PRIVACY POLICY

This policy explains how Go-JU! Limited (“Go-JU!”, “we”, “us”) collects, uses, and protects your personal data when you use our website at go-ju.com (the “Site”) and our related services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Go-JU! Limited is the data controller responsible for your personal data. Our registered office is in Richmond upon Thames, London, United Kingdom. [Insert company registration number and registered address before publishing.]

For all privacy questions: info@go-ju.online.

2. What data we collect

Information you give us

• Account / membership data: name, social handle, email address, postcode (when you join the loyalty programme).
• Loyalty data: points balance, tier, redemption history.
• Joke submissions: name, handle, email, and the joke text you submit.
• Drone-finder game entries: name, handle, email, and the grid square you pinned.
• Contact & wholesale enquiries: name, business name, email, location, message content.
• Order data (when ordering merch or drinks): billing & shipping address, items ordered, payment method — payment card details are never stored by us; they are handled directly by our payment processor.

Information collected automatically

• Cookies and similar technologies: see our Cookie Policy for the full breakdown.
• Device and usage data: IP address, browser type, pages viewed, referring URL, approximate location derived from IP.

3. How and why we use it

• To run your account and loyalty membership (track points, calculate tier, send rewards).
• To process and fulfil orders, including shipping and customer service.
• To respond to enquiries you send via contact, wholesale, or press forms.
• To moderate and publish joke submissions and drone-game entries (we may publish your handle and joke text on our channels — see also section 4).
• To send marketing communications when you have opted in (you can unsubscribe at any time).
• To improve the Site, understand traffic, and detect abuse.
• To meet legal obligations (e.g. tax records, fraud prevention).

4. Legal basis

We process your personal data on the following lawful bases under UK GDPR Article 6:

• Contract — to deliver orders, run your loyalty account, and provide services you've signed up for.
• Consent — for marketing emails, non-essential cookies, and publishing your joke / handle on our public channels. You can withdraw consent at any time.
• Legitimate interests — to run and improve the Site, prevent fraud, and respond to enquiries. We balance these interests against your rights.
• Legal obligation — for tax, accounting, and other regulatory requirements.

5. Who we share it with

We don’t sell your personal data. We share it only with the trusted service providers we need to run the business:

• Hosting & database: Supabase (database and auth provider).
• Payments: our card-payments processor (e.g. Stripe) handles payment data directly — we never see or store full card numbers.
• Email & marketing: our transactional email provider (e.g. Resend, Mailgun) and, where you opt in, our marketing email platform (e.g. Mailchimp).
• Analytics: our analytics platform (e.g. Google Analytics 4 or Plausible) only when you accept analytics cookies.
• Fulfilment & shipping: the courier or 3PL handling your order.
• Professional advisors: accountants, lawyers, and auditors when legally required.
• Authorities: regulators, law enforcement, or courts when legally required.

Each provider is contractually bound to handle your data securely and only on our instructions.

6. International transfers

Some of our service providers (e.g. Supabase, Google) may store or process data outside the UK. Where this happens, we rely on adequacy decisions or Standard Contractual Clauses approved by the UK Information Commissioner to ensure equivalent protection.

7. How long we keep it

• Account & loyalty data: while your account is active, plus 24 months of inactivity, then deleted unless we’re legally required to retain it.
• Order & transaction records: 6 years (UK tax law requirement).
• Marketing data: until you unsubscribe.
• Contact form messages: 12 months from last contact.
• Cookies: see Cookie Policy for individual lifetimes.

8. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data (subject to certain legal exceptions).
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a machine-readable format and have it transferred to another controller where technically feasible.
• Objection — object to processing based on legitimate interests, including direct marketing.
• Withdraw consent — for any processing based on consent, at any time.
• Complain — lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).

To exercise any of these rights, email info@go-ju.online. We respond within 30 days.

9. Cookies

Full details are in our Cookie Policy. You can change your cookie preferences at any time by clearing your browser’s site data for go-ju.com — the consent banner will reappear and you can choose again.

10. Children

Go-JU! is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, contact us and we will delete it.

11. Security

We use industry-standard security measures including encrypted connections (HTTPS), encrypted databases at rest, role-based access controls, and regular reviews of our security posture. However, no online service can guarantee absolute security — you share data online at your own risk.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be flagged on the Site and, where required, communicated to you by email.

13. Contact & complaints

For privacy questions, requests, or complaints, contact: info@go-ju.online.

If you’re unhappy with our response, you can complain to the UK Information Commissioner’s Office at ico.org.uk or by phone on 0303 123 1113.