My GoClub legal
My GoClub privacy policy
The full MY GoClub privacy policy explains how the programme uses registration, membership, points, partner and reward data.
MY GOCLUB PRIVACY POLICY Version 1.1 Last updated: 9 September 2026 1. PURPOSE OF THIS NOTICE This Privacy Notice explains how CheapGo Ltd collects, uses, stores, analyses and shares personal information in connection with: (a) the My GoClub early-access and registration-of-interest list; (b) My GoClub membership accounts; (c) membership cards, numbers, QR codes and other identifiers; (d) Points, Tiers, Rewards and partner benefits; (e) My GoClub communications and marketing preferences; (f) customer support, complaints and fraud prevention; and (g) the My GoClub website and related digital services. This policy should be read alongside the MY GoClub terms and any privacy information shown when you use a particular CheapGo or Partner service. 2. WHO IS RESPONSIBLE FOR YOUR INFORMATION CheapGo Ltd is the principal controller of personal information used to operate the core MY GoClub programme. CheapGo Ltd is registered in England and Wales under company number 16012350. Registered address: CheapGo Ltd Director Generals House 15 Rockstone Place Southampton, England, SO15 2EP United Kingdom Email: [enquiries@cheapgo.co.uk](mailto:enquiries@cheapgo.co.uk) Where a Partner independently determines how it uses information for its own sale, booking, fulfilment, legal compliance or customer-service purposes, that Partner may be a separate controller. The Partner's own privacy notice will then also apply. Where CheapGo and another organisation jointly determine the purposes and means of a specific activity, we will provide appropriate information about that arrangement. 3. DATA PROTECTION LAW We process personal information under applicable United Kingdom data protection and privacy law, including the UK General Data Protection Regulation, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations where applicable. 4. EARLY-ACCESS REGISTRATION Submitting a My GoClub early-access or registration-of-interest form does not create a membership account. For an early-access registration, we may collect: (a) first name; (b) last name; (c) email address; (d) telephone number, where provided; (e) areas of interest selected on the form; (f) marketing choices; (g) consent records, including the wording presented, date, time and method of response; and (h) limited technical information required to operate and protect the form. We use this information to: (a) record your interest; (b) send requested information about the launch or availability of My GoClub; (c) understand the types of services potential Members are interested in; (d) prevent duplicate or abusive submissions; (e) respond to enquiries; and (f) retain evidence of your communication choices. Registration for early access does not automatically enrol you as a Member, award Points, assign a Tier or create a login. 5. INFORMATION WE MAY COLLECT Depending on how you use My GoClub, we may collect the following categories of personal information. 5.1 Identity and contact information This may include: (a) your name; (b) email address; (c) telephone number; (d) postal or delivery address; (e) date of birth or age confirmation where an age restriction applies; and (f) identity-verification information where reasonably required for a restricted Reward, account recovery or fraud investigation. 5.2 Membership information This may include: (a) membership number or card number; (b) account status; (c) digital membership card or QR code; (d) registration and activation date; (e) Tier and Tier history; (f) Points balance and Points ledger; (g) Rewards claimed or redeemed; (h) referrals and promotional-code activity; and (i) account restrictions, suspensions or closure records. 5.3 Transaction and activity information This may include: (a) a CheapGo or Partner booking, order or transaction reference; (b) transaction date, location and participating Partner; (c) eligible transaction value or Points amount; (d) booking or attendance status; (e) refund, cancellation or chargeback status; (f) Reward or discount used; (g) scan, validation or redemption status; and (h) evidence supplied for a missing-Points claim. We do not routinely receive a complete item-by-item record of every Partner purchase. Where a product or category is required to qualify for an offer, or where you choose to submit a future receipt claim, we may process the relevant merchant, date, item, quantity, price and total information to verify Points, maintain purchase history and personalise MY GoClub offers. The relevant claim or Partner journey will explain the information required before it is submitted. 5.4 Interests and preferences This may include your stated interest in: (a) CheapGo airport services; (b) day trips and events; (c) student or community offers; (d) Partner Rewards; (e) particular locations, activity categories or event types; and (f) communication channels and frequency preferences. 5.5 Communications and support information This may include: (a) emails and messages sent to us; (b) customer-support records; (c) complaints; (d) survey responses; (e) missing-Points claims; (f) fraud or account-access reports; and (g) records of our response. 