Privacy Policy
Last updated: November 6, 2026
Vadavision Limited (Company number 16579017), operating as "GoLegally" ("we", "us", or "our"), operates the GoLegally platform including the website at golegally.com and all related services. We are the controller of the personal data described in this Privacy Policy. It explains how we collect, use, disclose and safeguard your information when you use our platform, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
Personal Information You Provide
When you use our services, we may collect:
- Name, email address, phone number, and postal address
- Identification details and documents required for filings you ask us to make
- Company details: company number, registered office, directors, shareholders
- Financial information: invoices, ledger data, tax returns (processed via Accounting Engine)
- Documents uploaded for registration or compliance filings
- Payment information (processed by our payment gateway partner, we do not store card details)
Information Collected Automatically
- Device and browser information, IP address, and operating system
- Usage data: pages visited, features used, session duration
- Advertising click identifiers when advertising consent is given
- Your privacy choices and browser privacy signals
- Cookies and similar technologies described in Section 6
2. How We Use Your Information
We use personal data only where we have a lawful basis under UK GDPR:
- To provide and maintain our services: company registration, compliance filings, invoicing, and tax computation (performing our contract with you)
- To process filings with government bodies on your behalf (performing our contract with you)
- To generate invoices, maintain accounting records, and compute taxes via our Accounting Engine (performing our contract with you)
- To communicate with you about your filings, account, and service updates (performing our contract with you, and our legitimate interest in keeping you informed)
- To improve our products, fix bugs, and develop new features (our legitimate interests)
- To comply with legal obligations and respond to lawful requests (legal obligation)
- For optional analytics, performance monitoring and ad campaign measurement (your consent)
3. Data Sharing
We share your personal data only when necessary:
- Government Authorities: When filing on your behalf with Companies House, HMRC, the Intellectual Property Office, or other regulatory bodies. This is the core purpose of our service.
- Service Providers: Payment gateways, cloud hosting, email delivery, and communication services that help us operate the platform.
- Professional Partners: If you engage an accountant or company secretary through our platform, we share relevant case information with them to perform the service.
- Legal Requirements: When required by law, regulation, or legal process.
We do not sell personal data for money. The site shows no ads. Where applicable, consent to ad campaign measurement can be refused or withdrawn through the privacy and cookie settings supplied on the site.
4. Data Storage, Transfers & Security
Your data is stored on secure servers and through our cloud infrastructure. Where we transfer personal data outside the United Kingdom, we do so only with a safeguard UK GDPR recognises, such as an adequacy decision. We use industry-standard security measures including:
- Encryption in transit (TLS 1.3) and at rest
- Role-based access control and multi-tenant data isolation
- Regular security audits and vulnerability scanning
- Presigned URLs for document access (time-limited, per-user)
5. Your Rights (UK GDPR)
Under UK GDPR and the Data Protection Act 2018, your rights include:
- Access: Ask for a copy of your personal data and how it's being processed.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Ask us to delete your personal data, subject to legal retention requirements.
- Restriction: Ask us to limit how we use your data in certain cases.
- Portability: Ask for the data you gave us in a portable format.
- Objection: Object to processing based on our legitimate interests, and to direct marketing at any time.
- Withdrawing consent: Withdraw consent you have given, at any time, without affecting what happened before.
To exercise these rights, email legal@golegally.com or use our data erasure request page. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to put things right first.
6. Cookies
Essential storage supports security, requested features, account sessions, and service delivery. Under the Privacy and Electronic Communications Regulations (PECR), a certified consent platform asks for one choice per category before enabling optional analytics, performance monitoring or ad campaign measurement. Analytics may load with storage denied and send limited cookieless consent and measurement signals before a choice is made.
Refusing optional technologies does not prevent use of the site. Consent can be withdrawn through the privacy and cookie settings link shown on the site. We also honour supported browser privacy signals for ad campaign measurement.
What we store and measure
| Category | Purpose | Storage / duration |
|---|---|---|
| Account and security | essentialSigns users in, protects forms, prevents abuse, and keeps the service secure. | Session and security cookiesSession or as stated when an account is created |
| Bot and abuse protection | essentialSilently verifies data-search requests to deter automated extraction without blocking ordinary page browsing or search-engine crawling. | Security signals and a short-lived, single-use verification tokenVerification tokens expire after 5 minutes; security data is kept only as long as the protection needs it |
| Requested tool and chat state | essentialKeeps calculator inputs or an unfinished service flow on the same device when the user asks the feature to remember progress. | First-party browser storageUntil the user clears it |
| Usage analytics | analyticsCounts visits and how pages are used. In the EEA, the UK, and Switzerland, analytics storage stays off until the visitor consents. | Analytics cookies and identifiersUp to 24 months |
| Aggregate visit and speed measurement | analyticsMeasures anonymous, aggregate visits and page speed without cookies or personal data, so it runs regardless of optional cookie choices. | Request and performance data; no cookies and no advertising profileDaily visitor hashes expire after 24 hours; aggregate figures are kept longer |
| Performance and error monitoring | performance MonitoringShows how fast pages load and which errors visitors meet, so they can be fixed. Loaded only once performance monitoring is allowed and stopped when that choice is withdrawn; in the EEA, the UK, and Switzerland it stays off until the visitor consents. | Page load times, web vitals and errors, with a per-tab session id in session storage; no cookies, no personal data, no query strings and no session replayThe session id ends when the tab closes; monitoring data is kept for a limited period |
| Interaction analytics | analyticsShows how visitors scroll and click, including recordings of page sessions, linked to the visitor's enquiry once they give their number. In the EEA, the UK, and Switzerland, it starts only after analytics consent. | Analytics cookies and per-page measurement identifiersUp to 12 months |
| Visit journeys | analyticsShows the path visitors take through the site — which pages they open and how far they get in a sign-up or checkout — linked to the visitor's enquiry once they give their number. Starts only after analytics consent and stops when it is withdrawn. | A first-party visitor id cookie, a visit id in browser storage, and the pages opened and steps taken on this siteVisitor id up to 12 months; a visit ends after 30 minutes without activity |
| Session recordings | recordingsLets our team replay a visit to see where the site was hard to use or where a visitor needed help. Recorded only once the visitor allows recordings (and analytics), and stopped when either is withdrawn. | Recordings of page sessions (layout, clicks, scrolling), with everything typed into forms hiddenKept for a limited period, then deleted |
| Ad campaign measurement | advertisingTells us which of our own ads or campaigns brought a visitor and whether they went on to enquire or buy. The site shows no ads. Off until consent where the EEA, UK, or Swiss requirements apply. | A first-party visitor id, campaign and ad click identifiers, and conversion signalsVisitor id up to 12 months; campaign and click identifiers up to 90 days |
| Links we send | essentialJoins a purchase made through a link we sent in a chat or message to that conversation. It is never shared with advertisers. | A first-party cookie with the reference a link we sent carries30 days |
| Embedded video | external MediaIn regulated European regions, embedded video loads after the relevant choice or after the visitor expressly chooses to load that video. | Requests and storage by the video service after a video is loadedVaries by video service |
Service providers process data in these categories only on our instructions and under contract. Advertising partners may change as ad auctions change.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. For compliance filings and accounting records, we retain records for the period required by law (usually six years for tax and accounting records). You can ask for earlier deletion of data we are not required to keep.
8. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform. If a change requires fresh consent, optional technologies will remain off until you choose again.
10. Contact Us
For privacy-related questions or to exercise your rights:
- Email: legal@golegally.com
- Data protection contact: dpo@golegally.com
- Address: Vadavision Limited, 128 City Road, London EC1V 2NX, United Kingdom