitors use our site. Google Analytics collects usage data including pages visited, time spent, and approximate geographic location (country/region level), tied to a randomly generated identifier stored in your browser. This identifier is pseudonymous — it does not include your name or contact details — but it is not fully anonymous data.

Google Analytics data is processed by Google LLC, certified under the EU-US Data Privacy Framework, in accordance with their privacy policy. You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on.

6. Cookies

This website uses cookies solely for Google Analytics purposes. These are analytics cookies that help us understand how the site is used. No advertising cookies or tracking pixels are used.

Most browsers allow you to refuse or delete cookies. Doing so will not prevent you from using this website, but will disable analytics tracking.

7. Data Sharing

We do not sell or rent your personal data to third parties. We share data with the following processors, only to the extent necessary to run this website and provide our services:

• Google Analytics: pseudonymised usage data, as described in Section 5
• MailerLite: your email address and, depending on which form you use, trip details you provide (such as dates, group size, budget, or handicap) and any notes, to deliver results and — only if you opt in — our occasional planning-notes emails. MailerLite processes data within the EU.
• Resend: the content of any contact or enquiry form you submit, to deliver it to us and send you a confirmation email. Resend is based in the United States.
• Upstash: your IP address, held briefly, to prevent abuse of our forms (rate limiting). Upstash is based in the United States.
• Vercel: hosts this website and, as part of that, processes standard web request data such as your IP address and browser information. Vercel is based in the United States.
• Legal requirement: where required by law or a competent authority

Some of these processors are based outside the EU/EEA, in the United States. Where this happens, the transfer is made under the safeguards required by GDPR — the EU-US Data Privacy Framework, for processors certified under it (currently Google, Resend, and Vercel), or Standard Contractual Clauses otherwise (currently Upstash).

We may also share necessary information (your name and contact details) with golf courses or service providers in Mallorca when arranging your experience, but only to the extent required to fulfil your booking.

8. Data Retention

We keep your contact data for as long as necessary to provide our services. Where an enquiry becomes a booking, invoicing and accounting records are kept for the period required under Spanish commercial law, which generally sets a six-year retention period for business records. Analytics data is retained in accordance with Google's standard retention policies.

You may request deletion of your personal data at any time (see Section 9).

9. Your Rights

Under GDPR and Spanish data protection law, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your personal data (“right to be forgotten”)
• Restriction: request that we limit how we use your data
• Portability: receive your data in a structured, commonly used format
• Objection: object to processing based on legitimate interests

To exercise any of these rights, email us at info@mrmallorcagolf.com. We will respond within 30 days.

10. Complaints

If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the Spanish data protection authority:

Agencia Española de Protección de Datos (AEPD)
Website: www.aepd.es
Address: C/ Jorge Juan, 6, 28001 Madrid, Spain

11. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.