5.6 Technical and website information This may include: (a) IP address; (b) browser and device type; (c) operating system; (d) website pages viewed; (e) referral source; (f) timestamps; (g) error and security logs; (h) approximate location derived from an IP address; and (i) cookie, local-storage or similar technology identifiers. 5.7 Marketing information This may include: (a) whether you have opted in or opted out; (b) the companies, brands and communication channels covered by your choice; (c) messages sent, delivered, opened or selected, where measurement is enabled; (d) unsubscribe and preference-change records; and (e) campaign and offer engagement. 6. HOW WE RECEIVE YOUR INFORMATION We may receive personal information: (a) directly from you when you register, activate an account, make a booking, contact us or redeem a Reward; (b) through your use of CheapGo and My GoClub websites and services; (c) from a participating Partner when you present a Membership Identifier, earn Points or redeem a Reward; (d) from a CheapGo service where a transaction qualifies for My GoClub benefits; (e) from payment, booking, email, hosting, analytics, customer-support and security providers acting on our instructions; (f) from an Affiliated Brand where you have been properly informed of the transfer; and (g) from another person where they make an authorised booking, referral or enquiry involving you. 7. WHY WE USE YOUR INFORMATION We use personal information for the following purposes. 7.1 Registration and membership administration We use information to: (a) process early-access registrations; (b) activate and manage membership accounts; (c) issue and validate Membership Identifiers; (d) maintain account and contact information; (e) respond to account requests; and (f) provide service notices. 7.2 Points, Tiers and Rewards We use information to: (a) verify Qualifying Activities; (b) calculate and allocate Points; (c) maintain a Points ledger; (d) determine Tier status; (e) process Reward redemptions; (f) confirm eligibility; (g) investigate missing or disputed Points; and (h) reverse Points linked to refunds, cancellations, errors or misuse. 7.3 Partner verification and fulfilment We use and share limited information to: (a) confirm that a membership number is valid; (b) record that an eligible transaction occurred; (c) calculate or confirm Points; (d) generate or validate a redemption code; (e) arrange collection, delivery, admission, booking or fulfilment; (f) prevent a Reward from being used more than once; and (g) resolve a disputed redemption. 7.4 Service analysis and development We may analyse: (a) which services and Rewards Members use; (b) how Points are earned and redeemed; (c) which offers receive engagement; (d) patterns of cancellations, failed redemptions and customer queries; (e) website and account usage; (f) participation by location or customer segment; and (g) programme cost, Partner performance and benefit usage. We use this analysis to plan offers, allocate programme resources, identify operational problems, improve account journeys and assess whether particular benefits should be continued. Where practical, we use aggregated or de-identified information for reporting and planning. 7.5 Personalisation and segmentation We may use membership activity, interests, location at town or regional level, Tier, Points activity and previous engagement to select offers that are more likely to be relevant to you. This may involve profiling for marketing or programme-management purposes. We do not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects on you. Routine automatic calculation of Points, Tier status or offer eligibility may occur according to published rules. You may contact us if you believe an automated calculation is incorrect. 7.6 Fraud prevention and programme protection We may use information to: (a) identify duplicate or false accounts; (b) detect unusual Points or scan activity; (c) prevent unauthorised account access; (d) investigate misuse of promotions or referrals; (e) protect Members, Partners and staff; (f) maintain audit records; and (g) establish, exercise or defend legal claims. 7.7 Legal and regulatory compliance We may use or retain information to: (a) comply with tax, accounting, consumer, data protection and other legal obligations; (b) respond to lawful requests from courts, regulators and law-enforcement authorities; (c) investigate complaints; (d) enforce programme terms; and (e) protect legal rights. 8. OUR LAWFUL BASES We rely on one or more of the following lawful bases. 8.1 Contract and steps requested before a contract We may process information where it is necessary to: (a) take steps at your request before activating membership; (b) manage an activated membership; (c) record Points and Tier status; (d) process a Reward; (e) answer a request relating to your account; or (f) perform the MY GoClub terms. 