Privacy Policy

Last updated: April 2026

1. Introduction

Grand Tour Golf ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website grandtourgolf.co.uk or use our golf holiday booking services.

Please read this Privacy Policy carefully. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Submit an enquiry form or booking request
  • Request a quote for golf holiday packages
  • Subscribe to our newsletter
  • Contact us via phone, email, or WhatsApp
  • Create an account or profile

This information may include:

  • Name and contact details (email address, phone number, postal address)
  • Date of birth (required for booking purposes)
  • Payment information (processed securely via third-party payment providers)
  • Travel preferences and golf handicap information
  • Special requirements or dietary restrictions
  • Emergency contact details

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on site
  • Referring website or source
  • Location data (country/region level only)

3. How We Use Your Information

We use the information we collect to:

  • Process and manage your golf holiday bookings
  • Provide you with quotes and pricing information
  • Communicate with you about your enquiries and bookings
  • Send booking confirmations and travel documentation
  • Notify you about changes to our services
  • Send marketing communications (with your consent)
  • Improve our website and services
  • Comply with legal obligations
  • Process payments and prevent fraud

4. Legal Basis for Processing (GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on the following legal grounds:

  • Contractual necessity: Processing necessary to perform our contract with you for booking services
  • Consent: Where you have given explicit consent for marketing communications
  • Legitimate interests: For fraud prevention, security, and service improvement (where interests are not overridden by your rights)
  • Legal obligation: To comply with applicable laws and regulations

5. Sharing Your Information

We share your personal information with:

  • Golf resorts and hotels: To fulfil your booking requests (names, contact details, preferences)
  • Golf courses: To arrange tee times and equipment hire
  • Transfer and transport providers: To arrange airport transfers and transport
  • Payment processors: To process secure payments (Stripe, PayPal)
  • Email service providers: To send confirmations and marketing (with consent)

Important: We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal information for as long as necessary to:

  • Fulfil your bookings and provide ongoing customer service
  • Comply with legal obligations (typically 7 years for financial records)
  • Send marketing communications (until you withdraw consent)

After this period, your data is securely deleted or anonymised.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • SSL/TLS encryption for data transmission
  • Secure servers with firewall protection
  • Regular security assessments and updates
  • Access controls and staff training
  • PCI DSS compliance for payment processing

8. Your Rights (UK GDPR)

Under UK data protection law, you have the following rights:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data ("right to be forgotten")
  • Right to restrict processing: Request limitation of data processing
  • Right to data portability: Receive your data in a portable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw marketing consent at any time

To exercise any of these rights, please contact us at:

Email: [email protected]

Phone: +44 (0) 800 XXX XXXX

Post: Grand Tour Golf, [Company Address]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

9. Cookies and Tracking

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device.

Essential Cookies

Required for the website to function properly (shopping cart, booking forms, session management). Cannot be disabled.

Analytics Cookies

Help us understand how visitors interact with our website through Google Analytics. Data is anonymised and used to improve our services.

Marketing Cookies

Used to deliver relevant advertisements on social media and other platforms. You can manage your preferences through our cookie consent banner.

10. Third-Party Links

Our website may contain links to third-party websites, including golf resorts, booking platforms, and social media. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated version will be indicated by a revised "Last updated" date at the top of this page. We encourage you to review this policy regularly.

12. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

Grand Tour Golf

Email: [email protected]
Phone: +44 (0) 800 XXX XXXX
WhatsApp: +44 (0) 7XXX XXX XXX

Data Protection Officer

For GDPR-related enquiries and data subject requests