Who we are
- 1.1
GO DGTL LLP is responsible for the personal data described in this Privacy Notice unless another GO DGTL company is identified when the data is collected.
Scope
- 2.1
This Notice applies to website visitors, applicants and leads, clients and their personnel, portal users, compliance-tool users, supplier and partner representatives, and persons communicating with GO DGTL.
Information we collect
- 3.1
We may collect name, job title and business contact details; company, ownership and registration information; identification and verification information; website, product and business-model information; advertising accounts and platform data; campaign, spend and transaction data; Wallet and billing records; payment status and limited payment-method details; communications and support tickets; compliance submissions and reports; technical, device, IP and login information; cookie and analytics data; and marketing preferences.
How we obtain information
- 4.1
We obtain information directly from you, from your employer or business, through the portal, through advertising platforms and providers, from payment providers, from partners and introducers, from public company registers, and from security and fraud-prevention services.
Purposes and lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries and applications | Legitimate interests; steps before contract |
| Providing Services | Contract; legitimate interests |
| Account and provider onboarding | Contract; legitimate interests; legal obligations |
| Billing, Wallet administration and reconciliation | Contract; legitimate interests; legal obligations |
| Compliance, fraud and security reviews | Legitimate interests; legal obligations |
| Compliance-tool reports | Contract or requested pre-contractual service |
| Customer support | Contract; legitimate interests |
| Record keeping and disputes | Legitimate interests; legal obligations |
| Service communications | Contract; legitimate interests |
| Marketing | Consent or legitimate interests, as permitted |
| Cookies and tracking | Consent, except strictly necessary technologies |
Who receives information
- 6.1
We may share relevant information with GO DGTL group companies; employees and contractors; Upstream Providers and agencies; advertising platforms; banks and payment providers; Stripe; CRM and communication providers, including HubSpot; hosting and cloud providers; AI and compliance-tool providers; accountants, auditors and legal advisers; fraud, security and verification providers; and regulators, courts or authorities where required.
Stripe
- 7.1
Stripe processes payment and payment-method information when the Client uses Stripe billing.
- 7.2
Stripe’s own privacy materials explain its processing of payment and contact information.
International transfers
- 8.1
Some recipients may process data outside the United Kingdom or European Economic Area.
- 8.2
Where required, GO DGTL uses adequacy regulations or decisions, approved standard contractual clauses, the UK International Data Transfer Addendum, or another valid transfer mechanism.
Retention
| Data category | Proposed retention |
|---|---|
| Unsuccessful applications | 12–24 months |
| Client and contract records | 6–7 years after termination |
| Financial and transaction records | 6–7 years |
| Support communications | 3 years |
| Compliance reports | 2–3 years |
| Raw compliance uploads | 30–90 days |
| Security logs | 12–24 months |
| Marketing records | Until opt-out plus suppression record |
Security
- 10.1
GO DGTL uses proportionate technical and organizational controls designed to protect personal data.
- 10.2
No online service can guarantee absolute security.
Automated analysis
- 11.1
The compliance tool may use automated analysis to produce preliminary risk findings.
- 11.2
GO DGTL does not make a decision producing legal or similarly significant effects solely through the automated tool.
- 11.3
Human review may be requested or required.
Marketing
- 12.1
You may opt out of marketing at any time.
- 12.2
Opting out does not prevent necessary service communications.
Your rights
- 13.1
Subject to applicable law, you may have rights to access your data, correct inaccurate data, request deletion, restrict processing, object to processing, receive portable data, withdraw consent and complain to a supervisory authority.
Complaints
- 14.1
Contact GO DGTL first at privacy@go-dgtl.media.
- 14.2
You may also complain to the UK Information Commissioner’s Office.
Changes
- 15.1
We may update this Notice and will publish the revised date.