8.2 Consent We rely on consent where required for: (a) optional email or text-message marketing; (b) marketing by identified Affiliated Brands or Partners; (c) non-essential cookies or similar technologies; (d) optional participation in certain research or surveys; and (e) another activity for which the law requires consent. You may withdraw consent at any time. Withdrawal does not make processing carried out before withdrawal unlawful. 8.3 Legitimate interests We may rely on legitimate interests where the processing is necessary and proportionate for purposes such as: (a) operating and improving the programme; (b) analysing service use; (c) measuring Partner and Reward performance; (d) preventing fraud and misuse; (e) maintaining network and account security; (f) handling complaints and disputes; (g) managing relationships with Members and Partners; (h) maintaining suppression records so that we do not send marketing after an opt-out; and (i) establishing, exercising or defending legal claims. Where we rely on legitimate interests, we consider the purpose, necessity, likely effect on individuals and reasonable expectations of Members. 8.4 Legal obligation We may process information where necessary to comply with a legal or regulatory obligation. 9. MARKETING FROM MY GOCLUB, CHEAPGO AND AFFILIATED BRANDS Marketing is optional and is not a condition of joining the early-access list or becoming a My GoClub Member. Where you give the relevant consent, CheapGo Ltd may send information about: (a) My GoClub membership, Points, Tiers and Rewards; (b) CheapGo airport services; (c) CheapGo day trips, activities and events; (d) student and community offers; (e) Partner Rewards available through My GoClub; and (f) products or services offered by specifically identified Affiliated Brands. The registration form should identify: (a) the company or companies that will send marketing; (b) the relevant brands; (c) whether messages will be sent by email, text message or another channel; and (d) the general types of products and services covered. A reference to "Affiliated Brands" or "group companies" does not by itself permit an unidentified company to send you marketing. Where another company wishes to send marketing in its own name, that company must be identified when consent is obtained or must obtain separate permission. We do not sell personal information to third parties. We do not provide Partners with the My GoClub membership list for their unrelated independent marketing unless you have been clearly informed and a valid lawful basis, including consent where required, has been established. You may withdraw from marketing at any time by: (a) using the unsubscribe link in an email; (b) following the opt-out instructions in a text message; (c) changing your account preferences, where available; or (d) contacting [enquiries@cheapgo.co.uk](mailto:enquiries@cheapgo.co.uk). We may retain your contact details on a limited suppression list after you opt out so that your preference continues to be respected. 10. SERVICE COMMUNICATIONS We may send non-marketing communications necessary to operate your registration or membership, including: (a) early-access confirmation; (b) membership activation; (c) account-security messages; (d) Points and Reward confirmations; (e) booking or fulfilment information; (f) material changes to the programme, Terms or this Notice; (g) suspension or closure messages; and (h) responses to your requests and complaints. Opting out of marketing does not stop necessary service communications. 11. SHARING INFORMATION WITH PARTNERS 11.1 Earning Points When you present or scan a Membership Identifier at a Partner, CheapGo and the Partner may exchange: (a) the Membership Identifier; (b) the Partner or location identifier; (c) the transaction or booking reference; (d) transaction date and status; (e) eligible transaction value or Points amount; (f) an offer or campaign identifier; and (g) confirmation that Points were accepted, rejected, adjusted or reversed. Your name should not normally be required merely to add Points where the Membership Identifier is sufficient. A name or other verification information may be used where needed to prevent misuse, recover an account or resolve a disputed transaction. 11.2 Redeeming a Partner Reward When you redeem a Partner Reward, we may provide the Partner with: (a) your Membership Identifier; (b) your name where required for verification, booking or collection; (c) a redemption, order or booking number; (d) the Reward selected; (e) redemption date, status and expiry date; (f) a QR code, barcode or verification token; (g) quantity or booking details; and (h) contact, delivery or attendance information where needed to fulfil the Reward. The Partner must not use information received solely for validation or fulfilment for unrelated marketing without an independent lawful basis. 11.3 Partner responsibilities A Partner may hold information as an independent controller where it: (a) sells or supplies its own goods or services; (b) manages its own customer transaction; (c) fulfils a booking, delivery or Reward; (d) handles its own legal and accounting obligations; or (e) investigates a complaint relating to its own service. You should review the Partner's privacy notice where the Partner collects information directly from you or uses it for its own purposes. 