Privacy Policy

Recipro (“Recipro”, “we”, “us”) operates the website at recipro.club and the Recipro service that clubs use to send, receive and answer reciprocal play requests.

Your club decides who is in Recipro. There is no public sign-up. Members are added by their own club’s staff, and staff accounts are created by their club or by us. For the member and request information a club puts into Recipro, we act on that club’s behalf and follow its instructions. For information you give us directly — for example through the Book a Demo form — we are responsible for it ourselves.

If you are a club member with a question about why your details are in Recipro, your club is usually the best first contact. You are always welcome to contact us as well.

Your account

• Your name and email address, and a phone number if one is provided.
• Your password, which is stored only in a scrambled (hashed) form that cannot be turned back into the password. We never see or store the password itself.
• Your time zone and language preference.
• Sign-in records: when you last signed in, the IP address you signed in from, and the browser and device type used.
• A profile photo, only if you choose to upload one.

Your club membership

Which club you belong to, your member number, membership type and status, join and expiry dates, and whether your club allows you reciprocal play.

Your requests

When you ask to play at another club we record the date, the tee-time window, the number of players and holes, any notes you write for the golf shop, and each person in your group. Guests in your group are recorded by first and last name only. If you save playing partners to your buddy list, you may also store their email address and phone number there.

People at other clubs

A club can record another club’s name, address, phone number, website and a contact email address — for example to invite that club to a reciprocal agreement, or so a golf shop that does not use Recipro can answer a request from a link we email to it. Those contacts have not signed up for Recipro. If that describes you and you would rather not be contacted, tell us (see section 10).

Book a Demo

If you ask for a demo we keep your name, email, phone number if you give one, your club, role and location, the answers you choose about your club, and your message. We use these only to contact you about Recipro.

Records kept automatically

Like almost every website, our servers record each request they receive: the IP address, browser type, the page or address requested, the time and the result. This happens whether or not you are signed in. Separately, Recipro keeps an audit trail of significant actions — for example who approved or cancelled a request — including the name and email address of the person who did it, their IP address and browser type.

What we do not collect

• No payment card or bank details. Recipro does not take payments.
• No date of birth, handicap, gender or government identifier.
• No location from your phone or computer.

Reciprocal play only works if the club you are visiting knows who is coming. What that club sees depends on how it answers your request:

• A club that uses Recipro sees your first and last name, email address, telephone number, member number and membership type, your home club, the date and tee-time window, everyone in your group by name, and your notes. The golf shop uses these to check you in and to reach you about the visit.
• A club answering from a link we email to it sees your name, your home club, the date and time window, your group by name, and your notes — but not your email address, telephone number or member number.
• Staff at your own club can see the requests you send and their progress.
• Recipro’s own staff can see information across the service when it is needed to run, support and secure it.

Each club’s information is kept separate: a club cannot see another club’s members or requests except the requests sent to it. We do not sell personal information, and we do not share it with anyone for their own marketing.

We use the information above to:

• route your requests to the clubs you choose and tell you what happens to them;
• send the emails the service depends on, such as a confirmed tee time;
• let clubs manage their members, agreements and reports;
• keep accounts secure, prevent misuse and investigate problems;
• answer demo requests and support questions.

You can turn off many informational emails in your notification settings. Emails that are essential to a request you made, such as a confirmation or a cancellation, are always sent.

We use a small number of companies to run Recipro. Each receives only what it needs for its job.

Our hosting, database, file storage and email providers are in the United States, and your information is stored there. We may also disclose information if the law requires it, or to protect the safety of our users or the service.

Recipro sets one cookie: a secure cookie that keeps you signed in. It is used for nothing else and the service cannot work without it.

We use no analytics, advertising or tracking tools of any kind. The only outside code that runs in your browser is our error-reporting service (Sentry, above), which sends us a report when something breaks so we can fix it. It is told not to attach your identity or IP address, it does not record your screen, and it sets no cookies.

We keep account, membership and request information for as long as your club uses Recipro, because clubs rely on the history of their requests and agreements. The audit trail is kept so that actions on the service can always be traced. Demo requests are kept so we can follow up.

We have not yet set fixed periods after which each kind of record is deleted automatically. Until we do, we delete information when you or your club ask us to, as described below, except where we need to keep it to meet a legal obligation, resolve a dispute or keep the service secure. When we set retention periods we will publish them here.

You can:

• see and correct your name, phone number and photo from your profile;
• remove your profile photo at any time, which deletes it from our storage;
• change which informational emails you receive.

You can also ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing blakesandlin@recipro.club. These requests are handled by a person rather than an automatic button, so we may ask you to confirm who you are, and we will tell your club where the request concerns information it manages. Depending on where you live, the law may give you further rights, and we will honour them.

Leaving your club ends your membership in Recipro. It does not by itself delete your account; ask us if you would like that too.

• All connections to Recipro are encrypted (HTTPS).
• Passwords are stored only as strong one-way hashes (Argon2id).
• Every request is checked against the permissions of the person making it, and each club’s data is kept separate from every other club’s.
• Repeated failed sign-ins are slowed and then temporarily locked, and sessions end when their tokens are misused.
• Significant actions are written to an audit trail.
• Our database provider encrypts the disks it runs on.

No system is perfectly secure. If we learn of a breach that affects your information, we will tell the affected clubs and people without undue delay, and as the law requires.

Recipro is intended for adult members and staff of private clubs. If a club adds a junior member, the club is responsible for having the parent or guardian’s agreement.

If we change this policy we will update the date at the top, and tell clubs about any significant change before it takes effect.

Questions, requests or concerns: blakesandlin@recipro.club. For demo enquiries you can also use our Book a Demo page.