Privacy Policy
Effective date: August 15, 2026
On The Tee ("we," "our," or "us") operates the platform at onthetee.io. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data. If you have questions, email us at hello@onthetee.io.
1. Information We Collect
Waitlist signups. When you submit our waitlist form, we collect your name, email address, and — depending on which form you complete — your course name and brand preferences, or your brand name and apparel categories.
Platform accounts. When you create an On The Tee account as a course operator or brand partner, we collect your name, email address, business name, and any logo or brand assets you upload.
Payment information. Payments are processed by Stripe. We do not store your credit card number or payment credentials. Stripe may collect billing name, card details, and billing address in accordance with their own privacy policy.
Storefront purchases. When you purchase merchandise through a golf course pro shop powered by On The Tee, we collect your shipping name, address, email address, and order details to fulfill your order. You may be shopping on a storefront branded with a golf course's identity — On The Tee is the data controller responsible for the personal information collected during that transaction, even when the storefront is presented under the golf course's brand name.
Usage data. We may collect standard server logs including IP addresses, browser type, and pages visited. This information is used to operate and improve the platform.
2. How We Use Your Information
- To contact waitlist signups when onboarding opens for their tier
- To operate course storefronts and process merchandise orders
- To facilitate embroidery and fulfillment on behalf of courses
- To send transactional emails related to orders, accounts, and payouts
- To improve the platform and diagnose technical issues
- To comply with legal obligations
We do not use your information for behavioral advertising or sell it to data brokers.
3. Who We Share Your Information With
We share data only with the service providers necessary to operate the platform:
- Supabase — our database provider, used to store account data, waitlist submissions, and order records.
- Stripe — our payment processor, used to handle transactions and payouts to course operators.
- Vercel — our hosting provider, used to serve the platform globally.
- Fulfillment partners — embroidery and shipping providers who receive the order details (name, address, product specifications) necessary to fulfill orders.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Cookies
We use minimal cookies. Session cookies are used to keep you logged in while you use the platform. A preference cookie is stored locally when you dismiss our cookie notice. We do not use third-party advertising cookies or cross-site tracking. If you disable cookies, some platform features may not function correctly.
5. Data Retention
Waitlist submissions are retained until you request deletion or we complete our onboarding process. Account data is retained for the life of your account. When a Course Operator account is closed or terminated, order records and financial transaction data are retained for up to seven years to satisfy tax and legal record-keeping requirements. Personal data not subject to such legal retention obligations will be deleted within 90 days of account closure.
Order information for storefront purchases is retained for as long as necessary to fulfill the order, handle any defect claims, and satisfy our legal and financial obligations.
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at hello@onthetee.io. We will respond to deletion requests within 30 days and to access or portability requests within 45 days. Note that we may be required to retain certain data for legal, tax, or fraud-prevention purposes even after a deletion request.
7. California Residents — CCPA
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.
Right to know. You have the right to request that we disclose what personal information we have collected about you, including the categories of information, the sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom it is shared.
Right to delete. You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (for example, information we are required to retain by law).
Right to opt out of sale. We do not sell your personal information to third parties. You do not need to opt out.
Right to non-discrimination. We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, email us at hello@onthetee.io with the subject line "California Privacy Request." We may need to verify your identity before fulfilling the request. You may also designate an authorized agent to make a request on your behalf.
8. EU and UK Residents — GDPR
If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR provides you with the following rights in addition to those described in Section 6:
- Lawful basis. We process personal data on the lawful bases of contract performance (fulfilling orders and operating accounts), legitimate interests (platform security and improvement), and legal obligation (tax and compliance records).
- Right to rectification. You may request correction of inaccurate personal data we hold about you.
- Right to restriction. You may request that we restrict processing of your personal data in certain circumstances.
- Right to object. You may object to processing based on legitimate interests.
- Right to data portability. You may request a copy of your personal data in a structured, machine-readable format.
- Right to lodge a complaint. You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data in accordance with applicable law.
On The Tee and its service providers are based in the United States. If you are located in the EU or UK, your personal data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses and other appropriate safeguards for such transfers. Course Operators who transfer EU/UK personal data to On The Tee should refer to our Data Processing Addendum for details on transfer mechanisms and processor obligations.
9. Security
We use industry-standard security practices including encrypted connections (HTTPS), access-controlled databases, and role-based permissions. No system is perfectly secure; if you believe your data has been compromised, contact us immediately at hello@onthetee.io.
10. Children
The On The Tee platform is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify active Course Operators by email. Continued use of the platform after changes are posted constitutes acceptance of the revised policy.
12. Contact
On The Tee
onthetee.io
hello@onthetee.io
Course Operators requiring a Data Processing Addendum for GDPR or contractual compliance may request one at onthetee.io/dpa.