12. SHARING WITH AFFILIATED COMPANIES AND BRANDS We may share limited personal information with an Affiliated Brand where necessary for: (a) operating a benefit that applies across identified CheapGo group services; (b) allocating Points arising from that brand's service; (c) fulfilling a Reward; (d) account support; (e) fraud prevention; (f) internal administration; or (g) analysis and reporting consistent with this Notice. Where an affiliated company acts only on CheapGo's instructions, it will process information under appropriate contractual controls. Where an affiliated company determines its own purposes, it may be a separate controller and must provide relevant privacy information. We will not treat a general relationship with CheapGo as unlimited permission for all present or future affiliated companies to send marketing. 13. OTHER ORGANISATIONS WE MAY SHARE INFORMATION WITH We may share personal information with: (a) website, cloud-hosting and database providers; (b) email, messaging and customer-support providers; (c) booking, payment and transaction-processing providers; (d) analytics and measurement providers; (e) fraud-prevention, identity-verification and cybersecurity providers; (f) professional advisers, including lawyers, accountants and insurers; (g) courts, regulators, tax authorities and law-enforcement bodies where lawfully required; (h) prospective purchasers, investors or advisers involved in a restructuring, financing, merger or sale, subject to appropriate confidentiality measures; and (i) other service providers required to operate My GoClub. Service providers acting on our behalf may use personal information only for the agreed services and under contractual obligations. 14. SPECIAL-CATEGORY INFORMATION My GoClub does not normally require information about health, ethnicity, religion, political opinions, sexual orientation, trade-union membership, genetic information or biometric identification. Please do not provide this information unless it is necessary for a specific request and we have explained why it is required. Where such information must be processed, we will identify an appropriate lawful basis and additional legal condition. 15. CHILDREN My GoClub is not generally directed at children under 16. Where we expressly permit a person under 16 to participate, we may require involvement or consent from a parent or legal guardian and will limit the information collected to what is necessary for the relevant activity. We do not knowingly use children's information for behavioural advertising. 16. COOKIES, LOCAL STORAGE AND SIMILAR TECHNOLOGIES The My GoClub website may use cookies, local storage and similar technologies. Essential technologies may be used to: (a) operate forms and account sessions; (b) remember security settings; (c) prevent duplicate submissions; (d) maintain a basket, booking or redemption process; (e) detect abuse; and (f) remember whether a privacy or cookie message has been shown. Non-essential analytics or marketing technologies will be used only where permitted by law and, where required, after consent. The separate registration-of-interest page is a local demonstration and may store a browser record named: cheapgo_goclub_interest_v1 This record is intended only to demonstrate the registration flow and does not create a live membership. Information entered on that demonstration page remains in the local storage of the device and browser used for the demonstration rather than being transmitted to CheapGo. Clearing the browser's site data removes the record. Live MY GoClub membership is created or linked through the CheapGo account registration process and stored in the protected membership system. Browser local storage is not the membership database. 17. DATA ANALYTICS We may produce statistical reports about: (a) registrations and membership growth; (b) Points issued, reversed and redeemed; (c) Tier distribution; (d) Reward demand; (e) Partner participation; (f) service interests; (g) campaign engagement; and (h) programme costs and usage patterns. Where a report does not need to identify a person, we will use aggregated or de-identified data. Aggregated information that cannot reasonably identify an individual is not personal information. We may retain and use such information for business planning and reporting. 18. INTERNATIONAL TRANSFERS Some service providers may process information outside the United Kingdom. Where a transfer is subject to United Kingdom international-transfer restrictions, we will use an available legal mechanism, which may include: (a) transfer to a country covered by United Kingdom adequacy regulations; (b) an approved international data-transfer agreement; (c) the United Kingdom addendum to approved standard contractual clauses; (d) another approved safeguard; or (e) a statutory exception where its conditions are satisfied. Where required, we will assess the circumstances of the transfer and apply supplementary measures. 19. HOW LONG WE KEEP INFORMATION We retain personal information only for as long as needed for the relevant purpose, legal obligations, disputes and fraud prevention. The following periods are our general approach. 