Privacy Policy

Mulligans Privacy Policy 1. Introduction This Privacy Policy explains how Mulligans Golf Ltd (“Mulligans”, “we”, “us”, “our”) collects, uses, and protects your personal information when you use our website, mobile app, and related marketplace services (“Services”). We are committed to protecting your privacy and complying with the UK GDPR, EU GDPR, and all applicable data protection regulations. 2. Who We Are Data Controller: Mulligans Golf Ltd Contact Email: info@mulligans.uk.com Registered Address: Flat 1, Sunrise House, 79J Riddlesdown Road, Purley, CR8 1DH For payments, we work with authorised payment processors (e.g. Stripe) who may act as independent controllers for your payment data. 3. Information We Collect We collect the following types of information: Account Information Name, username, email address, password, phone number, delivery address. Transaction Information Order history, purchase/sale details, shipping information, payment method tokens (we do not store full card numbers). Identity Verification Data ID documents, identity checks, or verification results (for seller verification or fraud prevention). Device & Usage Data IP address, browser type, device identifiers, app activity, log files, cookies and tracking data. Communications Messages exchanged with other users, customer support communications, and reports. Marketing Preferences Your choices regarding email or push notifications. We do not intentionally collect data from children under 16. 4. How We Use Your Information We use your personal data to: Provide, operate, and maintain the Mulligans platform Facilitate transactions between Buyers and Sellers Process payments and deliver purchased items Verify identity and prevent fraud Comply with legal, tax, and regulatory obligations Provide customer support Send transactional notifications (e.g. order updates) Improve and personalise our Services Show relevant listings or content based on your activity Send marketing communications only with your consent We never sell your personal data. 5. Legal Bases for Processing We process your data under these lawful grounds: Contract: To provide the Services you sign up for Legal obligation: Tax, accounting, anti-fraud, or regulatory requirements Legitimate interests: Platform security, preventing abuse, improving functionality Consent: Marketing emails, push notifications, non-essential cookies You can withdraw consent at any time. 6. Sharing Your Data We may share your data with: Payment processors: Stripe, PayPal Delivery and logistics providers Fraud prevention & ID verification services IT, cloud hosting, and analytics providers Professional advisers (legal/accountancy) Law enforcement, where required by law All partners are contractually required to comply with GDPR and process data securely. We never share your data for third-party advertising. 7. Data Retention We keep your data only as long as necessary: Account & transaction data: retained while your account is active Tax & accounting records: typically 6 years (legal requirement) Identity verification data: retained only as long as required for compliance Messages: retained to maintain platform integrity Deleted account data: securely erased unless required for fraud, dispute, or legal obligations You may request deletion at any time. 8. Your Rights (UK/EU Users) You have the following rights: Access your personal data Rectify inaccurate information Erase your data (“right to be forgotten”) Restrict or object to processing Data portability (receive your data in a structured format) Withdraw consent at any time Lodge a complaint with a supervisory authority To exercise your rights, email info@mulligans.uk.com. 9. Cookies & Tracking We use cookies and similar tracking technologies to: Enable essential platform functionality Analyse usage and improve performance Provide personalised content You can manage your preferences via our cookie banner or your browser settings. Non-essential cookies are only used with your consent. 10. Data Security We implement industry-standard security measures including: SSL/TLS encryption Secure servers and databases Access controls & authentication Regular monitoring for vulnerabilities Although we take strong measures, no online system is entirely risk-free. 11. International Transfers If personal data is transferred outside the UK/EU, we ensure appropriate safeguards such as: Standard Contractual Clauses (SCCs) Transfers to countries deemed adequate by the ICO or EU Commission Binding corporate rules (where applicable) 12. Changes to This Policy We may update this Privacy Policy periodically. If significant changes are made, we will notify you via email, in-app alert, or prominent notice on our site. 13. Contact Us If you have any questions about this Privacy Policy or how we handle your data, please contact us at: Mulligans Golf Ltd Flat 1, Sunrise House, 79J Riddlesdown Road, Purley, England, CR8 1DH Email: info@mulligans.uk.com Effective Date: 21/11/2025