Privacy policy

This policy explains what personal data Go10 collects when you visit this website or contact us, why we collect it, who we share it with, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Go10 is the data controller for personal data collected through this website. You can reach us at privacy@go10gateway.com.

What we collect and why

• Contact form submissions — name, email, company, and the message you send us. Used solely to respond to your enquiry. Lawful basis: legitimate interests (responding to unsolicited business contact).
• Account data (CMS users only) — email and authentication identifiers managed by our auth provider. Lawful basis: contract (operating the editor account).
• Aggregate analytics — privacy-friendly, cookie-less page-view counts via Plausible. No personal identifiers, no cross-site tracking. Lawful basis: legitimate interests (understanding site usage).
• Error and performance telemetry — limited diagnostic data via Sentry when something breaks (URL, browser type, stack trace). IP addresses are truncated. Lawful basis: legitimate interests (keeping the site reliable).

Who we share data with

We use the following processors. Each is contracted under a Data Processing Agreement and only handles data on our instructions.

• Vercel — website hosting and edge delivery.
• Supabase — database and media storage for the CMS.
• Clerk — authentication for CMS editors.
• Plausible — privacy-friendly aggregate analytics.
• Sentry — error and performance monitoring.
• Resend — transactional email delivery (form replies, account emails).

We do not sell personal data and we do not share it with advertisers.

International transfers

Some of our processors are based outside the UK. Where data leaves the UK we rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, plus supplementary measures where appropriate.

How long we keep data

• Contact-form messages: up to 24 months from last contact.
• CMS user accounts: for the duration of the account, deleted on request.
• Aggregate analytics: indefinite, but contains no identifiers.
• Error telemetry: 90 days, then deleted by the processor.

Your rights

Under the UK GDPR you can ask us to:

• Confirm what personal data we hold about you and provide a copy.
• Correct anything that is inaccurate.
• Delete your data where we have no overriding lawful reason to keep it.
• Restrict or object to certain processing.
• Receive a portable copy of data you provided to us.

Email privacy@go10gateway.com to exercise any of these rights. We will respond within one calendar month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.