Privacy Policy
This policy explains how Go2 For You Ltd collects, uses, stores and protects personal information when you visit our website, purchase from us, open an account, contact our team or otherwise interact with our services.
Our commitment to your privacy
We only use personal information where we have a lawful reason to do so. We aim to be transparent about how information is used, keep it secure and respect the rights available to individuals under UK data-protection law.
1. Introduction and controller details
This privacy policy applies to visitors to our website, customers, prospective customers, suppliers and other people who interact with our business or services.
Go2 For You Ltd is the data controller for the personal information described in this policy. This means that we decide why and how that information is processed.
Burnham Business Park,
Burnham-on-Crouch,
Essex, CM0 8TE
We comply with the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, as amended.
2. Information we collect
We collect and use personal information only where it is relevant to our business activities and where we have a lawful basis for processing it.
- Identity and contact data: name, job title, employer or company, postal address, email address and telephone number.
- Financial and transaction data: payment information, order history, invoices, returns and account transactions.
- Technical and usage data: IP address, browser type, device details, page views, site interactions and performance data.
- Profile and preferences: account settings, saved preferences, feedback and communication choices.
- Correspondence: emails, calls, messages, live chats and support enquiries.
- Marketing and communication data: marketing preferences and records of consent, objections or opt-outs.
3. Where personal information comes from
We normally collect information directly from you when you place an order, apply for an account, make an enquiry, submit a form, subscribe to marketing, browse our website or communicate with our team.
We may also receive personal information from:
- Your employer or colleagues
- Trade bodies and business directories
- Publicly available business sources
- Credit-reference agencies
- Payment providers and banks
- Suppliers and manufacturers
- Delivery and logistics partners
- Marketing partners
- Technology and platform providers
Where personal information is obtained from a third party, we will provide relevant privacy information within a reasonable period, normally within one month, or when we first communicate with you where required.
4. Children’s data
Our products and services are intended for business customers and are not directed at children under the age of 18.
We do not knowingly collect personal information from children. If we become aware that such information has been received, we will take appropriate steps to remove it unless the law requires us to retain it.
5. Purposes of processing and lawful bases
The table below explains the main reasons we process personal information and the lawful bases we rely upon.
| Purpose | Lawful basis |
|---|---|
| Setting up and managing customer accounts, processing orders, arranging delivery, supplying products and services, and dealing with returns or complaints. | Contract for individual customers, or legitimate interests when managing business customer contacts. |
| Preparing quotations, responding to enquiries and communicating about orders, services or account matters. | Legitimate interests in responding to enquiries and managing customer relationships, or contract where the communication relates to an agreement. |
| Processing payments, issuing invoices, managing credit, recovering debts and maintaining financial records. | Contract, legal obligation and legitimate interests in managing credit risk and business finances. |
| Sending order confirmations, delivery updates, account notices and important service communications. | Contract, legal obligation or legitimate interests in keeping customers informed. |
| Sending marketing about products, services, offers, news and events. | Consent where required by PECR, or legitimate interests where business-to-business marketing is permitted without consent. |
| Using cookies and similar technologies on our website. | Consent for non-essential technologies. Strictly necessary technologies are used where required to deliver the website or service. |
| Improving our website, products, customer experience and business operations. | Legitimate interests in developing and improving our services, subject to applicable cookie rules. |
| Publishing customer references, testimonials or case studies. | Legitimate interests in promoting our business. We seek permission before naming individuals, using logos or publishing testimonials. |
| Meeting legal obligations, responding to regulators or law enforcement, resolving disputes and protecting our legal rights. | Legal obligation and legitimate interests in protecting our business and complying with lawful requests. |
6. Direct marketing
We may contact you with information about products and services that may be relevant to you or your organisation. Marketing may be sent by email, telephone, post, social media or online advertising, depending on the details available and the rules that apply.
Consent and PECR
Where PECR requires consent, we will only send electronic marketing where valid consent has been provided or another permitted basis applies, such as the soft opt-in for relevant marketing to existing customers.
Where business-to-business marketing is legally permitted without consent, we rely on our legitimate interests, subject to your right to object.
Opting out
You can opt out at any time by using the unsubscribe link in a marketing email or by contacting us. We may retain a suppression record so that we can honour your request and avoid contacting you again.
Third-party contact data
Where marketing details are obtained from a third party, we expect that organisation to confirm that the information was collected and shared lawfully and that appropriate privacy information and permissions were provided.
7. Cookies and tracking technologies
Our website uses cookies and similar technologies to provide essential functionality, remember preferences, analyse usage and, where permission has been provided, support advertising and personalised content.
These technologies may include browser cookies, pixels, tags, local storage and similar storage or access tools.
EvolutionX first-party cookies
Our website is built on the EvolutionX platform. The following cookies are primarily required for security, login, shopping-basket and account functionality.
| Cookie | Description and purpose | Retention |
|---|---|---|
| XSRF-TOKEN | Protects website visitors against cross-site request forgery. Strictly necessary for security. | Up to 3 days |
| evo_session | Maintains session information required for login, baskets and other website features. | Up to 3 days |
| session_cart | Remembers products placed in the shopping basket. | Up to 30 days |
| remember_me | Remembers login status where the user requests this feature. | Up to 12 months |
| products_display_mode | Remembers display preferences, such as grid or list view. | Approximately 6 hours |
| product_compare | Stores products selected for comparison. | Session |
| quote_product_list | Stores products added to a quotation request. | Session |
| user_consent_uuid | Stores an identifier linked to cookie-preference settings. | Session or persistent |
| skip_punchout_alert | Remembers a user’s choice to dismiss certain punchout alerts. | Session or persistent |
| auth0_transient | Supports secure single sign-on functionality provided through Auth0. | Session |
| auth0_session | Maintains the secure Auth0 single sign-on session. | Session |
| calculator{...} | Remembers selections made while using supported website calculators. | Session or persistent |
Mandatory third-party services
- Google reCAPTCHA: used on forms and during checkout to protect the website from spam and abuse.
