Legal
Privacy Policy
What we collect when you send an enquiry, why we are allowed to use it, who we share it with, and how long we keep it.
Privacy Policy
Last updated: 25 October 2026
1. Who we are
MERLIN GOLF TRAVEL UK LTD ("we", "us", "our") is the data controller for the personal information described in this policy.
- Registered in England and Wales, company number 13066866
- Registered office: 167-169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom
- ICO registration number: ZC228671
- Email: info@merlingolftravel.com
We work with our associated company in Türkiye, MERLİN GOLF TURİZM SEYAHAT TAŞIMACILIK TİC. LTD. ŞTİ., trading as Greenmark Golf Travel Agency, which delivers the ground arrangements for your holiday.
2. What we collect
When you send us an enquiry: your name, email address, telephone number, travel dates, destination and hotel preferences, the number of golfers and non-golfers in your party, and anything you write in the message field.
When you use our website: your IP address, browser and device type, the pages you visit and how you reached us. This comes from cookies and similar technologies; see our Cookie Policy.
If you go on to book: the additional details needed to make the arrangements, which may include passport names, dates of birth, dietary requirements, golf handicaps and payment details. We do not store full card numbers ourselves.
We do not knowingly collect information from anyone under 18.
3. Why we use it, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Answer your enquiry and prepare a quotation | Steps taken at your request before entering into a contract: Art. 6(1)(b) |
| Make and manage your booking | Performance of a contract: Art. 6(1)(b) |
| Keep accounting and tax records | Legal obligation: Art. 6(1)(c) |
| Prevent fraud and misuse of our website | Legitimate interests: Art. 6(1)(f) |
| Send you marketing emails | Your consent: Art. 6(1)(a), which you can withdraw at any time |
| Analytics and website improvement | Your consent, given through our cookie banner |
Sending us an enquiry does not sign you up to marketing. Marketing emails are only sent if you tick the separate box, and every one of them carries an unsubscribe link.
4. Who we share it with
We share your information with the suppliers needed to deliver your holiday (hotels, golf clubs and transfer operators, most of which are in Türkiye) and with the service providers that run our systems:
| Provider | What it does | Where data is processed |
|---|---|---|
| Microsoft | Our customer records (Dataverse) and email (Microsoft 365) | Europe & UK region |
| Microsoft Azure | The service that passes website enquiries into our booking system | United Kingdom (Azure UK South, London) |
| Cloudflare | Turnstile, the check that stops machines filling in our enquiry form | Global network |
| SiteGround | Website hosting | United Kingdom (London data centre) |
| The typefaces the site is set in (Google Fonts). We do not currently run Google Analytics; if we add it, it will only run with your consent | EU/US |
We do not sell your personal information, and we do not share it with third parties for their own marketing.
5. Sending information outside the UK
Delivering your holiday means sending your details to suppliers in Türkiye. Türkiye is not covered by a UK adequacy decision, so these transfers are made under the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or because the transfer is necessary to perform your contract with us.
Some of our service providers also process data outside the UK under equivalent safeguards.
6. How long we keep it
| Record | Retention period |
|---|---|
| Enquiries that do not become bookings | 24 months |
| Booking and financial records | 6 years after the end of the tax year they relate to, which is the period UK accounting records must be kept |
| Marketing consent records | Until you withdraw consent, plus 2 years as proof that it was given |
| Website analytics | 14 months: none is collected today; this is the limit we will set if we add analytics |
7. Your rights
Under UK data protection law you can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or send it to another provider. You can object to processing we carry out under legitimate interests, and you can withdraw consent for marketing or analytics at any time.
If you are not satisfied with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Cookies
See our Cookie Policy for what we set, why, and how to change your choices.
9. Changes
If we change this policy we will update the date at the top. Material changes will be brought to your attention.