Privacy Policy

Last updated: 23 August 2026

This privacy policy explains how we process your personal data when you visit our UK online shop, place an order, contact us, register a product or submit a warranty claim, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Controller:
Golf Tech Golfartikelvertriebs GmbH
Carlbergergasse 66, 1230 Vienna, Austria
Companies register no.: FN 31852t · VAT ID: ATU15304908
E-mail: office@golftech.at

Our contact point in the United Kingdom:
Worldwide Golf Brands Ltd
Unit 10, Park 17, Whitefield, Manchester M45 8FJ, United Kingdom
E-mail: uk@bigmaxgolf.com · Phone: +44 (0) 161 886 4010

You can contact either address with any question or request about your personal data.

2. What data we process, and why

2.1 Visiting our website

Our shop runs on Shopify. When you visit, technical data (IP address, browser and device information, pages visited, referrer) is processed in server logs to deliver the website securely. Legal basis: our legitimate interest in a secure, functioning website (Art. 6(1)(f) UK GDPR). Shopify acts as our processor through Shopify International Limited (Ireland); data may be transferred within the Shopify group, including to Shopify Inc. in Canada (covered by UK adequacy regulations for Canada) and otherwise under appropriate safeguards. Details: Shopify Privacy Policy.

2.2 Orders and payment

When you order, we process your name, billing and delivery address, e-mail address, phone number, order details and payment information to perform the contract (Art. 6(1)(b)) and to meet statutory record-keeping duties (Art. 6(1)(c)). Payment data is handled by the payment provider you choose at checkout (the available providers, e.g. Shopify Payments, are shown there); we never receive your full payment credentials. Delivery details are shared with our shipping partners.

2.3 Customer account

If you create a customer account, we process your account data (name, e-mail, addresses, order history) until you delete the account or ask us to delete it. Legal basis: Art. 6(1)(b) UK GDPR.

2.4 Is providing your data required?

Data marked as required in the checkout or in a form is needed to conclude or perform the respective contract or to handle your request — without it we cannot provide the service concerned. All other details (for example optional golf-related information or marketing preferences) are voluntary, and refusing them has no consequences for the service.

3. Cookies and consent

Strictly necessary cookies (cart, session, storage of your cookie choices) are set on the basis of our legitimate interest and reg. 6 PECR. All analytics and marketing cookies are used only with your consent (Art. 6(1)(a) UK GDPR), managed through our cookie banner (consent management by Pandectes GDPR Compliance, an EU-based provider, which also records proof of your choices). You can change or withdraw your consent at any time via the "Cookie preferences" link in the website footer.

4. Analytics and advertising (only with your consent)

4.1 Google Analytics 4 and Google Ads

With your consent we use Google Analytics 4 (web analytics; Google as our processor) and Google Ads conversion tracking and remarketing (Google as an independent controller), provided by Google Ireland Limited, Dublin, Ireland. Data may be transferred to Google LLC in the USA under the UK Extension to the EU–U.S. Data Privacy Framework.

4.2 Meta (Facebook/Instagram) marketing

With your consent we use the Meta Pixel of Meta Platforms Ireland Limited to measure and improve our advertising on Facebook and Instagram. For the collection and transmission of event data we and Meta are joint controllers (see Meta's Controller Addendum); Meta alone is responsible for subsequent processing. US transfers rest on the UK International Data Transfer Addendum to the EU standard contractual clauses incorporated in Meta's data-transfer terms (Meta Platforms, Inc. holds an EU–U.S. Data Privacy Framework certification but, as of September 2026, no UK Extension listing).

4.3 Other tools we may activate with your consent

Depending on current campaigns we may additionally use Microsoft Clarity (session analytics), Microsoft Advertising (Bing UET), ActiveCampaign (marketing automation) or Google Tag Manager. Such tools load only after you have given the corresponding consent in the cookie banner, which always shows the current list of active services. US transfers by these providers are covered by the UK Extension to the EU–U.S. Data Privacy Framework or the UK International Data Transfer Addendum (IDTA).

5. Newsletter

If you subscribe, we process your e-mail address (and name, if provided) to send our newsletter, using ActiveCampaign, LLC (USA) as our processor (UK Extension to the DPF / IDTA). Legal basis: consent. Every newsletter contains an unsubscribe link.

6. Customer service and chat

Our website chat and helpdesk are provided by Crisp (Crisp IM SAS, Brest, France) as our processor; chat messages, your e-mail address, uploaded files and technical data are processed on servers in the European Union (covered by the UK adequacy regulations for the EEA). We process your enquiries to answer them (Art. 6(1)(b)/(f) UK GDPR).

To organise support efficiently, incoming conversations may be automatically categorised (e.g. "resolved / still open") using an AI language-model service of Anthropic Ireland, Limited, as our processor under the UK Addendum to the EU Standard Contractual Clauses. This is an organisational aid only — no decision with legal or similarly significant effect is taken, and your messages are not used to train AI models.

7. Contact and other forms

Forms on our websites (e.g. the contact form) run on our own forms platform, hosted by Railway Corp. (USA; UK Extension to the DPF) with e-mail delivery via Mailgun (Sinch group, EU region). We process the data you enter (name, e-mail, country, message, any attachments) to handle your enquiry; your IP address is not stored with your enquiry and is not transmitted to any geolocation service — Art. 6(1)(b)/(f) UK GDPR; where we ask for consent, Art. 6(1)(a). Uploaded images are stored in a private storage bucket (Amazon Web Services, EU region), accessible only via short-lived secure links.

