Privacy Policy

JEL Golf Travel (“JEL Golf,” “we,” “us”) is a golf travel agency. This page explains what personal information we collect when you use jelgolftravel.com and the choices you have. If you have questions, email [email protected].

• Inquiry & booking details — name, email, phone (optional), destination interest, travel dates, group size, and any free-text notes you send via our forms or in reply to our emails.
• Partner program data — if you apply to the partner program, the details you provide (channels, audience size, links).
• Account data — if we create a partner or admin account for you, we store your email, a password hash (never the password itself), and session metadata.
• Technical data — when you submit a form we record your IP address and user-agent string for fraud prevention and rate-limiting. When you visit a page, standard server logs may briefly capture similar information.
• Cookies — see Cookies below.

We don’t process payment information directly — trip payments are handled through our booking partners and we never see your card details.

• To plan and quote the trip you asked us about.
• To contact you about your inquiry, booking, or partner application.
• To send marketing email about new destinations and trip ideas — only if you ticked the opt-in box on the form. You can unsubscribe at any time using the link in any marketing email or by emailing [email protected].
• To detect, investigate, and prevent fraud, abuse, and security incidents (e.g. rate-limiting form submissions).
• To attribute bookings to partners so partner commissions are paid correctly.

When GDPR / UK GDPR applies we rely on the following legal bases:

• Contract — processing your inquiry and quoting a trip you asked about.
• Consent — sending marketing email (separately tickable, freely withdrawable).
• Legitimate interests — site analytics, security, fraud prevention, paying partner commissions.
• Legal obligation — record-keeping where required.

We share information only with vendors that help us run the site:

• Resend — transactional & marketing email delivery.
• Railway — application hosting (servers and database storage in their data centres).
• Booking partners (golf resorts, lodging providers, transport) — only the details required to actually plan and book the trip you requested.

We don’t sell or rent your data. We don’t share it for cross-context behavioural advertising.

We keep inquiry and booking records for as long as needed to service the trip and meet our legal/accounting obligations (typically 7 years). Marketing-list records are kept until you unsubscribe. Account records are kept until you ask us to delete the account.

Depending on where you live, you may have the right to: access the data we hold about you, correct it, ask us to delete it, restrict or object to certain processing, or receive a portable copy. UK / EU visitors have the right to lodge a complaint with their data-protection authority (ICO in the UK).

To exercise any of these rights, email [email protected]. We respond within 30 days.

We use a minimal set of cookies:

• Essential — admin and partner session cookies (so logging in works), CSRF / cookie-consent state.
• Functional — partner referral attribution (so a partner gets credit when their audience books). Stored for up to 90 days. Set after consent.

We don’t use third-party advertising trackers. If we add analytics in the future we’ll list them here and gate them behind the cookie banner.

All traffic is served over HTTPS. Passwords are hashed with scrypt and per-user salts. Sessions are stored as hashed tokens in our database, transmitted only over `httpOnly`, `sameSite=lax`, `secure` cookies. We rate-limit login and form submission endpoints.

The site is intended for adults planning travel. We don’t knowingly collect data from anyone under 16.

We may update this policy from time to time. The “Last updated” date at the top of the page tells you when. Material changes will be flagged on the home page or by email when we have your address.

JEL Golf Travel
Email: [email protected]