Privacy policy

This policy explains what personal data Monthlygo collects, why we hold it, how long we keep it, who we share it with, and the rights you have over it.

Last updated 8 October 2026.

1. Who is responsible

Monthlygo is the data controller for the information described in this policy. For questions about it, or to exercise any of the rights in section 8, contact hello@monthlygo.com. We are not required to appoint a data protection officer, and that address reaches the people who can act on a request.

Where you are a customer of a business using Monthlygo, that business and Monthlygo are joint controllers of your data. Each of us is responsible for the records we hold. Section 10 explains what that means in practice.

2. What we collect

If you are a customer

Your name, email address and telephone number; the business and plan you joined; your bookings, visits, tickets and balance; and the record of service emails sent to you. We do not store your card details. Stripe does.

If you are on somebody else’s family plan

The name the account holder gave for you, and the visits recorded against it. See section 4.

If you operate a business

Your name, email address and telephone number; your business name, address and plans; your takings and our fees; and a record of actions taken in the dashboard. Your bank details are held by Stripe, not by us.

If you use the mobile app

A push notification token identifying the device, so that reminders and alerts can reach it. It is deleted when you delete your account.

Everyone

What is technically necessary to serve the site, and — only with your permission — analytics about which pages are visited. See section 6.

We ask for nothing we do not use. There is no tracking of your activity across other websites, no profiling, and no data bought from anybody else.

3. Why we hold it, and on what basis

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights and concluded that it is not: preventing fraud protects the people using the platform as much as it protects us. You may object to that processing at any time, and we will stop unless we can show compelling grounds to continue.

We send no marketing. Every email we send is about something you bought or an account you hold. We do not sell personal data, we do not use it for advertising, and we do not promote one business’s customers to another.

4. Children

A family plan allows the account holder to add other people, including children, by name. Where a child is added, the account holder is responsible for providing that name and for the child’s participation in the membership. We hold the name and the visits recorded against it, and nothing else: no contact details, no date of birth, and no account for the child.

A child cannot hold an account on Monthlygo. Buying a membership, booking an appointment or buying a ticket requires an account, and accounts are for people aged 18 or over. Individual events may set a higher minimum age, which is shown before purchase and enforced by the business at the door.

If you believe we hold information about a child that should not be here, email hello@monthlygo.com and we will remove it.

5. Automated decisions

Where a business has enabled it, repeated failure to attend booked appointments can automatically restrict further online booking by that customer. The business can see the restriction and lift it, and you can ask them to. No other decision about you is made by automated means, and none produces a legal effect.

6. Cookies and similar storage

Strictly necessary. These are required for the site to function and are not optional. We set one cookie and use a small amount of browser storage:

Analytics. With your permission we load Google Tag Manager, which loads Google Analytics. These set cookies in your browser that count visits and record which pages are viewed, so we can tell which parts of the site are worth keeping:

Nothing analytical is loaded until you agree. If you decline, or have not answered, no analytics cookie is set and nothing is sent to Google. You are asked once on each device and we remember the answer.

We also keep analytics away from pages whose address is itself private — a sign-in link, a password reset, a shared membership code. On those pages the tag is not loaded at all, so the address cannot reach Google. