Privacy policy

Who is responsible

SBSuccess runs Go Online and is responsible for the personal data described here. When you send a request to a business, that business also receives your details and is responsible for how it uses them.

What we collect

We collect only what each feature needs:

• Customers: your name and phone number when you order, book, enrol or ask for a quote; the delivery address and any note you add; the details of the request. Customers do not need an account.
• Businesses: the account holder’s name, email and phone; the password (stored only as a one-way hash); the business profile and catalogue; credit and billing records. Card payments for top-ups are handled by our payment providers; we do not receive full card numbers.
• Waitlist: the business name, type and country and the email or phone you give us.
• Technical data: the IP address of each request, used for a short time for security and to limit abuse. Our page logs record counts, not who you are.

No health records

We do not collect medical records. For doctors, clinics and laboratories we keep booking details only — the service, the time, your name and phone number. Booking forms for health businesses have no free-text note, so please do not send symptoms, diagnoses or results through Go Online.

How we use it

We use personal data to:

• deliver your request to the business and show you its status on the tracking page;
• alert businesses about new requests and run their credits and billing;
• keep Go Online secure, prevent fake requests and abuse, and answer support questions;
• understand how Go Online is used through totals that do not identify anyone.

What we never do

We do not sell personal data, we do not show advertising, and our websites load no third-party trackers or analytics scripts.

Who sees your data

Your details are shared only as follows:

• The business you send a request to sees your name and phone number (and your address for a delivery). For a quote request, the business sees your phone number only after it accepts the request.
• Service providers that host and deliver Go Online — servers, content delivery, email delivery and, for businesses, payment providers — under contracts that let them use the data only for us.
• Authorities, when the law requires it.

Public business information

A business’s profile, contact details and catalogue are published on its website and in the directory, and copied to our content delivery network so pages load fast. Customer details are never public.

How long we keep it

We keep personal data only as long as we need it:

• Requests (orders, bookings, enrolments, quote requests): kept so the business and the customer can see them, then deleted or made anonymous two years after the request, unless the law requires longer.
• Business accounts: kept while the account is open. After it is closed, the data is deleted within 90 days, except billing records that accounting law requires us to keep.
• Waitlist entries: deleted once we have contacted you about Go Online opening in your country, and at the latest after 12 months.
• Technical logs: kept for up to 30 days.
• Backups: an encrypted copy of our database is made every night for disaster recovery and kept for 30 days. Data that you or a business delete — also after a deletion request or a takedown — can remain in these backups for up to 31 days, then it is deleted automatically. Backups are locked so that nobody can change or delete them early, not even on request.
• Copy of business photos: we also keep a recovery copy of the photos businesses upload. Deleting a photo from a page does not remove it from our photo storage or from that copy. When we receive a deletion request or a takedown notice for a photo, we remove it by hand from our photo storage and from the copy, every stored version included, within 31 days of receiving the request.

Data on your device

Business websites save your cart, your last order and your booking progress in your browser’s storage so they survive a reload. This stays on your device and is not sent to us until you place a request. See the cookie policy for details.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it for a purpose. Write to us at the address below; we reply within 30 days. For a request you sent to a business, you can also contact that business directly. You can complain to the data protection authority in your country.

Where data is processed

Go Online serves businesses worldwide, so data may be processed in countries other than yours. When it is, we use providers and contract terms that protect it to the standard the law requires.

Security

Connections are encrypted, passwords are hashed, payment keys that businesses give us are encrypted and can never be read back, and each business can see only its own data.

Children

Go Online is not meant for children under 16 to use on their own.

Changes and contact

We publish every change on this page with a new date. Questions or requests about your data: SBSuccess, [email protected].