Privacy Policy
Effective Date: October 27, 2025
This Privacy Policy explains how GB Gold Ltd (Company Number 16691469, 30 Crown Road, Norwich, England, NR1 3DT), trading as Great British Gold ("GB Gold," "we," "us," or "our"), collects, uses, and protects your personal data when you use our website, request a postage pack, or submit items to us.
We are committed to protecting your privacy in compliance with the UK General Data Protection Regulation (GDPR) and other relevant data protection legislation.
1. Data We Collect
We collect personal information that is necessary to provide you with our 'cash for gold' service, process your transaction, and communicate effectively with you.
The data we may collect includes:
Contact Information: Your full name, physical address, email address, and telephone number.
Transaction Information: Details about the items you send, the valuation offer, and your acceptance or rejection.
Financial Information: Your bank account details (sort code and account number) for processing payments upon acceptance of an offer.
Identification Data: Valid photo ID (passport or driving license) for transactions valued at £10,000 or more, as required by law.
Website Usage Data: Information about how you use our website (e.g., IP address, browser type, pages viewed) to improve our service.
2. Lawful Basis for Processing Your Data
Under GDPR, we process your data based on the following lawful bases:
Purpose of Data Processing: Lawful Basis for Processing
Contract Performance: To fulfil our contract with you, specifically to: send the Postage Pack, perform the item valuation, communicate the offer, and process payment or return the items.
Legal Obligation: To comply with legal requirements, such as carrying out ID checks for high-value transactions (£10,000 or more) and maintaining records for financial reporting.
Legitimate Interests: To manage customer returns, handle complaints, ensure the safety and security of our services, and improve our business operations.
3. How We Use Your Data
Your personal data is used solely for the purposes related to your transaction and our legal compliance:
To provide the service you requested, including sending the prepaid, insured Postage Pack.
To communicate with you regarding your items, the valuation offer, and any returns.
To process and issue payment for accepted offers via instant bank transfer (BACS) or cheque.
To meet legal and regulatory requirements, particularly for high-value transactions that necessitate ID verification.
To manage returns of declined items and ensure they are appropriately insured.
To respond to any complaints or disputes in accordance with our Terms and Conditions.
4. Sharing Your Data
We will not share your personal data with third parties for marketing purposes. We only share your data as necessary to fulfil our contractual obligation to you or comply with the law:
Royal Mail: We share your name and address to arrange the delivery of your Postage Pack and the return of your items, ensuring the required insurance is in place.
Payment Providers/Banks: We share your name and bank details to execute the payment for accepted offers.
Legal/Regulatory Authorities: We may disclose your data if legally required to do so, for example, to comply with anti-money laundering regulations or in connection with a legal dispute.
5. Data Security and Retention
Security: We take appropriate technical and organisational measures to secure your personal and financial information against unauthorised access, disclosure, alteration, or destruction. Your data is stored securely.
Retention: We only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
6. Rights Under GDPR
As a data subject under the UK General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct data that is inaccurate or incomplete.
Right to Erasure ('Right to be Forgotten'): You can ask us to delete your personal data when there is no longer a legitimate reason for us to keep it.
Right to Restrict Processing: You can request that we temporarily halt the processing of your data.
Right to Data Portability: You can request that we transfer your data to you or a third party in a structured, commonly used, machine-readable format.
Right to Object: You can object to our processing of your data where we are relying on a legitimate interest.
To exercise any of these rights, please contact us in writing using the contact details below.
7. Cookies
We may use cookies on our website to collect information about your browsing habits. This helps us to improve our website and provide you with a better user experience. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.
8. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
By Post: Data Protection Officer, GB Gold Ltd, 30 Crown Road, Norwich, England, NR1 3DT
By Email: info@gbgold.co.uk
If you are not satisfied with our response to any complaint regarding our use of your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.