Shopping Cart
Contents
Last updated: 5 October 2026
This privacy policy explains how Wellputt France SAS collects and uses your personal data when you visit or buy from the Wellputt United Kingdom store (wellputt.com/gb), what your rights are and how to use them. We process your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
The data controller responsible for your personal data is:
Wellputt France SAS (a subsidiary of Wellputt USA Inc., Florida, USA)
23 chemin de Cazenave, 64100 Bayonne, France
Company number: RCS Bayonne 525 338 083 (EUID FR6401.525338083)
VAT number: FR68525338083
For any question or request about your personal data, please write to contact@wellputt.com. We have not appointed a Data Protection Officer (DPO); this address is handled directly by our team. For questions about an order, our after-sales team can be reached at support@wellputt.golf.
You can send all your requests directly to contact@wellputt.com.
2. The personal data we collect
Depending on how you use our store, we may process the following data:
- Account data: your name, e-mail address and password (stored only in encrypted, hashed form).
- Addresses and phone number: delivery and billing addresses, phone number (needed by the carrier and for customs clearance).
- Orders and invoices: products ordered, amounts, order history, invoices, delivery tracking, cancellation and return requests.
- Payment data: the status of your payment (accepted, refused, refunded). Your card details are entered directly on the secure Stripe platform: Wellputt never sees or stores your full card number.
- Your messages: e-mails and messages sent to customer service, contact form submissions and your conversations with the chatbot on our website.
- Product reviews: the reviews and ratings you post, with the name you choose to display.
- Newsletter: your e-mail address and your subscription or unsubscription history.
- Affiliate programme: if you join it, your identity, contact details and the information needed to track and pay your commissions.
- Browsing data and cookies: pages visited, device and browser information, collected through cookies and similar technologies (see section 6).
- Technical data: IP address and server logs (date and time of connection, errors), used for security and to keep the site working.
Most of this data comes directly from you. Fields required to place an order are marked as such: without them, we cannot process or deliver your order.
3. Why we use your data and on what legal basis
We only use your data for specific purposes, each based on one of the lawful bases set out in the UK GDPR:
| Purpose | Lawful basis | Retention |
|---|---|---|
| Processing your orders, payment, delivery (including customs clearance in the UK) and invoicing | Performance of the contract; legal obligation (accounting, customs) | Orders and invoices: 10 years (French accounting law, as the seller is a French company). Card data: never stored by Wellputt. |
| After-sales service, cancellations, returns and faulty goods | Performance of the contract; legal obligation (your consumer rights) | Customer-service exchanges: 3 years. Cancellation requests: 5 years. |
| Creating and managing your customer account | Performance of the contract | While your account is active, then 3 years after your last activity |
| Newsletter and offers, including the HELLO10 welcome code | Your consent | 3 years after your last contact with us, or until you unsubscribe if earlier |
| Order e-mails and requests to review the products you bought | Our legitimate interests (keeping you informed about your order and collecting customer feedback) | Kept with your order records (see first row) |
| Answering your questions through the chatbot | Our legitimate interests (offering fast help on our products and orders) | 12 months |
| Running the affiliate programme | Performance of the contract | While you take part in the programme; commission and payment records are kept as accounting records (10 years) |
| Answering contact form submissions | Our legitimate interests (answering your requests) | 3 years (customer-service exchanges) |
| Preventing fraud and securing the site, including Google reCAPTCHA on our forms | Our legitimate interests (protecting our customers and our business) | Technical logs: 1 year |
| Audience measurement and advertising cookies | Your consent, given through the cookie banner | Up to 13 months |
| Meeting our legal obligations, in particular keeping accounting records | Legal obligation | 10 years |
When we rely on our legitimate interests, we make sure they are not outweighed by your interests and rights. You can object to this processing at any time (see section 9). At the end of the periods above, your data is deleted or anonymised.
4. Newsletter and marketing e-mails
We only send you our newsletter and offers, including the HELLO10 welcome code, if you have agreed to receive them. You can withdraw your consent at any time by clicking the unsubscribe link at the bottom of each e-mail, or by writing to contact@wellputt.com. Unsubscribing does not stop the e-mails needed for your orders (confirmation, shipping, invoices).