19.1 Early-access registrations Where you register an interest but do not activate membership, we will normally delete or anonymise the registration within 12 months after the last meaningful contact, unless you renew your interest, remain subscribed to marketing or a longer period is required for a complaint or legal matter. 19.2 Active membership accounts Core account and membership information is normally retained while the account remains active. 19.3 Closed accounts After account closure, we may retain limited account, transaction, Points and redemption records for up to six years where needed for legal claims, accounting, fraud prevention or regulatory compliance. Information not required for these purposes may be deleted or anonymised earlier. 19.4 Marketing records Marketing preference and consent evidence may be kept while marketing continues and for a reasonable period afterwards to demonstrate the basis on which messages were sent. A limited suppression record may be kept for as long as necessary to ensure that an opt-out continues to be honoured. 19.5 Technical and security logs Routine technical logs will normally be retained for up to 12 months, unless a longer period is necessary to investigate a security incident, fraud, complaint or legal claim. 19.6 Partner transactions and redemptions Records required to verify Points and Rewards may be retained for the duration of the account and afterwards where needed for reconciliation, complaints, tax, accounting or legal claims. 20. HOW WE PROTECT INFORMATION We use organisational and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, loss and misuse. These measures may include: (a) access controls based on job responsibilities; (b) account authentication; (c) encryption in transit where appropriate; (d) logging and monitoring; (e) staff confidentiality obligations; (f) supplier due diligence and contractual controls; (g) backup and recovery procedures; and (h) review of suspected security incidents. No internet or storage system can be guaranteed to be completely secure. You should protect your membership credentials and notify us if you suspect unauthorised use. 21. YOUR DATA PROTECTION RIGHTS Depending on the circumstances and lawful basis, you may have the right to: (a) be informed about how your information is used; (b) request access to your personal information; (c) request correction of inaccurate or incomplete information; (d) request deletion of information; (e) request restriction of processing; (f) object to processing based on legitimate interests; (g) object at any time to direct marketing; (h) request transfer of information in a portable format where applicable; (i) withdraw consent; (j) ask for information about relevant automated processing; and (k) complain about how your information has been handled. Some rights are subject to legal conditions and exemptions. For example, we may need to retain certain records despite an erasure request where they are required for legal obligations, legal claims or fraud prevention. We may request reasonable information to confirm your identity before acting on a request. 22. HOW TO EXERCISE YOUR RIGHTS To exercise a data protection right, contact: Email: [enquiries@cheapgo.co.uk](mailto:enquiries@cheapgo.co.uk) Postal address: Data Protection Request CheapGo Ltd Director Generals House 15 Rockstone Place Southampton, England, SO15 2EP United Kingdom Please describe the information or account concerned and the right you wish to exercise. You are not normally required to pay a fee. We will respond within the period required by applicable law. 23. DATA PROTECTION COMPLAINTS You may submit a complaint about our use of personal information by emailing [enquiries@cheapgo.co.uk](mailto:enquiries@cheapgo.co.uk) with "Data Protection Complaint" in the subject line. Your complaint should include: (a) your name and contact details; (b) a description of the concern; (c) relevant dates, account details or transaction references; and (d) the outcome you are seeking. We will acknowledge a data protection complaint within 30 days and respond without undue delay. We may contact you for further information where needed to investigate the complaint. You may also complain to the United Kingdom Information Commissioner's Office. You do not need to complete our internal process before approaching the regulator, although contacting us first may allow the issue to be resolved more quickly. Visit [ico.org.uk/make-a-complaint](https://ico.org.uk/make-a-complaint) or call 0303 123 1113. 24. CHANGES TO THIS NOTICE We may update this Notice to reflect changes in law, programme features, Partners, technology or business operations. The latest version will be published on the My GoClub website with the date of the update. Where a change materially affects how existing Member information is used, we will provide an appropriate notice and obtain fresh consent where consent is required. 25. CONTACT US Questions about this Notice or the use of personal information may be sent to: Email: [enquiries@cheapgo.co.uk](mailto:enquiries@cheapgo.co.uk) Postal address: My GoClub Privacy CheapGo Ltd Director Generals House 15 Rockstone Place Southampton, England, SO15 2EP United Kingdom