Privacy notice

Finvarix Ltd (“Finvarix”, “we”, “us”) is a company registered in England and Wales, company number 16660368, with its registered office at St Andrews Road, Cambridge, CB4 1DL. We are the controller of the personal data described in this notice, except where section 6 says we act for a club.

ICO registration number: applied for; to be added here.

Contact for anything in this notice: conor@finvarix.co.uk.

What we collect: your name, email address, club name, the reason you got in touch and anything you write to us. If you book a demo, the booking details you give our calendar tool.

Why and on what basis: to reply to you and to hold the demo you asked for. Our lawful basis is our legitimate interest in responding to enquiries about our service, or taking steps at your request before a contract.

We contact secretaries, managers, treasurers and directors of members' golf clubs to tell them about Finvarix. Where we got your details: from public sources, namely the Companies House register and your club's own website or published materials. We collect your name, role, club and business contact details. We do not collect home addresses or personal email addresses.

Why and on what basis: to send a small number of relevant emails about a service built for clubs like yours. Our lawful basis is legitimate interests. We have balanced that interest against your rights, and we keep it narrow: business contact details only, a short sequence of emails, and an easy way to stop.

To stop hearing from us: reply “unsubscribe” or email conor@finvarix.co.uk. We will stop straight away and keep only a note of your address so we don't contact you again.

We do not use tracking pixels to see whether you opened our emails.

What we collect: your name, email address, role at the club, login details and records of what you do in the platform (for example decisions you record).

Why and on what basis: to provide the service under our contract with your club, keep it secure, and contact you about your account. Our lawful basis is legitimate interests in providing the service your club has contracted for, and, where you contract with us directly, performance of that contract.

Clubs upload accounts and operational figures (for example member numbers and rounds played). This is mostly information about the club, not about individuals. Where it does contain personal data, such as a named role or a salary line, we use it only to provide the service to that club.

Your figures are used, in anonymised and combined form only, to build the peer benchmarks all clubs see. Your club is never named and its data is never shown to another club.

For personal data inside a club's uploaded data, the club is the controller and we process it on the club's instructions as its processor, under the data processing terms in our terms of service.

We do not sell personal data. We use these service providers, under contract, to run Finvarix:

• Supabase: database, file storage and sign-in.
• Cloudflare and Lovable: website hosting and delivery.
• Anthropic: the AI model that writes the Intelligence Centre analysis from your club's figures. Under our commercial terms, Anthropic does not use the data to train its models.
• Google Workspace: our email and calendar, including demo bookings.
• Resend: sending service emails, such as sign-in codes and replies.
• Stripe: taking payments. We do not see or store card details.

We may also share data if the law requires it, or with professional advisers under a duty of confidentiality.

Some providers process data outside the UK, including in the United States. Where they do, we rely on a UK adequacy decision (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or on the UK International Data Transfer Addendum to standard contractual clauses.

• Enquiries and demo bookings: up to 2 years after our last contact, unless you become a client.
• Club officers we contacted: until you ask us to stop, or 2 years after our last email, whichever comes first. If you opt out, we keep only your email address on a do-not-contact list.
• Client accounts and uploaded data: for as long as your club subscribes, then deleted within 90 days of the end of the subscription, except anonymised, combined benchmark figures, which cannot identify your club.
• Invoices and payment records: 6 years, as tax law requires.

We use only what is strictly necessary to make the site work, such as keeping you signed in. We do not use advertising or tracking cookies. If that changes, we will ask for your consent first.

You can ask us for a copy of your personal data, and to correct it, delete it, restrict how we use it, or object to our using it (including for marketing, which we will always stop). You can also ask to move data you gave us to another provider. Email conor@finvarix.co.uk. We reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.

We will update this notice when how we use data changes, and change the date at the top.