5. Our chatbot
The chatbot on our website answers questions about our products, orders and services. It is powered by an artificial intelligence model provided by Anthropic PBC (USA): the messages you type are sent to Anthropic so that an answer can be generated. Please do not share sensitive information (such as health data or payment card details) in the chatbot. If you would like to speak to a person, write to support@wellputt.golf.
6. Cookies
Cookies that are strictly necessary for the site to work (shopping cart, login, security, remembering your cookie choices) are set without your consent. Audience measurement and advertising cookies, including Google Analytics, are only set if you accept them through the cookie banner. You can change your choices at any time through the cookie settings on our site or in your browser. These cookies are kept for a maximum of 13 months.
7. Who we share your data with
Your data is only shared with people and companies who need it for the purposes above. Our service providers act on our instructions and are bound by contract to protect your data. We never sell your personal data.
- Brevo (Sendinblue SAS, France): sending e-mails, including the newsletter and order e-mails.
- Stripe (Stripe Payments Europe Ltd, Ireland): secure card payment.
- OVH SAS (France): hosting of our website and data.
- Anthropic PBC (USA): artificial intelligence model behind our chatbot.
- Google: reCAPTCHA spam and fraud protection on our forms and, only if you have consented, audience measurement (Google Analytics).
- PrestaShop SA (France): technical services for our e-commerce platform.
- 2L Logistic (Mouguerre, France): our logistics partner, which stores, ships and receives returned goods.
- Carriers and customs brokers (for example FedEx): delivery of your parcel and customs clearance on import into the United Kingdom, which includes passing the necessary information to UK customs authorities.
- Wellputt USA Inc. (USA): our parent company, within the Wellputt group.
- Our accountants and our management software (ERP) provider: accounting and order management.
We may also disclose data when required by law, for example to a court or a public authority.
8. International transfers
Wellputt France SAS is based in France, so the data of our UK customers is processed in the European Economic Area (France and Ireland). These transfers are covered by the UK adequacy regulations, which recognise that the EEA provides an adequate level of protection.
Some data is also transferred to the United States (Anthropic, Google and Wellputt USA Inc.). These transfers are made under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge") where the recipient is certified, or otherwise under the International Data Transfer Addendum (to the EU standard contractual clauses) or the International Data Transfer Agreement (IDTA) approved by the UK. You can ask us for more information about these safeguards at contact@wellputt.com.
9. Your rights
Under the UK GDPR, you have the right to:
- access your personal data and receive a copy of it;
- rectify data that is inaccurate or incomplete;
- erase your data, unless we must keep it (for example invoices we are legally required to keep);
- restrict the processing of your data;
- object to processing based on our legitimate interests and, at any time and without giving a reason, to direct marketing;
- data portability: receive the data you gave us in a commonly used format, or have it sent to another company;
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To exercise your rights, write to contact@wellputt.com. It is free of charge. We may ask you to confirm your identity. We will reply within one month; this period can be extended by two further months for complex or numerous requests, in which case we will tell you why.
If you are not satisfied with our answer, you have the right to complain to the Information Commissioner's Office (ICO), the UK data protection authority: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF – ico.org.uk – helpline 0303 123 1113. As our company is based in France, you may also complain to the French data protection authority, the CNIL (www.cnil.fr). We would appreciate the chance to deal with your concerns first, so please contact us before approaching the ICO.
10. Security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access: encrypted connection (HTTPS) on the whole site, passwords stored in hashed form, card payments handled entirely by Stripe, and access to your data limited to the people and service providers who need it. No method of transmission over the internet is completely secure, but we work to protect your data and will inform you and the ICO of any data breach where the law requires it.
11. Children
Our store is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, please contact us at contact@wellputt.com and we will delete it.
12. Changes to this policy
We may update this privacy policy, for example when we use a new service provider or when the law changes. The date at the top of this page shows when it was last updated. If the changes are significant, we will let you know by a notice on the site or by e-mail.
For the rules that apply to your orders, please read our terms and conditions of sale.