GreenLink · Legal
Privacy policy
What we collect through this website, why we collect it, where it goes, and what you can require of us. Written to be read rather than agreed to unread.
Who is responsible for your information
GreenLink is the trading name of a sole proprietorship owned and operated by Andrew Els. It is not a registered company, so it carries no registration number. Where this policy says we or GreenLink, it means that business.
Andrew Els is the responsible party for the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), and is also the appointed Information Officer. Every request under this policy reaches the same person, and there is no department to be passed between.
What we collect, and when
This website collects personal information in one place only: the form headed Book a demonstration. Nothing is collected merely by reading the page. There is no advertising network on this site, no tracking pixel and no third-party analytics script.
When you request a demonstration, we collect:
- the club's name;
- your name and your role at the club;
- your email address and contact number;
- optionally, the size of the course and a short description of the systems the club runs today.
Every field is one you type. We do not buy contact lists, and we do not enrich what you give us from other sources.
Why we use it, and on what basis
A demonstration request is used to arrange and prepare the demonstration, and to reply to you about it. That is the whole purpose. We do not use these details for unrelated marketing, and we do not add you to a general mailing list.
The lawful basis is your own request: under section 11(1)(b) of POPIA the processing is necessary to take steps at your request before entering into a contract. Where we later send you something that is not a reply to your enquiry, we do so only with your consent and every such message carries a working unsubscribe.
Who else sees it
Your enquiry is handled by Andrew Els. Beyond that, it is visible only to the service providers that run this site and its systems, each of which processes it on our instruction and for no purpose of their own:
- Website hosting
- Vercel
- Application hosting
- Railway
- Database
- Supabase (PostgreSQL)
- Email delivery
- Resend
We do not sell personal information, and we do not share it with anyone for their own marketing.
Where it is stored
Demonstration requests are stored in a PostgreSQL database hosted in the European Union (Frankfurt, Germany). That is a transfer of personal information outside South Africa, and section 72 of POPIA requires us to say so plainly.
The transfer is lawful because the receiving jurisdiction is subject to the General Data Protection Regulation, which upholds principles for the lawful processing of personal information that are substantially similar to those in POPIA, and because the transfer is necessary for the performance of the steps you asked us to take.
How long we keep it
We keep a demonstration request while the enquiry is live and for up to twelve months after our last contact with you, so that a conversation picked up again the following season does not start from nothing. After that it is deleted.
You can ask us to delete it sooner, at any time, and we will do so unless a specific law requires us to keep it. Ask by email and it is done.
How it is protected
The site is served over HTTPS only, with HTTP Strict Transport Security and a content security policy that blocks scripts we did not put there ourselves. Access to the database is restricted to the application and to Andrew Els, over authenticated, encrypted connections. Passwords, where an account exists, are stored only as strong one-way hashes and are never recoverable.
If personal information under our control is accessed by someone who should not have it, we will notify the Information Regulator and the people affected, as section 22 of POPIA requires.
Your rights
Under POPIA you may, at any time and free of charge:
- ask what personal information we hold about you, and be given a copy;
- ask us to correct anything that is wrong, or complete anything that is missing;
- ask us to delete information we no longer have grounds to keep;
- object to processing based on our own legitimate interests;
- withdraw a consent you previously gave, without affecting what came before.
Write to the address in the contact block below. We will answer within a reasonable time, and in any event within thirty days. If our answer does not satisfy you, you may take the matter to the Information Regulator.
Two different roles: this website, and the platform
This policy covers greenlinkgolf.co.za — the public website and the enquiry you send through it. For that information, GreenLink is the responsible party.
The GreenLink platform itself is a different matter. When a golf club uses GreenLink to run its tee sheet, its members' accounts and its finances, the club decides what is collected and why. The club is the responsible party; GreenLink is its operator, and processes members' information only on the club's documented instruction and under a written agreement that includes the security obligations section 21 of POPIA requires. A member of a club should raise a question about their own information with the club first.
Changes to this policy
When this policy changes we publish the new version here and move the effective date at the top of the page. There is no archive of previous versions; if you need to know what the wording was on a particular date, ask and we will tell you.