Privacy Policy

GC18 is a trading name of GOLF NOOTROPIC LIMITED, a company registered in Scotland under company number SC822822.

Registered office: GOLF NOOTROPIC LIMITED Clyde Offices 2nd Floor 48 West George Street Glasgow G2 1BP Scotland

VAT Registration Number: 503762506 Email: support@gc18.co.uk

This Privacy Policy explains how we collect, use, store and share personal information when you visit gc18.co.uk, create an account, purchase our products, contact us, subscribe to marketing communications or otherwise interact with GC18.

Who is responsible for your information?

GOLF NOOTROPIC LIMITED trading as GC18 is the data controller responsible for the personal information covered by this Privacy Policy.

If you have any questions about how we use your information or wish to exercise your data protection rights, contact us at: support@gc18.co.uk

Information we collect

Depending on how you interact with us, we may collect:

• your name;
• billing and delivery address;
• email address;
• telephone number;
• account and login information;
• order history;
• products purchased or considered;
• payment and transaction information;
• correspondence with our customer support team;
• marketing preferences;
• competition, promotion or survey entries;
• reviews and feedback;
• IP address;
• browser, device and operating-system information;
• website activity and browsing behaviour;
• referral and advertising information;
• cookie identifiers and similar online identifiers; and
• fraud-prevention and security information.

Payment information is generally processed securely by our payment providers. We do not normally receive or store your complete payment-card details.

How we use your information

We may process your personal information for the following purposes.

Processing and delivering orders

We use information such as your name, contact details, delivery address and order information to:

• process orders;
• take payment;
• send order confirmations;
• arrange delivery;
• process returns and refunds; and
• provide customer support.

Our lawful basis for this processing is generally that it is necessary to perform our contract with you.

Customer accounts

Where customer accounts are available, we use your information to create and maintain your account, display order information and provide account-related functionality.

Our lawful basis is performance of our contract with you and our legitimate interests in providing an efficient customer experience.

Customer service

We use information you provide when contacting us to answer questions, investigate problems, deal with complaints and provide after-sales support.

Our lawful basis may be performance of our contract with you, compliance with our legal obligations or our legitimate interests in operating our business and supporting customers.

Legal and accounting obligations

We may retain and use information where necessary to comply with tax, accounting, regulatory, product-safety, consumer-protection or other legal requirements.

Our lawful basis is compliance with our legal obligations.

Fraud prevention and security

We may process information to protect GC18, our customers and our website against fraud, misuse, security threats and unauthorised transactions.

Our lawful basis is our legitimate interest in protecting our business, customers and systems and, where applicable, compliance with legal obligations.

Improving our website and business

We may analyse how customers use our website and products to understand performance, improve our website, measure campaigns and develop our services.

Where this requires non-essential cookies or similar tracking technologies, we will obtain consent where required.

Marketing

If you have agreed to receive marketing from us, we may use your email address and related information to send:

• product news;
• offers and discount codes;
• launch information;
• promotions;
• competitions;
• golf-related content; and
• other GC18 marketing.

Our email marketing is currently managed using Klaviyo.

You can unsubscribe at any time using the unsubscribe link contained in our marketing emails or by contacting support@gc18.co.uk.

Withdrawing marketing consent does not affect transactional communications such as order confirmations, delivery updates or important information about an existing order.

Where permitted by law, we may also market similar GC18 products to existing customers using the applicable existing-customer marketing rules, provided the required opportunity to opt out has been provided.

Cookies, analytics and advertising

Our website uses cookies and similar technologies.

These may include technologies provided through:

• Shopify;
• Google Analytics;
• Meta/Facebook;
• TikTok;
• Klaviyo; and
• other services used to operate, analyse and market our website.

Strictly necessary technologies may operate without consent where permitted by law.

Analytics, advertising and other non-essential tracking technologies are only used where the necessary consent has been obtained.

Further information is contained in our Cookie Policy.

Who we share information with

We may share personal information where necessary with service providers including:

• Shopify, which powers our online store;
• Shopify Payments and associated payment-processing providers;
• Stripe;
• PayPal;
• Apple Pay;
• Google Pay;
• Klarna;
• Royal Mail and other delivery and logistics providers;
• Klaviyo;
• Meta;
• Google;
• TikTok;
• website analytics providers;
• review and customer-feedback services;
• IT, hosting, security and infrastructure providers;
• accountants, lawyers, insurers and professional advisers;
• fraud-prevention and payment-security providers; and
• regulators, law enforcement, courts and public authorities where legally required.

We only share personal information where reasonably necessary for the relevant purpose.

Some payment methods are provided directly by third-party providers and their own privacy terms may also apply.

International transfers

Some of our service providers operate internationally or may process information outside the United Kingdom.

Where personal information is transferred internationally, we take steps intended to ensure an appropriate level of protection in accordance with applicable UK data-protection law.

Depending on the destination and provider, this may include reliance on UK adequacy regulations or appropriate contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses.

How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, tax, regulatory and dispute-resolution requirements.

For example:

• order and transaction records may be retained for the period required under applicable tax and accounting law;
• customer account information may be retained while an account remains active and for an appropriate period afterwards;
• customer-service correspondence may be retained where reasonably necessary to deal with enquiries, disputes or legal issues;
• marketing information may be retained until you unsubscribe or withdraw consent; and
• we may retain limited suppression information after an unsubscribe so that we can continue to respect your marketing preference.

Cookie and tracking retention periods vary depending on the technology used.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of your information;
• request restriction of processing;
• object to certain processing;
• request transfer of certain information;
• withdraw consent where processing is based on consent; and
• object to direct marketing at any time.

To exercise your rights, contact: support@gc18.co.uk

We may need to confirm your identity before completing certain requests.

You also have the right to complain to the Information Commissioner's Office (ICO) if you are concerned about how your personal information has been handled.

Security

We use reasonable technical and organisational measures designed to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

No internet transmission or electronic storage system can, however, be guaranteed to be completely secure.

Children

GC18 products are not recommended for children.

Our website and services are not designed for the deliberate collection of personal information from children.

Changes to this policy

We may update this Privacy Policy to reflect changes to our business, website, technology or legal obligations.

The latest version will be published on our website together with the date it was last updated.

Contact us

For privacy enquiries, complaints or requests relating to personal information: support@gc18.co.uk

GOLF NOOTROPIC LIMITED trading as GC18 Company Number: SC822822 Registered in Scotland