Privacy Policy

GoOfficial Ltd ("GoOfficial") respects your privacy. We fully comply with the General Data Protection Regulation ("GDPR"), the UK Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and other regulations regarding the processing of personal data and privacy.

In this Privacy Policy, you can read what kind of personal data we collect and how we store, protect and use your personal data. Furthermore, you can read for which purposes we will use your personal data and with whom your data will be shared. You can also see how you can access, manage or delete your own personal information and your contact preferences.

What does this Privacy Policy apply to?

This Privacy Policy applies to your use of our Website and to all products and services that we offer you via our Website:

www.goofficial.com
(and any future domain names operated by GoOfficial Ltd)

Personal data

In this Privacy Policy, your "personal data" means information or pieces of information that could allow you to be identified as a person.

What personal data do we process?

GoOfficial collects your personal data when you book tickets or hospitality, contact us, sign up to our newsletter, or enter a giveaway. We rely on different lawful bases under UK GDPR Article 6(1) depending on the activity:

Performance of a contract — for processing your booking, taking payment, sending tickets, and providing customer service.
Legitimate interests — for spam and fraud prevention on our forms, security logging, and protecting our business from financial loss.
Consent — for marketing emails (where you have opted in), giveaway entries, and any non-essential cookies or marketing-attribution storage (see the "Cookies and similar technologies" section).
Legal obligation — for keeping financial records as required by HMRC and the Companies Act 2006.

The personal data we collect may include:

Name/surname: Title, first name(s), surname(s).
Postal Address: For billing, delivery and verification purposes.
Email Address: Used to communicate with you, provide booking information, create a unique client ID, and – if you opt in – to send promotional updates.
Other Information: Order details, booking history, payment status, and relevant details you provide during booking.
Marketing source data: If you have given marketing consent in our cookie banner, we record limited technical information describing how you arrived on our Website — such as UTM campaign parameters, Google Ads or Facebook click identifiers, the referring website, and the page you first landed on. This information is stored alongside your order and is used to measure the performance of our marketing activities. The lawful basis for this processing is your consent under UK GDPR Article 6(1)(a). You can withdraw consent at any time via the "Cookie preferences" link in the footer.

Cookies and similar technologies

When you first visit our Website we show you a cookie banner with two categories you can choose between:

Strictly necessary — always on. Required for Stripe payment processing, Cloudflare Turnstile spam and fraud protection, admin login, and keeping your active checkout session. Includes a small first-party cookie (go_cookie_consent) used solely to remember your consent choice for 12 months. These are exempt from consent under PECR Regulation 6(4) because they are strictly necessary to provide the service you have requested.
Marketing — off by default. If you accept, we load Google Ads conversion tracking and record marketing-source signals from your browser (UTM parameters, Google or Facebook click identifiers, the referring website, and the page you first landed on). We use this to measure the performance of our advertising. The lawful basis is your consent under UK GDPR Article 6(1)(a).

You can change or withdraw your choices at any time using the "Cookie preferences" link in the footer of every page. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

Your booking

When you visit our Website and make a booking, we may collect and store:

Contact details (email, address, phone if provided).
Booking details (event, order ID, order details, price).
Preferences and consents (such as marketing opt-in).
Marketing attribution data (UTM parameters, Google or Facebook click identifiers, referring website and landing page) — only if you have given marketing consent in our cookie banner. See the "Cookies and similar technologies" section above.

We generate a client profile within our Customer Data Platform to improve your booking experience and customer service.

Storage and retention

We hold your personal data for the following periods:

Order records (booking, payment, customer details, guest details): retained for 6 years from the date of the order, to comply with UK financial record-keeping obligations under the Companies Act 2006 and HMRC VAT requirements.
Marketing attribution data on an order: retained for the lifetime of that order record (i.e. 6 years), as part of the order's audit trail.
Customer profile (used for repeat-booking convenience and customer service): retained until you request deletion, or until 5 years after your last interaction, whichever is sooner.
Cookie consent record (the go_cookie_consent cookie): 12 months from when you record your choice, then we ask again.
Conversion data sent to Google Ads (only if you have given marketing consent): retention is governed by Google's own retention policies (currently up to 540 days for Google Ads conversion data).
Newsletter subscribers: retained until you unsubscribe or 3 years after your last engagement, whichever is sooner.
Data may be retained longer where required by law (e.g. an HMRC investigation) or where necessary to establish, exercise or defend a legal claim.

How do we protect your personal data?

We protect your personal data from unauthorised or unlawful access, alteration, disclosure, use or destruction. Measures include:

SSL/TLS encryption in transit.
Access to admin systems limited to authorised staff with two-factor authentication, individual login credentials, and full audit logging.
Secure hosting environments and third-party processors bound by data processing agreements.

Minimum age

Our Website and services are intended for use by adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we may have collected information from someone under 18, please contact us at info@goofficial.com so we can investigate and delete it.

Third-party service providers

We share specific personal data with the following third parties to deliver our services. Each is bound by a data processing agreement and is only sent the minimum personal data needed for its role.

Vercel Inc. — website hosting (United States).
Supabase Inc. — database and file storage (United States).
Stripe Payments UK Ltd & Stripe Inc. — payment processing (United Kingdom and United States).
Resend Inc. — transactional email delivery for booking confirmations and digital tickets (United States).
Cloudflare Inc. — spam and fraud prevention on our forms (United States).
Google Ireland Ltd / Google LLC — Google Ads conversion tracking, only if you have given marketing consent in our cookie banner (Ireland and United States).

Where personal data is transferred outside the United Kingdom, we rely on appropriate safeguards under UK GDPR Article 46, including the UK–US Data Bridge and the International Data Transfer Agreement / EU Standard Contractual Clauses where applicable.

GoOfficial Ltd does not sell or rent your data to third parties.

Promotional conditions

GoOfficial promotions may be subject to additional conditions, including:

Age restrictions (participants under 18 require parental consent).
Prizes are non-transferable and not exchangeable.
In the event of cancelled events, no compensation will be given unless required by law.
By entering a promotion, you may consent to publication of your name or content you submit for promotional purposes.

Your rights in managing your personal data

Under UK GDPR and the Data Protection Act 2018, you have the right to:

Access the personal data we hold about you (a Subject Access Request).
Have inaccurate personal data corrected.
Have your personal data erased (the "right to be forgotten"), subject to our legal record-keeping obligations.
Restrict or object to specific processing.
Receive your personal data in a structured, machine-readable format (data portability).
Withdraw your consent for marketing or for non-essential cookies at any time, without affecting the lawfulness of any processing carried out before the withdrawal.

To exercise any of these rights, email info@goofficial.com. We will respond within one calendar month of receiving your request, as required by UK GDPR Article 12(3).

If you are dissatisfied with how we handle your data or your request, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

https://ico.org.uk/make-a-complaint/

Contact details

GoOfficial Ltd
Registered Office: London, UK
Website: www.goofficial.com
Email: info@goofficial.com

Modifications to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes — for example adding a new processor, changing the purposes of processing, or altering the cookie categories shown in our banner — we will display a prominent notice on our Website. Where the change affects categories you have consented to, our cookie banner will re-appear automatically so you can re-evaluate your choices.

Privacy Policy – GoOfficial Ltd