- YouTube: embedded videos may use the youtube-nocookie.com domain so that optional cookies are not set unless a video is played.
Optional analytics and marketing services
Depending on the services active on the website, optional technologies may include:
- Google Analytics and Google Ads
- Stripe payment-security technologies
- AudioEye accessibility services
- Meta, LinkedIn or other social-media pixels
Non-essential technologies will only be used where the required consent has been obtained.
Managing cookie preferences
- Use the EvolutionX cookie banner to accept, reject or customise optional cookies.
- Use the Cookie Preferences link on the website to amend or withdraw consent.
- Change your browser settings to block or remove cookies. Blocking essential cookies may prevent some website functions from working.
- Use relevant third-party advertising and analytics opt-out tools where available.
- Use the unsubscribe link in marketing emails to change email-marketing preferences.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
8. Who we share personal information with
We may share relevant personal information with:
- Suppliers and manufacturers
- Delivery and logistics partners
- Payment providers, banks and credit-reference agencies
- Insurers and professional advisers
- IT, hosting and system-administration providers
- CRM and marketing platforms
- Website, analytics and accessibility providers
- Regulators, courts and law-enforcement bodies
- Parties involved in a sale, merger, acquisition or restructuring
Service providers are required to protect personal information and use it only for the purposes for which it has been provided, unless they act as an independent controller with their own legal duties.
9. International transfers
Some service providers may process personal information outside the United Kingdom.
Where information is transferred internationally, we use appropriate protections where required, including:
- UK International Data Transfer Agreements or the UK Addendum to EU Standard Contractual Clauses.
- UK adequacy regulations where the destination country has been recognised as providing an adequate level of protection.
- Additional technical, organisational or contractual measures where appropriate.
Information about relevant service providers and transfer safeguards is available on request.
10. Data retention
We retain personal information only for as long as necessary for the purpose for which it was collected, to manage our business relationships or to meet legal, accounting and regulatory duties.
| Data category | Typical retention period |
|---|---|
| Customer and supplier accounts | For the duration of the relationship and normally six years after it ends. |
| Order and transaction records | Normally six years, or up to seven years where required for tax records. |
| Marketing and consent records | Until consent is withdrawn, an objection is received or normally two years after the last meaningful interaction. |
| Suppression records | Retained where necessary to ensure that opt-outs and objections continue to be respected. |
| Website analytics and usage data | Normally between 14 and 26 months, with information anonymised where possible. |
| Finance and tax records | Normally six to seven years, depending on the relevant requirement. |
| Correspondence and support records | Normally three years unless a longer period is needed for legal, contractual or dispute-management purposes. |
Information that is no longer required will be securely deleted, anonymised or archived in accordance with our records-management procedures.
11. Your rights
Depending on the circumstances, you may have the following rights under UK data-protection law:
- Access: request a copy of personal information held about you.
- Rectification: request correction of inaccurate or incomplete information.
- Erasure: request deletion where information is no longer required, consent has been withdrawn or the processing is unlawful.
- Restriction: ask us to pause or limit processing in certain circumstances.
- Data portability: receive applicable information in a structured, commonly used and machine-readable format.
- Objection: object to processing based on legitimate interests, including direct marketing.
- Withdraw consent: withdraw consent at any time where processing relies upon it.
- Automated decisions: receive protections relating to solely automated decisions that produce legal or similarly significant effects.
We do not currently use solely automated decision-making or profiling that produces legal or similarly significant effects.
Responding to requests
We normally respond to valid requests within one month. This may be extended by up to two further months where a request is particularly complex or numerous. We will explain any extension.
We may ask for reasonable proof of identity before providing information or acting on a request.
Requests are normally free of charge. Where a request is manifestly unfounded, excessive or repetitive, we may charge a reasonable fee or refuse the request as permitted by law.
Complaints
You can complain to the Information Commissioner’s Office if you believe your personal information has been mishandled:
12. Customer references and case studies
We may refer to corporate customers in marketing, tenders or case studies to demonstrate our experience and service quality.
- We will normally refer only to the company unless permission has been obtained to use named individuals, job titles or contact details.
- We will seek permission before using a customer logo, testimonial or named case study.
- Customers may object to or withdraw permission for a reference by contacting admin@go2.uk.com .
- We will not publish commercially sensitive or confidential information without permission.
13. Security and data breaches
We use appropriate technical and organisational measures to protect personal information. These may include access controls, authentication, encryption, system monitoring, security testing, staff training and supplier-management procedures.
If a personal-data breach occurs, we will assess the potential risk to affected individuals. Where required, we will notify the Information Commissioner’s Office and affected individuals without undue delay.
14. Changes to this policy
We may update this policy to reflect legal, regulatory, technical or operational changes.
Material changes may be communicated through a website notice, email or cookie-management notification where appropriate.
The “Last updated” date at the top of this page shows when the policy was most recently revised.
15. Contact and privacy queries
Contact us to make a data-protection request, exercise your rights or raise a privacy query.
- Company: Go2 For You Ltd
- Email: admin@go2.uk.com
- Telephone: 01277 802 222
- Address: Unit 13b, Windward House, Burnham Business Park, Burnham-on-Crouch, Essex, CM0 8TE
Have a privacy question?
Contact our team if you would like to exercise a data-protection right, request access to your information or ask how your data is being used.
Burnham Business Park,
Burnham-on-Crouch,
Essex, CM0 8TE