Legal
Privacy Policy
What we collect, why, who processes it, and the choices you have.
Draft — pending legal review. This policy describes what the product actually does, but it has not yet been reviewed by a qualified lawyer or data-protection adviser. It is not legal advice. The payments, accounts and analytics sections in particular still need sign-off from a qualified adviser.
Last updated: 24 July 2026.
Who we are
BuyMeATee (“we”, “us”) is the platform at buymeatee.com — a golf-focused way for supporters to back creators with a “Tee”. It is operated by Simon Berriman, a sole trader based at Karl-Rothe-Str. 4, 04105 Leipzig, Germany, who is the data controller for the personal data described here. For payments we work with Stripe, who acts as an independent controller for the payment and identity-verification data it collects (see “Payments” below). For any privacy request, contact hello@buymeatee.com or +49 15207075439. Full operator details are in our Impressum.
What we collect
Accounts: we use passwordless sign-in, so we hold your email address and sign-in session data. We never store passwords.
Creator profiles: the details you choose to publish — display name, page link (username), bio and About text, photo and cover image, and optional golf details (handicap, location, home club, handedness), social links, pinned media, goals and posted updates. This information is public by design.
Sending or receiving Tees: when you send a Tee we handle the amount, an optional message, the name shown (or “Anonymous” if you choose), and — if you provide one — an email for your receipt. Card details are entered directly with Stripe and never reach our servers. Creators who receive Tees complete identity and payout setup with Stripe.
Cookies and analytics
We use essential cookies to keep you signed in — these are always on because the site needs them to work. We also use Google Analytics (GA4) to understand, in aggregate, how the site is used, which sets analytics cookies. Analytics only loads if you accept it: on your first visit a banner asks for your choice, and nothing analytics-related runs until you opt in. You can change or withdraw your choice at any time via Cookie settings in the footer.
Why we collect it, and our legal basis
- To provide the service — accounts, creator pages, goals, updates and processing Tees (performance of a contract).
- To send transactional email — sign-in links, gift receipts and creator notifications (contract / legitimate interests).
- To keep the platform secure, prevent fraud and abuse, and understand usage (legitimate interests).
- To meet legal, tax and anti-money-laundering obligations around payments (legal obligation, largely via Stripe).
We do not sell your personal data.
Payments (Stripe)
Payments run on Stripe using Stripe Connect. When you pay, your card details go directly to Stripe — BuyMeATee never sees or stores them. Creators receiving Tees onboard with Stripe, which collects the identity and bank details it needs to verify them and pay them out; Stripe processes that data as an independent controller under its own privacy policy. We store a record of each Tee (amounts, status, references and any message) to run the service, show progress and handle refunds and disputes.
Who processes your data
We share personal data only with service providers who help us run BuyMeATee:
- Supabase — database, file storage and authentication (hosted in the EU).
- Stripe — payments, payouts and identity verification.
- Resend — sending transactional email.
- Vercel — website hosting and standard server logs.
- Google Analytics — aggregate usage analytics.
Some of these providers are based in, or process data in, the United States. Where personal data leaves the UK/EEA, it is protected by appropriate safeguards such as Standard Contractual Clauses. The full processor list and transfer mechanisms will be confirmed in the legal review.
How long we keep it
We keep account, profile and payment records for as long as you have an account and as long as we must for legal, tax and accounting reasons after that. Public content you post remains visible until you remove it or close your account.
Your rights
Under UK and EU data-protection law you can ask to access, correct, delete or export your personal data, object to or restrict certain processing, and withdraw consent at any time. You can also complain to your data-protection regulator (in the UK, the ICO). Some payment and tax records must be retained even if you ask for deletion.
Children
BuyMeATee is for adults (18+). Junior golfers take part only through an appropriate parent or guardian, who is responsible for their participation.
Changes to this policy
We’ll update this policy as the product evolves; the date above reflects the latest revision. Material changes will be highlighted before they take effect.