Privacy Policy

The Flying Caddie Ltd
Last updated: 12 February 2026

1. Who We Are

We are The Flying Caddie Ltd, a company registered in England and Wales.

We operate the website for The Flying Caddie and provide golf course strategy films, aerial media production, and related services.

For the purposes of UK data protection law, we are the data controller.

If you have any questions about this Privacy Policy or your personal data, you can contact us at:

Email: karl@theflyingcaddie.com | bastian@theflyingcaddie.com
Registered Office: 3 Weeton Way, Anlaby, Hull, HU10 6QH

2. Our Legal Framework

We process personal data in accordance with:

• The UK General Data Protection Regulation (UK GDPR)

• The Data Protection Act 2018

• The Privacy and Electronic Communications Regulations (PECR)

We are committed to ensuring our data handling practices meet current UK regulatory standards.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

3. What Personal Data We Collect

3.1 Website Usage Data (Automatically Collected)

When you visit our website, we may collect:

• IP address

• Browser type and version

• Device type and operating system

• Referring URL

• Pages visited and time spent

• Navigation paths and engagement metrics

This data is collected via cookies and analytics technologies.

3.2 Contact Form & Direct Enquiries

If you contact us via our website or email, we may collect:

• Name

• Email address

• Telephone number (if provided)

• Organisation or golf club name

• Message content

We collect only the data necessary to respond to your enquiry.

3.3 Aerial Filming & Media Production

As part of our services, we may conduct aerial filming at golf courses and venues.

Our filming:

• Is conducted primarily via drone at elevated positions

• Focuses on course architecture, landscape, and strategy

• Does not intentionally target or profile individuals

Where individuals may be incidentally captured:

• Footage is wide-angle and non-intrusive

• Individuals are not identified by name

• We do not use such footage to analyse behaviour

We take reasonable steps to ensure:

• Venue operators are informed in advance

• Clear signage is displayed on-site indicating filming is taking place

• Venue management approvals are secured

Where footage may identify individuals in a material way, we will take appropriate steps to assess whether consent or additional safeguards are required.

4. How We Use Your Data

Under UK GDPR, we must have a lawful basis for processing.

We process data for the following purposes:

4.1 Operating and Securing Our Website

• Maintaining website functionality

• Protecting against misuse or security threats

Lawful basis: Legitimate interest

4.2 Analytics and Performance Improvement

We use analytics tools (such as Google Analytics) to:

• Understand website traffic

• Analyse user engagement

• Improve website performance and usability

We only set non-essential analytics cookies after obtaining user consent.

Lawful basis: Consent

4.3 Responding to Enquiries

We process contact form submissions to:

• Respond to business enquiries

• Provide proposals

• Engage in pre-contract discussions

Lawful basis: Legitimate interest (pre-contract communication)
If a contract is formed: Contractual necessity

We do not send marketing emails or newsletters.

5. Cookies

Our website uses cookies in accordance with UK GDPR and PECR.

Cookies are small text files stored on your device.

We use:

Strictly Necessary Cookies

Essential for website functionality.

These do not require consent.

Analytics Cookies (e.g., Google Analytics)

Used to collect anonymised traffic and usage data.

These are only set after you provide consent via our cookie banner.

You may:

• Accept or reject non-essential cookies

• Withdraw consent at any time

• Adjust browser settings to block cookies

6. Data Sharing & Processors

We do not sell your personal data.

We may share limited data with trusted service providers strictly where necessary, including:

• GoDaddy – Website hosting infrastructure

• Google – Website analytics services (Google Analytics)

Where we use service providers located outside the UK, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations

• Standard contractual clauses

All providers are contractually required to implement appropriate technical and organisational security measures.

7. International Transfers

Where personal data is processed outside the UK (for example, via Google or hosting infrastructure), we ensure lawful transfer mechanisms are in place in accordance with UK GDPR requirements.

8. Data Retention

We retain personal data only for as long as necessary.

Typical retention periods:

• Website analytics data: up to 26 months (or shorter where configured)

• Contact form enquiries (no contract formed): up to 24 months

• Contractual and financial records: up to 7 years to comply with legal and tax obligations

Where legal claims arise, data may be retained until resolution.

After retention periods expire, data is securely deleted or anonymised.

9. Data Security

We implement appropriate technical and organisational security measures to protect personal data against:

• Unauthorised access

• Accidental loss

• Misuse

• Disclosure

Access to personal data is restricted to authorised personnel only.

10. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request erasure (in certain circumstances)

• Restrict processing

• Object to processing

• Request data portability

To exercise your rights, contact us using the details in Section 1.