Privacy policy

Frame the Fairway (“we”, “us”, “our”) makes custom golf course artwork to order. This policy explains what personal information we handle when you browse our site, build a design, place an order or get in touch, and what we do not do with it. We have written it to describe what our systems actually do rather than what a privacy policy usually says.

Most of what we hold is information you hand us on purpose:

• Your order: your name, email address and delivery address, plus the design you built and any text you added to it

• Your account, if you create one: your email address, your name and a password. Passwords are stored in hashed form by our authentication provider and are never visible to us

• Messages you send us: support enquiries, and for a return, your description of the problem and any photos you upload

• Sign-ups: your email address, and a name and message if you give them, when you join our list or ask to be told when a course is added

We never see your card details. Payment happens on Stripe's own checkout page. What comes back to us is a payment reference, the amount, and the contact and delivery details you gave Stripe.

Some information arrives automatically, and we have been deliberate about how little of it we keep. Your browser sends an IP address with every request. We use it in the moment to guess which currency to show you and to slow down abusive traffic, and we do not store it in our database. The companies that host and deliver the site see it as part of doing that. If you use the “near me” option in course search, your browser asks your permission first and the coordinates are used for that search only. We do log the IP address and browser of our own staff when they use our admin tools, so that actions taken on your order can be traced back to a person.

• Making and delivering your order

• Sending you order confirmations, dispatch and delivery updates, and anything to do with a return or a refund. These are part of the service you bought and are not marketing, so they are not affected by your marketing choices

• Answering your enquiries and handling support requests

• Sending marketing emails, but only if you have opted in. Every marketing opt-in on this site starts unticked

• Understanding how the site is used, but only if you have accepted analytics cookies

• Preventing fraud and abuse, and keeping accounts and orders secure

• Meeting our tax, accounting and legal obligations

You can change your email preferences or unsubscribe at any time from the link in any marketing email, or from the preference centre it points to. Unsubscribing never stops the emails about an order you have actually placed.

We do not sell your personal data. We share it with the companies that make the product work, and only what each one needs:

• Stripe takes the payment. You enter your card details on their page, and they receive your name, email and billing and delivery addresses

• Prodigi prints and ships your order. They receive your name, your delivery address and a link to your print file. We do not send them your email address or phone number

• Supabase holds our database, accounts and uploaded files, and Vercel hosts and serves the site, so every request you make passes through them

• Resend sends our order and account emails, which means it handles your email address and the order details inside them, including your delivery address

• Omnisend sends our marketing emails, if you opted in, and provides on-site visitor tracking, which we load only if you accept marketing cookies

• Google Analytics 4, delivered through Google Tag Manager, tells us how the site is used. None of it loads until you consent

• Mapbox renders the course maps. Your browser talks to Mapbox directly whenever you view a course or open the editor, so Mapbox sees your IP address

• Linear is where our team tracks work. When you report a problem with an order we open an internal ticket that contains your order number, your email address and what you told us

• iGolf supplies the course data behind our search. It receives what you type and, if you used “near me”, the coordinates your browser supplied. It receives nothing that identifies you

We share only what each provider needs to do its job, and we do not hand your details to anyone else for their own purposes. We may also disclose information where the law requires it, or to establish or defend a legal claim.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how you use our site. Essential cookies are required for the site to function, and cover things like your session, your cart and your chosen currency. Your cookie choice itself is stored in your browser's local storage, which is how we can honour it before anything else loads.

Analytics and marketing cookies are only set with your consent, and we enforce that by not loading the scripts at all. Until you accept one of those categories we do not request Google Tag Manager, Google Analytics or Omnisend's on-site tracking, so none of them can set a cookie, read one, or record your visit. Your first visit shows a banner where you can accept all or keep to essentials only, and either choice is remembered.

If you later withdraw consent we stop loading those scripts and clear the analytics and advertising cookies we can reach. We want to be straight about the limit of that: a cookie set on a third party's own domain can only be deleted by that third party. If you accept and then withdraw, Omnisend's __cf_bm cookie on its own domain will remain until it expires on its own schedule, because we have no way to remove it. It is a bot-detection cookie rather than an advertising one.

One thing sits outside that gate, because it is needed to deliver what you asked for rather than to track you. Course imagery is rendered by Mapbox, so loading a course map or the design editor sends a request to Mapbox and, in the editor, stores a Mapbox session identifier in your browser's local storage. Mapbox uses it to meter map usage. It sets no advertising cookie, and we cannot switch it off while still showing you a map.

Your cookie choice covers on-site tracking and advertising only. Marketing emails are governed separately by your email preferences, so declining marketing cookies does not unsubscribe you, and accepting them does not subscribe you.

You can manage your cookie preferences at any time on our cookie settings page or through your browser settings.

A design you save is stored against your account, or against your browser session if you are not signed in, along with a small preview image. When you order, we produce a print-resolution file from your design and store it so that the print lab can download it directly.

That file and the preview images live at long, unlisted web addresses. They are not indexed, linked or listed anywhere, but they are not password protected either, so anyone who had the exact address could open the image. Bear that in mind if you add something private to your artwork, such as a name or a date. Photos you upload for a return are handled differently: they go to a private area that only our staff can open, through links that expire.

You can only review a print you actually ordered, through a link we send you after it arrives. Writing one is entirely optional, and nothing changes about your order either way.

If you tick the box to publish it, four things can appear publicly on this website: your rating, the words you wrote, the display name you chose, and the course you ordered. If you attach a photo, that becomes public too. You choose the display name, so it can be a first name, initials or anything else you are comfortable with.

Your email address is never published. We keep it against the review so we can reply to you and so we can confirm the review came from a real order, and it is not shown to anyone outside our team. Photos are held in a private area while a review is waiting to be read, and only copied somewhere public if and when the review is published.

Every review is read by a person before it goes up. We do not reject reviews for being critical, and a low rating is published on exactly the same terms as a high one. You can ask us to take your review down at any time, for any reason, by emailing support@framethefairway.com. You do not have to give a reason and we will not ask for one.

The companies listed above run their services from data centres in a number of countries, and we print your order in the lab nearest to you. That means your information is stored and processed outside Australia, and your name and delivery address are sent to whichever country your order is produced in.

We keep your account, order and support records for as long as we need them to run the business, honour our guarantee and meet our tax and accounting obligations. We would rather tell you plainly than imply a schedule we do not run: outside the case below, nothing is deleted automatically, so those records stay on file until you ask us to remove them.

The exception is return photos. If you start a return and upload photos but never submit it, those photos are deleted automatically by a daily clean-up job once they are at least 24 hours old. Photos attached to a return you did submit are kept with the case.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data

• Object to processing of your data

• Request a copy of your data in a portable form

• Withdraw consent at any time

Two of these you can do yourself, right now: your cookie settings are yours to change whenever you like, and every marketing email carries an unsubscribe link and a preference centre. For the rest there is no self-service button yet. Email us at privacy@framethefairway.com and a person will handle it and confirm what has been done. Where we have to keep something, for example an invoice we are required to retain, we will tell you what and why rather than quietly leaving it in place.

Frame the Fairway is not aimed at children, and we do not knowingly collect personal information from them. If you believe a child has given us their details, contact us and we will remove them.

We update this page whenever what we do changes, and we change the date at the top when we do. If a change is significant, we will say so rather than leave you to spot it.

If you have any questions about this privacy policy or how we handle your data, please contact us at privacy@framethefairway.com or through our support page. Our terms of service cover the rest of what applies when you order from us.