GOALD PRIVACY POLICY

Last updated: 15 June 2026

1. Introduction

Goald Ltd (“GOALD”, “Goaldchallenges.com”, “we”, “our”, “us”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, share and protect personal information when individuals use the GOALD platform, website, mobile applications and associated services (collectively, the “Services”).

GOALD provides a platform that enables users to participate in challenges, track progress, upload content, engage with communities and support initiatives organised by partner organisations, including charities, schools, educational institutions and programme providers.

We process personal information in accordance with:

UK General Data Protection Regulation (UK GDPR);
Data Protection Act 2018;
EU General Data Protection Regulation (where applicable);
Privacy and Electronic Communications Regulations (PECR);
ICO Age Appropriate Design Code (Children’s Code).

2. Data Controller

The data controller responsible for the operation of the GOALD platform and website is:

Goald Ltd

Purity House

2 Estuary Business Park

Henry Boot Way

Hull

HU4 7DY

Company Number: 12618398

Email: privacy@goaldchallenges.com

Website: https://www.goaldchallenges.com

3. Controller Relationships with Partner Organisations

GOALD allows third-party organisations to create and manage challenges using the platform.

Where a user participates in a challenge organised by a partner organisation, both GOALD and the relevant organisation may process personal information for their own purposes. In these circumstances:

GOALD acts as an independent data controller for information processed in connection with user accounts and operation of the GOALD platform.
The partner organisation acts as an independent data controller for information processed in connection with administration of its programme or challenge.

Users should also review the privacy information provided by the relevant challenge organiser.

4. Information We Collect

We may collect the following categories of personal information.

Identity Information

Full name
Username
Date of birth
Age category
Organisation affiliation

Contact Information

Email address

Account Information

Login credentials
Account preferences
Account activity

Challenge Participation Information

Challenge registrations
Progress information
Completion status
Achievement records
Rankings and leaderboards

User Generated Content

Videos
Images
Comments
Challenge submissions

Technical Information

IP address
Browser type
Device information
Operating system
Application version
Device identifiers

Usage Information

Features used
Pages visited
Session information
Interaction records

Support Information

Customer support enquiries
Moderation records
Safeguarding reports

5. Children and Young People

Users must be at least 13 years of age to create an account and use the Services.

During the registration process, users are required to provide their date of birth. This information is used to:

determine eligibility to use the platform;
apply age-appropriate privacy protections;
support safeguarding obligations;
ensure compliance with applicable laws.

GOALD recognises that many users may be children or young people. The platform is designed in accordance with the principles of the ICO Age Appropriate Design Code.

For users under 18 years of age:

privacy protections are applied by default;
marketing communications are disabled unless appropriate consent has been provided;
personal information visibility is restricted;
only information necessary for participation is collected;
children’s data is not used for behavioural advertising.

Further information can be found in the GOALD Children’s Data & AADC Statement.

6. How We Use Personal Information

We use personal information to:

create and manage user accounts;
enable participation in challenges;
administer competitions and programmes;
verify challenge completion;
recognise achievements;
provide support services;
ensure platform security;
investigate misuse and fraud;
moderate user content;
improve platform functionality;
comply with legal obligations;
provide safeguarding support where required.

7. Lawful Bases for Processing

We process personal information under one or more of the following lawful bases.

Contract: Where processing is necessary to provide the Services requested by the user.

Legitimate Interests: Including platform administration, security monitoring, fraud prevention, safeguarding, and service improvement.

Consent: Where consent is required, including marketing communications, optional cookies, and certain promotional activities.

Legal Obligation: Where processing is required by law.

8. Challenge Participation and Data Sharing

Where users participate in challenges organised by partner organisations, GOALD may share information necessary to administer the challenge. All partner organisations will have adequate data protection methods implemented. Details of the partner organisation will be available within the platform.

This may include:

participant name;
email address;
challenge registration status;
challenge progress information;
completion status;
achievement information.

Information is shared only where necessary to:

administer challenges;
verify participation;
recognise achievement;
provide participant support;
fulfil safeguarding obligations;
generate programme reports.

Participation in a challenge does not automatically subscribe a participant to marketing communications from either GOALD or the challenge organiser.

9. Marketing Communications

GOALD may send:

newsletters;
product updates;
platform announcements;
future challenge invitations.

Marketing communications will only be sent where the user has actively opted in or another lawful basis applies.

Users may withdraw consent at any time.

Children’s personal information is not used for behavioural advertising.

No advertising usage in place.

10. Analytics

GOALD uses Google Analytics to understand how users interact with the platform and improve service performance.

Analytics information is used to:

identify technical issues;
improve platform functionality;
understand feature usage;
enhance user experience.

Analytics information is not used to make automated decisions that produce legal or similarly significant effects.

Goald uses Google Firebase for crash tracking and identifying technical issues.

11. Transfer of Data outside the UK

GOALD’s primary infrastructure is hosted using Google Cloud Platform in the Europe West 1 (Belgium) region. Primary hosting is within Google Cloud data centres located in Belgium (EEA). Where Google LLC or affiliated entities located outside the UK/EEA may access personal data for support, maintenance, or operational purposes, such transfers are protected by Google's Data Processing and Security Terms, including the UK International Data Transfer Addendum and/or approved Standard Contractual Clauses.

Certain service providers, including Google Firebase, may process limited personal information outside the United Kingdom.

International transfers are subject to safeguards being implemented including:

UK International Data Transfer Addendum;
Standard Contractual Clauses;
UK adequacy regulations where applicable.

GOALD also applies supplementary safeguards including:

encryption in transit;
encryption at rest;
role-based access controls;
multi-factor authentication;
activity monitoring and logging.

12. Security

GOALD maintains appropriate technical and organisational security measures including:

Google Cloud Platform hosting;
encryption of data in transit;
encryption of data at rest;
multi-factor authentication for administrative accounts;
role-based access controls;
logging and monitoring;
regular software updates and patching.

No internet-based service can be guaranteed completely secure, but GOALD takes reasonable steps to protect personal information.

13. Data Retention

Personal information is retained for the duration of a user’s account and for up to twelve (12) months following account closure or inactivity.

After this period, personal information will be securely deleted or irreversibly anonymised unless:

retention is required by law;
safeguarding obligations apply;
retention is necessary for dispute resolution;
retention is required for the establishment, exercise or defence of legal claims.

14. Individual Rights

Individuals may have rights to:

access personal information;
correct inaccurate information;
request deletion;
restrict processing;
object to processing;
withdraw consent;
receive data in portable format;
lodge a complaint with a supervisory authority.

Requests should be sent to: privacy@goaldchallenges.com

15. Complaints

If you have concerns about how GOALD handles personal information, please contact us first.

You also have the right to lodge a complaint with:
Information Commissioner’s Office (ICO)
https://www.ico.org.uk

16. Changes to This Policy

GOALD may update this Privacy Policy from time to time.

Material changes will be communicated through the platform, website or by email where appropriate. The latest version will always be available at:
https://www.goaldchallenges.com

17. Contact Us