Privacy
What we store, why we store it, and who else touches it. Written against what the product actually does: if something here is unclear, ask and we’ll answer plainly.
Last reviewed: 18 October 2026
The short version
An organiser signs in with an email address and builds a website for their golf trip. What goes on that site (the days, the players, the photographs, the words) is what they type in and upload. We store it so we can show it back, publish it, and keep it for them. We don’t sell it, we don’t advertise against it, and we don’t use it to train anything.
Who we are
Tourcraft is run by Tourcraft Ltd, a company registered in England and Wales (company number 17483252), whose registered office is at 30 Watercress Drive, Sevenoaks, TN14 5AL. Write to us at support@tour-craft.co.uk. We are registered with the Information Commissioner’s Office, reference ZC270259.
If you’re on someone’s trip, not running it
The organiser builds the site, so your name (and your handicap, your nickname and your photograph, if they added them) was entered by them, not by you. We never ask players for an email address or a phone number, and there is nothing for you to sign in to. Your organiser is asked to send you a short notice before the site goes live; the full version is at tour-craft.co.uk/for-players.
If you’d rather not be on a tour’s site, the quickest route is to ask the organiser, who can remove you or your photograph themselves. You can also write to us at support@tour-craft.co.uk and we will act on it.
What we store, and why
| What | Why |
|---|---|
| Your email address and name, and an id from our sign-in provider | So your tours are yours, and only you can edit them, and to email you when a tour’s editing year is about to end |
| The tour itself: its name, dates, destinations, itinerary, courses and competitions | It is the website you are building |
| The people on the trip: names, and optionally handicaps, nicknames and photographs | To show the field, the draw and the results on the site |
| Organiser contact details, if an organiser chooses to publish them | So the group can reach whoever is running the trip. Entirely optional: leave it blank and no organiser page exists. On a Tour Plus account, the same details can be shared across your sites: they are then also kept on your account, and a change reaches each linked site when that site is next published |
| Tributes, if any are written: for each, a name, the organiser’s own words, and one photograph | Shown exactly as written. Nothing about it is generated, and it is never sent to the app |
| Photographs uploaded to a tour | To appear on the site once they have been checked |
| What you buy: the package, the price, the date, the terms you agreed to, and Stripe’s reference for the payment | So we know which tours are paid for, to refund you if you ask, and because tax law makes us keep a record of every sale |
Photographs
Photographs are stored by Cloudflare R2, in the EU. Before one appears anywhere it is checked automatically: Amazon (AWS) Rekognition looks for adult or violent content and runs in London (eu-west-2); the image does not leave the UK for that check. A photograph the check is unsure about is held for a person to look at rather than refused by a machine.
An upload is private until it is approved and the organiser publishes the site. Removing a photograph takes it off the site at the next publish, and the stored file is then deleted.
Before uploading a photograph of someone else, an organiser is asked to confirm they have the permission to do so. We rely on that.
The writing on your site
Tourcraft uses Anthropic’s Claude to write the flavour text around your trip, from what you typed in. It runs on our servers, never in your browser, and only when you ask for it, never when somebody views your site. Facts are never invented: names, dates, handicaps and scorecards come from your own data. A tribute is never generated at all.
Your content is not used to train any model.
A published tour site is public
Your site is unlisted: anyone with its link or trip code can view it, and nobody else can find it. Publishing puts the site on the web. Trip codes are short and easy to read aloud because they are meant to be shared with the group, which also means a code is not a password, and anyone who has it can view that tour. Share it with your group rather than publicly. A tour that has not been published cannot be opened by anyone but its owner.
Who else touches it
| Who | What for |
|---|---|
| Clerk | Sign-in and account security |
| Neon | The database |
| Vercel | Hosting, and normal web server logs |
| Cloudflare | DNS, and serving photographs from R2 (EU) |
| Amazon (AWS) Rekognition | The automatic photo check (London) |
| Amazon (AWS) Simple Email Service | Sending you emails about your tour, such as renewal reminders (London) |
| Anthropic | Writing your site’s copy |
| Stripe | Card payments when you buy a site. Your card details go to Stripe and never to us; Stripe receives your email address and what you are buying: the package and your tour’s name. For the payment itself Stripe acts as a controller in its own right, under its own privacy policy |
Tourcraft itself. A small number of Tourcraft staff can see the content of any tour, including players’ names and photographs, when that is needed to give support, look into a problem or deal with a legal request. Every such access is recorded.
We do not use third-party analytics, advertising, or cross-site tracking, and we set no advertising cookies. Signing in sets the cookies our sign-in provider needs to keep you signed in.
How long we keep it
A tour is kept while it exists; that is the point of a keepsake site. Delete a tour and its content, including its photographs, goes with it. Close your account by writing to us and we will remove what we hold. The one exception is a record of what you paid (the amount, the date and Stripe’s reference, never your card), which tax law makes us keep after an account is closed.
Your rights
Under UK data protection law you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it.
If you have a Tourcraft account you can do two of these yourself, at any time, from Your data when you are signed in: download a copy of everything we hold, and delete your account and every tour on it. Deletion removes your tours, your players and your photographs from our systems and takes any published sites offline. It cannot be undone.
For anything else (a correction, a question, or if you cannot sign in), write to support@tour-craft.co.uk and we will respond as quickly as we can, and within one month at the latest, which is the legal limit. If you are not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk.
The app
The Tourcraft player app has no accounts, no sign-in and no analytics. It stores the trip codes you enter and a copy of your itinerary on your own device, so your tour opens without a signal. That is not synchronised to us or shared with anyone; removing a tour deletes both, and uninstalling the app deletes everything. It asks for no device permissions (no location, contacts, camera, photos, microphone or calendar) and sends nothing but the trip code when you open a tour.
Children
Tourcraft is for adults organising and attending golf trips. We do not knowingly collect anything from children.
Changes
If this policy changes in a way that matters, the date at the top changes with it.