Privacy Policy

Last updated: 10 April 2026

Orthentik Ltd, trading as Gofted, runs gofted.com — a peer-to-peer marketplace for used golf equipment. This policy tells you what data we collect, why, and what your rights are. Plain English. Questions: hello@gofted.com.

Who We Are

Data controller: Orthentik Ltd, trading as Gofted
Contact: hello@gofted.com
ICO registration: C1911568. UK GDPR applies.

What Data We Collect

When you register

When you buy or sell

Payment data

We use Stripe for all payments. You enter card details directly into Stripe's secure form. We never see or store your card number, CVV, or bank details. Stripe's privacy policy applies.

When you browse

Google Analytics (GA4) collects anonymised usage data: pages visited, session duration, general location. We do not build individual profiles or target you with adverts.

Why We Process Your Data

PurposeLegal basis
Running your account and processing transactionsContract (Article 6(1)(b))
Sending transactional emailsContract
Resolving disputesLegitimate interests (Article 6(1)(f))
Fraud prevention and platform securityLegitimate interests
Marketing emailsConsent (Article 6(1)(a))
Site analyticsConsent

Who We Share Data With

We do not sell your data. We share it only with:

Your Rights

Under UK GDPR: access, rectification, erasure, portability, restriction, objection. Email hello@gofted.com to exercise any right. We respond within one month.

Complaints: ico.org.uk or 0303 123 1113.

Data Retention

Data typeRetention
Account dataUntil deletion + 12 months
Transaction records7 years (legal requirement)
Messages2 years from transaction date
Analytics26 months (Google default)

Security

HTTPS, encrypted storage, access controls. No system is 100% secure. Found a vulnerability? Email hello@gofted.com.

Children

Gofted is not for users under 18. Contact us if you believe a child has registered.

Contact

Email: hello@gofted.com. We respond within 5 business days.