Privacy Policy

This Privacy Policy explains how Nico Technologies CC t/a GolfDag (“GolfDag”, “we”, “us”) collects, uses, stores and shares personal information about visitors to golfdag.co.za and users of our golf day management platform. We process personal information in line with the South African Protection of Personal Information Act, 4 of 2013 (POPIA).

1. Who we are

GolfDag is a software platform that helps South African schools, companies, charities, clubs and other organisers run paid golf days. Bookers (golfers) use the platform to discover golf days and pay for spots. Organisers use it to publish events, take bookings, and accept sponsor payments.

Our information officer can be reached at hello@golfdag.co.za.

2. What we collect

The personal information we collect depends on how you use GolfDag:

• Account holders. Email address, name, and any organisation membership and persona (golfer / organiser) you create. We use Supabase Auth for sign-in with email and password, and we verify new accounts with a one-time email code.
• Bookers (including guest bookings). Name, email, phone number, optional team name, optional player names, and the booking reference. We use these to deliver the booking and to let the organiser contact you on the day.
• Sponsors and donors. Name, email, optional phone, optional company name, and sponsorship/donation type and amount.
• Payments. All card payments are processed by Yoco. GolfDag does not see or store your card number, CVV, or full bank details. We only store a payment reference issued by Yoco and the amount paid.
• Audit trail. We log actions taken on the platform (event created, booking payment status changed, sponsor purchase applied, organiser activated) so organisers and we can trace what happened to a booking. Audit entries identify the actor by user id.
• Diagnostic data. Basic browser and request data for security and debugging. We do not use third-party analytics or advertising trackers.

3. Why we collect it

We process your personal information for the following purposes:

• To create and manage your account on GolfDag.
• To deliver bookings, payment receipts, sponsorship records, and reminders.
• To let organisers fulfil their golf day (player allocations, tee-off times, contact details).
• To process payments via Yoco and reconcile them against your booking.
• To send transactional email confirmations (powered by Resend) from a GolfDag address.
• To meet our legal, accounting, and tax obligations.
• To improve and secure the platform.

4. Third parties we share data with

We use trusted processors to run GolfDag. Each one is bound by their own terms and processes only the data needed to provide the service:

• Supabase — hosts our database, authentication, and serverless functions.
• Yoco — processes card and instant EFT payments. Yoco is a PCI-DSS compliant payment provider.
• Resend — delivers transactional email (booking confirmations, organiser notifications, sign-in links).
• Microsoft Azure (Static Web Apps) — serves the GolfDag web app from data centres in Western Europe.

We do not sell your personal information to anyone, and we do not share it for advertising.

5. Your POPIA rights

You have the right to:

• Access the personal information we hold about you.
• Correct or update it if it is wrong or incomplete.
• Ask us to delete it, subject to laws that may require us to retain it.
• Withdraw any consent you have given us to process your information.
• Object to our processing in defined circumstances.
• Lodge a complaint with the South African Information Regulator at inforegulator.org.za.

To exercise any of these rights, email hello@golfdag.co.za. We will respond within a reasonable time, generally within 30 days.

6. Data retention

Booking, payment, and audit data is retained for at least five (5) years after the relevant golf day in line with our reasonable accounting and dispute-resolution obligations. Marketing or pre-account data is retained only for as long as needed and then deleted.

7. Cookies and local storage

GolfDag uses browser localStorage for one purpose only: to remember your sign-in session (via Supabase Auth) and your selected dashboard mode (golfer vs organiser). We do not set any tracking or advertising cookies.

8. Children

GolfDag is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us so we can delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above will change accordingly. Material changes will also be communicated by email to active account holders.

10. Contact

For any privacy enquiry, request, or complaint: hello@golfdag.co.za.