Privacy, clearly.

1. Who is responsible?

KAMA Golf is operated by Westec Ventures, the controller responsible for the personal information described in this notice. Our contact address is Westec Ventures, Ballard, Barna, Galway, H91 E2VE, Ireland. Send privacy questions to info@kamagolf.com or call +353 87 837 6323.

This notice covers our storefront and services. A website you choose to visit through an external link has its own privacy arrangements.

2. Information we use

• Browsing: connection and device information needed to serve and protect the site, such as IP address, browser details, requested pages and operational error information handled by our hosting infrastructure.
• Product photography: supplier product photographs can load directly from KAMA’s static image host at www.kama.cz/data/products/. The image request gives that host connection information, such as your IP address and browser details. It does not send your enquiry, account form or delivery details to KAMA merely because you view a photograph.
• Enquiries: the name, email, optional phone number, club or company, order reference, message and artwork or photographs you choose to provide.
• Accounts: email address, account identifier and authentication information. Supabase authenticates email/password accounts. If you choose Google or Apple sign-in, Google or Apple, the social-sign-in service and Supabase handle that request, including any email or profile information provided through it.
• Shopping: product and variant choices, quantities and currency saved in your browser. When payments open, purchases also need contact and delivery details, order totals, payment references and fulfilment information.
• Club ratings: a chosen rating and a pseudonymous browser identifier used to manage repeat votes, when the rating service is available. Displayed summaries combine submitted ratings.
• Preferences: chosen display and accessibility settings, plus the optional-map setting, notice version and time of your choice. The cookie policy lists storage names and lifetimes.

The customiser processes an uploaded crest locally for its preview. Sending a connected quote request uploads the original artwork for our team. When online enquiries are unavailable, forms prepare an email in your mail app; you review it, add any attachments and choose Send yourself.

Our contact and account forms identify required fields. Without the details needed for a request, we may be unable to answer it, authenticate an account or fulfil a purchase. Optional fields can be left blank.

3. Why we use information

Essential storage supports features you request, including your bag, selected currency, chosen display settings, sign-in and privacy choices. Permission for an optional map is separate from creating an account or contacting us. This storefront does not currently offer a marketing mailing-list sign-up or use automated decisions that produce legal or similarly significant effects about you.

4. Who receives information?

Authorised KAMA Golf staff use information needed to answer enquiries and manage the service. Relevant service providers include:

• Supabase: account authentication, connected store data and private submitted artwork storage.
• Website hosting and infrastructure providers: delivering the site and handling operational or security diagnostics. Lovable services are involved where its hosting, editor or social-sign-in integration is used.
• KAMA’s static product-image host: connection information when your browser requests a supplier photograph. These requests are separate from optional map loading. KAMA Golf brand artwork, club crests, customiser bases and generated lifestyle images are served from our own site.
• Google or Apple: when you choose a social sign-in provider, together with the configured authentication service. See the Google Privacy Policy and Apple Privacy Policy.
• OpenStreetMap: connection information when you permit an embedded map. Opening a separate map link is a direct visit to that provider.
• Email and communications providers: when you send us a message or we respond to your request.
• PayPal and selected delivery providers: information needed for payment and fulfilment when online orders are enabled.

Product-image elements use a no-referrer policy to avoid sending the storefront page address with the image request. An external image host still receives the network request. This setting does not control the host’s server behavior or any provider-controlled storage your browser permits.

Providers receive information relevant to their service. Some services also process information for their own authentication, security or regulatory purposes under their separate notices. We may disclose information where required by law or needed to establish, exercise or defend legal rights. The final live hosting, email and delivery arrangements are being confirmed.

Our checkout does not collect your card number. When payment is enabled, payment credentials are handled through PayPal.

5. How long is information kept?

We consider the purpose, whether a request remains open, ongoing account or customer support needs, applicable record-keeping duties and the time needed to address a dispute. Enquiries and artwork should be retained only while needed for those purposes. Account information remains relevant while an account is active, and some records may need to remain after closure where another lawful reason applies.

Browser storage has the specific lifetimes or clearing conditions listed in our cookie policy. The business retention schedule for enquiries, artwork, account records, server logs and backups is still being finalised. We do not claim that these records are automatically deleted after an unverified fixed period. Contact us to ask about a particular record or request deletion where your rights apply.

6. International processing

We serve customers in Ireland and the UK and use online service providers. Information may be processed outside your country, including outside the European Economic Area or the UK, depending on the provider, hosting region and support arrangements.

The final live processing locations and transfer arrangements are still being verified. Where a restricted international transfer occurs, an appropriate legal mechanism must apply, such as a relevant adequacy decision or contractual safeguards with any necessary additional protections. This notice does not claim that a particular agreement or safeguard has been completed before it is confirmed. You can request the current provider and transfer information from us.

7. Your choices and rights

Depending on the circumstances and applicable law, you can ask to access or correct personal information, erase it, restrict its use, obtain a portable copy where applicable, or object to processing based on legitimate interests. Rights can have conditions and exceptions; for example, a legal record-keeping duty may prevent immediate deletion of a transaction.

You can withdraw optional-map consent at any time through Cookie settings. This stops future embedded map loading; it does not undo information already transmitted or affect the lawfulness of earlier processing. Clearing browser storage also removes the saved choice, so we ask again.

For a rights request, email info@kamagolf.com with enough detail to locate the relevant information. We may ask for proportionate identity confirmation. The usual legal response period is one month; a permitted extension for a complex request must be explained within that period. See the DPC’s guidance on response periods.

8. Questions or complaints

Please contact us with any privacy concern. You also have the right to complain to a relevant supervisory authority. In Ireland, contact the Data Protection Commission. In the UK, the Information Commissioner’s Office provides a complaints service.

We update this notice when relevant features or confirmed business arrangements change. Material changes to optional processing require a fresh choice where appropriate.