Privacy Policy
Effective date: October 2025
Go Agency Ltd (“us”, “we”, or “our”) operates the goagency.co.uk website and associated online and offline services (the “Service”).
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you interact with our Service, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our Service, you consent to the practices described in this Privacy Policy. Unless otherwise defined, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.
1. Definitions
Personal Data
Information that identifies or can identify a living individual.
Usage Data
Information collected automatically when you interact with the Service (e.g. IP address, browser type, device details, time spent on pages).
Cookies
Small data files stored on your device to enable functionality and improve your experience.
Data Controller
The organisation determining how and why your data is processed.
Go Agency Ltd is the Data Controller.
Data Processor
A third party that processes data on behalf of the Data Controller.
User (Data Subject)
Any individual who uses our Service.
2. Information We Collect
Personal Data You Provide
We may collect personal information when you:
• Submit an enquiry
• Request quotes or information
• Engage us for a service
• Communicate with us
• Subscribe to updates
This may include:
• First and last name
• Email address
• Phone number
• Postal address (if provided)
• Contact preferences
• Project or service-related information
You are responsible for ensuring your information is accurate and up to date.
Usage Data
Collected automatically when using the Service, such as:
• IP address
• Browser type and version
• Device information
• Referring URLs
• Pages visited and time spent
• Interaction and clickstream data
• Diagnostic, performance, and security data
This helps us maintain the security and performance of our Service.
Cookies & Tracking Technologies
We use cookies for:
• Essential site functionality
• Preferences and user settings
• Security
• Analytics and performance measurement
You can disable cookies in your browser. Some features of the Service may not function properly if cookies are disabled.
3. Legal Bases for Processing (UK GDPR)
We process personal data when one or more of the following applies:
Consent
You have given clear consent for a specific purpose. You may withdraw consent at any time.
Contractual Necessity
Processing is required to provide services or fulfil an agreement with you.
Legal Obligation
We must process data to comply with UK laws and regulatory requirements.
Legitimate Interests
We process data where necessary for our legitimate business purposes (e.g. improving the Service, security, analytics), unless your rights override those interests.
Vital Interests
Processing may be necessary to protect life or safety.
4. How We Use Your Data
We use collected data to:
• Provide and maintain our Service
• Respond to enquiries and deliver requested services
• Communicate updates, administrative messages, and essential notices
• Allow participation in interactive features
• Improve and analyse Site performance
• Ensure security and prevent fraud
• Comply with legal and regulatory requirements
We do not process sensitive personal information.
5. Marketing Communications
We may send marketing communications if:
• You have provided consent, or
• We rely on legitimate interests for business-to-business communications permitted under PECR.
You may unsubscribe from marketing at any time via the link provided in emails or by contacting us.
Unsubscribing from marketing does not affect service-related communications (e.g. project updates, billing information).
6. Sharing Your Personal Data
We do not sell your data. We may share personal data with:
Service Providers (Data Processors)
Categories may include:
• Website hosting and infrastructure providers
• Cloud-based file storage providers
• Analytics and measurement platforms
• Project management systems
• IT, security, and support providers
Providers only access data as required to perform contracted services and are bound by confidentiality and data protection obligations.
Business Transfers
If we engage in a merger, asset sale, or acquisition.
Legal Requirements
Where required to comply with law or protect rights, safety, or security.
7. International Data Transfers
Some service providers and systems may store or process personal data outside the UK.
Where this occurs, we ensure appropriate safeguards, such as:
• UK-approved Standard Contractual Clauses
• UK Addendum or UK International Data Transfer Agreement
• Adequacy decisions where applicable
• Contractual and organisational measures ensuring equivalent data protection
8. Data Retention
We retain personal data only for as long as necessary for:
• Providing services
• Fulfilling contractual obligations
• Legal, tax, and regulatory requirements
• Resolving disputes
• Enforcing agreements
Usage Data is retained for a shorter period unless required for security or Service improvement.
Where data cannot be immediately deleted (e.g. backup archives), it is securely isolated until deletion is possible.
9. Data Security
We use appropriate technical and organisational measures to protect personal data, including:
• Secure hosting environments
• Access controls and permissions
• Encryption where appropriate
• Monitoring for security vulnerabilities
• Staff confidentiality obligations
Only authorised employees and contractors with a legitimate business need have access to personal data.
Despite our efforts, no method of digital storage or transmission is completely secure.
10. Automated Decision-Making & Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on users.
Any analytics performed is used solely for service improvement and monitoring.
11. Your Rights
Under UK GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion where applicable
• Request restriction of processing
• Object to certain types of processing
• Request data portability
• Withdraw consent at any time
We may need to verify your identity before responding to requests.
12. Children’s Privacy
Our Service is not intended for individuals under 18 years of age.
We do not knowingly collect personal data from children.
If you believe data has been collected from a minor, contact us so we can remove it promptly.
13. Do-Not-Track (DNT) Signals
We do not currently respond to DNT browser signals, as no uniform industry standard exists.
If a standard emerges, we will update this policy accordingly.
14. Links to Third-Party Websites
Our website may include links to external websites.
We are not responsible for the content, security, or privacy practices of third-party sites.
We recommend reviewing their respective privacy policies.
15. Complaints
You have the right to lodge a complaint with the UK’s supervisory authority:
Information Commissioner’s Office (ICO)
ico.org.uk
Telephone: 0303 123 1113
We encourage you to contact us first so we may address any concerns.
16. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
Updates become effective upon posting, with a revised effective date at the top of this page.
Where material changes occur, we may provide additional notice via email or prominent on-site messaging.
17. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Email:
Postal Address:
Go Agency Ltd
Registered Address: 1 Tower House, Tower Centre, Hoddesdon, Hertfordshire, United Kingdom, EN11 8UR
