Privacy Policy
Last updated 16 August 2026
1. Who controls your data
Velmora Tech, operator of Fairway EA, is the data controller. We handle personal data in line with Kenya's Data Protection Act, 2019.
2. What we collect
Account details (name, email, password hash held by our authentication provider), profile information you add (photo, bio, phone, date of birth, handicap, home club, preferred tee), activity data (club memberships, bookings, game requests, event reservations, messages), payment records (M-Pesa transaction code, amount, payer phone number) and technical data (device, browser, IP address, log timestamps).
3. Why we use it
To run your account and subscription, take and confirm bookings, deliver messages and notifications, verify M-Pesa payments, show sponsors aggregate campaign performance, prevent abuse and fraud, meet legal obligations, and improve the service.
4. Who can see what
Your display name, photo, home club and handicap are visible to other signed-in members. Private messages are visible only to thread participants. Club administrators see the members of their own club. Sponsors receive aggregate, non-identifying campaign statistics — never your contact details. Core administrators can access account and payment records for support, moderation and verification, and their actions are audit-logged.
5. Processors we use
Cloud hosting and database, authentication and email delivery providers acting on our instructions, and Safaricom M-Pesa for payment. We do not sell your personal data.
6. Retention
Account data is kept while your account is open and for up to 12 months afterwards. Payment records are kept for 7 years to meet tax and accounting requirements. Message content is deleted with the thread when both participants delete it or when the account is deleted.
7. Your rights
You can access, correct, export or delete your data, object to processing, and withdraw consent for marketing at any time. Use Account settings, or write to privacy@fairwayea.live. You may also complain to the Office of the Data Protection Commissioner (Kenya).
8. Security
Data is encrypted in transit, access to production data is restricted and audited, and database row-level security limits every query to the records you are entitled to see.
9. Children
Fairway EA is not intended for anyone under 18. Junior golfers may be listed by a club only through an adult account holder.
10. Contact
privacy@fairwayea.live.