Privacy Policy

Last updated: April 2026

Albatross Boss ("we", "us", "our") is a golf equipment price comparison service operated from the United Kingdom. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller

The data controller responsible for your personal data is Albatross Boss. For any privacy-related enquiries, contact us at [email protected].

What we collect

• Account data: Email address and hashed password when you create an account
• Alert preferences: Products you're watching and your target prices
• Authentication data: Session tokens managed securely by our authentication provider (Supabase Auth)
• Usage data: Pages visited and search queries (no personal identifiers are stored)

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, health data, or biometric data.

Legal basis for processing

We process your personal data on the following legal bases:

• Contractual necessity: To provide the price alert service you signed up for
• Legitimate interest: To improve our service, maintain security, and prevent abuse
• Consent: For any optional communications such as weekly deal digests (you can withdraw consent at any time)

How we use your data

• To send price alert notifications when products hit your target price
• To authenticate your account and maintain your session
• To improve the service based on aggregate usage patterns

We do not sell your personal information to third parties. We do not use your data for advertising or profiling.

Cookies

We use strictly necessary cookies for authentication (session tokens). These are essential for the service to function and do not require consent under UK GDPR. We do not use tracking cookies, advertising cookies, or third-party analytics that collect personal data.

Affiliate links

When you click a retailer link, you may be redirected through an affiliate network (such as Awin). The affiliate network may set its own cookies to track the referral. We earn a commission if you make a purchase - this does not affect the price you pay. Please refer to the affiliate network's own privacy policy for details on their data processing.

Data sharing and transfers

Your data is processed by the following third-party services:

• Supabase: Authentication and database hosting (data may be processed in the EU/US under Standard Contractual Clauses)
• Resend: Email delivery for price alerts (US-based, under Standard Contractual Clauses)

We do not share your personal data with any other third parties except where required by law.

Data retention

Your account and alert data are kept for as long as your account is active. If you delete your account, your personal data will be removed within 30 days. Price and product data (which does not contain personal information) is retained indefinitely to maintain price history charts.

Your rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request that we limit processing of your data
• Data portability: Request your data in a machine-readable format
• Object: Object to processing based on legitimate interest
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, email [email protected]. We will respond within 30 days.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), hashed passwords, row-level security on database tables, and regular security reviews.

Changes to this policy

We may update this privacy policy from time to time. Significant changes will be communicated via email to registered users. The "last updated" date at the top of this page reflects the most recent revision.

Contact

For privacy-related questions, email [email protected]