After a service case is closed we may invite you by e-mail to rate our service (legitimate interest, Art. 6(1)(f) UK GDPR — you can object at any time). If you choose to leave a public review, this takes place on Trustpilot's platform under Trustpilot's privacy policy.

8. Product registration and warranty claims

You can register your product and submit warranty or service claims at service.bigmaxgolf.com. There we process the data you provide: name, contact details, address, product and serial number, purchase information and proof of purchase, photos, and — optionally — golf-related details such as age range or handicap. Legal basis: performance of the warranty/service contract and registration (Art. 6(1)(b)); optional marketing and survey preferences only with your consent, withdrawable at any time.

Marketing communications. If you register a product and consent to marketing communications, your registration data (contact details and any optional golf-related details) is synchronised to our marketing platform ActiveCampaign (see sections 4.3 and 5) so that we can send you product information and offers. You can withdraw this consent at any time — via the unsubscribe link in any e-mail or by contacting us — without affecting your product registration or your statutory rights.

While your claim is open we may send you a one-time follow-up e-mail about its status; when you respond, we record only your answer and the time of your response.

The service runs on Vercel Inc. (USA; UK Extension to the DPF) with data stored by Supabase, Inc. in Frankfurt, Germany (UK adequacy regulations for the EEA; UK Addendum to the EU Standard Contractual Clauses for any onward transfer), and file storage on Amazon Web Services in the EU region; e-mails are sent via Mailgun (EU region). Claim documents may additionally be processed via Box, Inc. (USA) as our processor.

Portal analytics. To understand how the service portal is used and to diagnose problems, the portal uses PostHog, a product-analytics service (PostHog, Inc.), configured to process data exclusively on servers in the European Union and activated only after you consent via the portal's cookie banner. Session recordings, where enabled, mask all text you type. Legal basis: your consent (Art. 6(1)(a) UK GDPR), withdrawable at any time in the portal's cookie settings.

9. Sharing with our distributors

BIG MAX products are serviced through a network of national distributors. In the United Kingdom and Ireland this is Worldwide Golf Brands Ltd (address above). If you submit a service request, warranty claim or product registration, we may forward your request — including your name, contact details and case details — to the distributor responsible for your country so they can handle your case locally. The current distributor list is published on our contact page. Legal basis: Art. 6(1)(b)/(f) UK GDPR. Where a case must be forwarded to a distributor outside the UK, the transfer is protected by UK adequacy regulations (e.g. EEA countries) or the UK International Data Transfer Addendum/Agreement, or takes place under Art. 49(1)(b) UK GDPR where necessary to perform your request.

10. Surveys and product research

From time to time we invite customers to voluntary product surveys. With your consent we process your answers together with your product registrations and customer profile to improve our products, and may offer a thank-you discount code. The service providers named in this policy are involved in this processing (e-mail delivery via Mailgun; where a support conversation arises, handling as described in section 6, including the AI-assisted categorisation by Anthropic under the safeguards described there). Results are analysed internally in aggregated or pseudonymised form wherever possible.

11. Social media

Our websites contain links to our social media profiles (e.g. Facebook, Instagram, YouTube, Pinterest, TikTok). These are plain links — no data is transmitted to the platforms until you click them. For our pages on those platforms, the respective platform's privacy policy applies.

12. International data transfers

Where personal data is transferred outside the UK, we rely on: UK adequacy regulations (e.g. for the EEA and Canada), the UK Extension to the EU–U.S. Data Privacy Framework for certified US providers, or the UK International Data Transfer Addendum/Agreement (IDTA) with additional safeguards where necessary. Copies of the relevant safeguards are available on request via office@golftech.at.

13. How long we keep your data

Orders and invoices are kept for the statutory periods. For the other categories below, the periods stated are the target maximum periods we apply: deletions are carried out in periodic review runs and, at any time, immediately upon your request for erasure (Art. 17 UK GDPR).

• Orders and invoices: 6 years from the end of the financial year (UK tax and company record-keeping rules), longer where warranty periods require.
• Warranty claims and product registrations: duration of the warranty plus 12 months, unless longer retention is needed to establish, exercise or defend legal claims.
• Contact enquiries: up to 24 months after the enquiry is closed.
• Survey responses: up to 24 months, then anonymised.
• Newsletter data: until you unsubscribe.
• Consent records: for as long as needed to prove consent.

14. Your rights

Under the UK GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and the right to withdraw consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21): you may object at any time to processing based on our legitimate interests on grounds relating to your particular situation, and to direct marketing at any time without giving reasons.

To exercise your rights, contact uk@bigmaxgolf.com or office@golftech.at. You also have the right to complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk / helpline 0303 123 1113.

15. Automated decision-making

We do not use automated decision-making within the meaning of Art. 22 UK GDPR that produces legal effects concerning you or similarly significantly affects you.

16. Minors

Our shop is not directed at children and we do not knowingly collect personal data from children under 13.

17. Changes

We update this privacy policy when our services or the legal situation change. The current version is always available on this page.