Skip to content

Legal

Updated 2 October 2026

GDPR & data protection

Your rights over the information we hold about you, and how to use them. Our data protection practice in plain terms, not a restatement of the regulation.

Who is responsible

Go10 Limited, company no. 06015132, is the data controller. Write to info@go10.co.uk, call 0800 669 6397, or post to c/o Bishop Fleming LLP, 1–3 College Yard, Worcester WR1 2LB.

To confirm: whether Go10 has appointed a Data Protection Officer, and the ICO registration number. A DPO is only mandatory in specific cases, but if one exists their contact details belong here; if not, name the person who owns data protection internally.

What we hold, and why

For visitors to this website: nothing. The site runs no analytics, sets no cookies and makes no third-party requests — seecookies for the detail.

For people who contact us: the content of the enquiry and the correspondence that follows. For people at the brands and retailers we work with: the business contact details and records needed to run the commercial relationship. Our lawful bases are legitimate interests for enquiries and performance of a contract once there is one, both set out in the privacy policy.

Your rights

  • Access — a copy of the personal data we hold about you.
  • Rectification — correction of anything inaccurate or incomplete.
  • Erasure — deletion, where we have no overriding reason to keep it.
  • Restriction — a pause on using it while a dispute about it is resolved.
  • Objection — to processing we base on legitimate interests, including profiling.
  • Portability — a machine-readable copy of data you gave us, where it is held by consent or contract.
  • Withdrawing consent — at any time, where consent is what we relied on.

We do not make automated decisions about you, and we do not profile you.

Making a request

Email info@go10.co.uk with "Data protection request" in the subject line and tell us which right you are using. You do not need a particular form of words, and there is no charge.

We will respond within one month. If a request is complex we may extend that by up to two further months, and we will tell you within the first month if we need to. We may ask you to confirm your identity before we release anything — that protects you as much as us.

Transfers outside the UK

To confirm: whether any supplier holding personal data is outside the UK or EEA, and the safeguard relied on if so — the UK adequacy regulations, the International Data Transfer Agreement, or the EU standard contractual clauses with the UK Addendum. Go10 operates between the UK, Ireland and China, so this needs answering properly rather than being assumed.

Keeping it safe

This site is served over HTTPS and collects nothing, so there is no database of visitors to breach.

To confirm: the organisational measures — access control, device encryption, staff training, and the breach procedure. A reportable breach has to reach the ICO within 72 hours, which only works if someone is named to do it.

When we handle data for someone else

Go10 is not only a controller of its own records. Where we process personal data on behalf of a brand or a retailer — handling their customers' orders, returns or support — we act as their processor, and we commit to the following.

  • We process that data only on the controller's documented instructions.
  • We will not sub-contract any part of it without the controller's prior written authorisation.
  • We maintain an information security programme appropriate to the risk, and we build privacy into new systems rather than adding it afterwards.
  • We will tell the controller without undue delay after becoming aware of a personal data breach, and make every notification the law requires.
  • We put processes in place so that the controller can meet data subject requests it receives.
To confirm: whether the information security programme is documented and who owns it, and whether there is a standard data processing agreement Go10 signs with brands and retailers. A commitment not to sub-contract without written authorisation is one Go10 has to be able to evidence — including for its warehouse and fulfilment partners, who are sub-processors.

Complaints

Tell us first: info@go10.co.uk. If we cannot resolve it, you can complain to the Information Commissioner's Office at ico.org.uk, or call their helpline on 0303 123 1113. If your enquiry concerned Go10 CE Distribution Limited in Ireland, the Irish Data Protection Commission at dataprotection.iemay be the right authority instead.