Legal

Privacy Policy

Last updated: March 2026

1. Who we are

Sunday Money is operated by JBRDMN ("Sunday Money", "we", "us"). We are the data controller for your personal data. For privacy enquiries contact: privacy@sunday-money.io

Sunday Money is registered with the UK Information Commissioner's Office (ICO).

2. What we collect

When you register: name, email address, date of birth, country of residence, password (hashed, never stored in plain text), and your marketing communication preference.

When you complete your profile: handicap range, golf engagement level, equipment brands (irons and driver). These are optional.

When you enter a league: your league membership, golfer picks, entry timestamp, and payment status. We record whether payment has been made but do not process or store payment details — all payments are peer-to-peer between you and the league captain.

Automatically: basic usage data to operate the service.

3. Why we collect it

Your name, email and DOB are required to operate your account and verify you are 18 or over.

Golf profile data is used to improve the platform and may be used in aggregate and anonymised form for commercial purposes including brand partnerships. It will never be sold in a form that identifies you personally.

4. Legal basis (GDPR)

We process your data under legitimate interests (operating the platform) and, where applicable, consent (marketing communications, golf profile data).

5. How long we keep it

Account data is kept for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Anonymised and aggregated data may be retained indefinitely.

6. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your personal data ("right to be forgotten")
  • Receive your data in a portable, machine-readable format
  • Object to or restrict processing of your data
  • Withdraw consent at any time where processing is based on consent

Email privacy@sunday-money.io to exercise any of these rights. We will respond within 30 days.

7. Third parties

We share data with the following third-party services, solely to operate the platform:

  • Supabase — database and authentication (EU region)
  • Vercel — hosting and deployment
  • DataGolf — tournament scoring data
  • Resend — transactional and marketing email delivery
  • Google Workspace — email infrastructure
  • Anthropic — AI-assisted email support. Inbound support emails may be processed by the Anthropic API to generate responses. No personal data is used to train AI models.

League captains may ask entrants to pay via PayPal, Venmo, Zelle, Revolut, bank transfer, or other peer-to-peer methods. These payments are made directly between you and the league captain. Sunday Money does not process, store, or have access to your payment transactions. We store the captain's payment details (e.g. PayPal.me link, Venmo username, bank details) solely to display them to league entrants.

We do not sell your personal data to third parties.

8. Cookies

Sunday Money uses essential cookies only to maintain your session. No advertising or tracking cookies are used.

9. International transfers

Your data may be stored and processed outside the UK, including in the European Union and the United States, by the third-party services listed above. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.