Last modified: 29 September 2026
This Privacy Policy explains how Codesauce Limited collects and uses personal information through Go Surrey.
Who we are
Codesauce Limited is the data controller for Go Surrey. We are registered in England and Wales under company number 09981304. Our registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
For privacy enquiries, email info@gosurrey.co.uk.
Information we collect
Depending on how you use Go Surrey, we may collect:
- your name, email address, telephone number and account details;
- information about your business, charity, organisation and representatives;
- directory profiles, events, jobs, press releases, images and other submitted content;
- membership, billing and payment status information;
- messages, support requests and other communications; and
- device, security, cookie and website usage information.
Payment card details are processed and stored by our payment provider. We may receive a payment method identifier and limited details such as the card type, expiry date and final digits, but we do not normally receive or store complete card details. Where you authorise future charges, the provider may retain your payment method for the purposes described in our Terms and Conditions.
How we use information
We use personal information to:
- create and manage accounts and memberships;
- take payments and administer renewals;
- review, publish and manage submitted content;
- provide support and service communications;
- protect the website, prevent misuse and resolve disputes;
- improve and measure our services;
- send marketing where permitted; and
- meet our legal, tax and regulatory obligations.
Our lawful bases
We process information where it is necessary to perform a contract or take requested steps before a contract, to comply with a legal obligation, or for our legitimate interests in operating, securing and improving Go Surrey and publishing relevant local information.
We rely on consent where required, including for certain marketing and non-essential cookies. You may withdraw consent at any time without affecting earlier lawful processing.
Published content and information about other people
Profiles, listings and submitted content may be publicly available and may appear in search engines, social media, newsletters and third party caches. Public information may be viewed outside the United Kingdom.
If you provide personal information about another person, you must be authorised to do so and must direct them to this Privacy Policy where appropriate.
Who we share information with
We share information only where needed to operate Go Surrey, process payments, publish content, meet legal duties or protect legitimate interests.
Our providers may include WordPress, Cloudflare, Cloudways and Linode for website services; Google Workspace and Postmark for email; Stripe for payments; Simple Analytics and search services for website measurement; and Google, Meta, X and other platforms for advertising, publishing and social media.
Providers may change. They may act as our processors or as independent controllers under their own privacy policies. We may also disclose information to professional advisers, regulators, law enforcement bodies or a purchaser of our business where lawful and necessary.
International transfers
Some providers may process information outside the United Kingdom. Where required, we use a lawful transfer mechanism and appropriate safeguards.
How long we keep information
We keep personal information only for as long as reasonably needed for the purposes described above:
- account and membership records are normally kept during the relationship and for up to six years afterwards where needed for legal, tax or dispute purposes;
- payment and accounting records are normally kept for six years or longer where required by law;
- published content may remain available while it has continuing directory, editorial or historical value, subject to periodic review and applicable rights;
- marketing information is kept until you unsubscribe or we no longer need it, with a minimal suppression record retained to respect your choice; and
- security and technical records are kept only for a proportionate period based on operational and security needs.
Information may be kept longer where required by law, a dispute, fraud prevention or a legal claim. We delete or anonymise information when it is no longer needed.
Cookies and similar technologies
We use essential cookies for functions such as security, accounts and login. We may also use analytics and advertising technologies.
Where consent is required, non-essential technologies will not be used until you choose to allow them. You can change your choices through our cookie controls. Browser settings may also allow you to delete or block cookies, although essential website functions may then be affected.
Marketing
You can unsubscribe from marketing at any time using the link in an email or by contacting us. Service messages about an account, payment or submission are not marketing and may still be sent where necessary.
Your rights
Depending on the circumstances, you may have the right to access, correct, erase, restrict or receive your personal information, and to object to certain processing. Where processing relies on consent, you may withdraw it at any time.
To exercise a right, email info@gosurrey.co.uk. We may need to verify your identity.
Complaints
Please contact us first so we can try to resolve your concern. You may also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/.
Changes to this policy
We may update this policy when our services, providers or legal obligations change. The latest version will be published here with its revision date.
