Who we are
Club Path is operated by Lloyd Pollington ("we", "us"), the responsible party under the Protection of Personal Information Act, 2013 (POPIA). Our Information Officer is Lloyd Pollington. For any privacy question or request, contact info@clubpath.co.za.
What this policy covers
How we collect, use, store, share, and protect your personal information when you use Club Path, and the rights you have over that information.
What we collect and why
| Category | What it includes | Why we process it | Basis |
|---|---|---|---|
| Identity | Full name, Grind ID, email, phone | Create and secure your account; verify it's really you | Contract / consent |
| Demographic | Date of birth, gender | Determine age-band and division eligibility | Contract / legitimate interest |
| Golf record | Handicap index, HNA/GA handicap number, course & playing handicaps, gross/net/Stableford scores, hole-by-hole data, side-competition entries | Calculate handicaps to WHS, score competitions, rank results | Contract |
| Scorecards | Photographed/scanned scorecards, including handwriting matched to the member roster | Capture and verify scores; resolve names to the correct member | Contract |
| Club & membership | Club affiliation, roster membership, division category, junior age band, roles | Manage rosters, eligibility, and permissions | Contract / legitimate interest |
| Account & technical | Login credentials, role assignments, audit logs of handicap and account changes | Security, access control, and an audit trail | Legitimate interest |
| Tee-sheet data | Names, tee times, and handicap numbers imported from the club's booking system | Auto-populate competition fields for club events | Legitimate interest |
We do not process special personal information. Club Path does not collect or store health data, race or ethnic origin, religious or philosophical beliefs, political persuasion, trade-union membership, sex life, biometric information, or criminal records. Scorecard handwriting is used only to match a name to the member roster — never as a biometric identifier.
Children's information
Club Path supports junior members under 18. South African law (POPIA s34) protects children's personal information specifically. We only process a junior's information where a parent or legal guardian ("competent person") has given consent, captured through our two-sided claim-and-consent process. A guardian can withdraw consent, or access, correct, or delete a junior's information, at any time by contacting info@clubpath.co.za.
Who we share it with
We share personal information only with the operators who help us run the service, under agreements that require them to protect it and use it only on our instructions:
- Hosting & database — our cloud database and authentication provider (Supabase), hosted outside South Africa.
- Platform — the environment Club Path is built and hosted on.
- Club tee-sheet system — the club's booking/handicap system, for importing entries and the official handicap of record.
We do not sell your personal information or share it for advertising.
Where your data is stored
Your information is hosted by our cloud provider (Supabase) in a data centre outside South Africa. Because this is outside South Africa, we only transfer it to providers that offer an adequate level of protection comparable to POPIA, or where the transfer is necessary to provide the service you've asked for, in line with POPIA s72.
How we protect it
- Row-level security so each user only reaches the data they're entitled to.
- Role-based access (union / club / super-admin) with least-privilege permissions.
- Encrypted transport and an audit trail on sensitive changes.
- Access to the member roster restricted to authorised club officials.
How long we keep it
We keep your information for as long as you have an active account and for as long as needed to maintain accurate historical competition and handicap records. You can ask us to delete your account and personal information; we'll do so unless we're required to retain certain records (e.g. for a live competition result that has already been published).
Your rights
Under POPIA you can, at any time:
- Access the personal information we hold about you.
- Correct anything that's inaccurate or out of date.
- Delete your information, subject to records we're required to keep.
- Object to processing based on legitimate interest.
- Withdraw consent where processing relies on it (including a guardian withdrawing consent for a junior).
- Complain to the Information Regulator.
To exercise any of these, contact info@clubpath.co.za. To complain to the regulator: the Information Regulator (South Africa), inforegulator.org.za, complaints.IR@inforegulator.org.za.
If something goes wrong
If a security compromise affects your personal information, we will notify you and the Information Regulator as soon as reasonably possible, as required by POPIA s22, and tell you what happened and what to do.
Access to information (PAIA)
You have a right to request records under the Promotion of Access to Information Act, 2000 (PAIA). Our PAIA manual sets out how — see the PAIA Manual or request it from info@clubpath.co.za.
Changes
We'll update this policy as the platform evolves and show the version and date at the top. Material changes will be flagged in-app.
See also our Terms of Use.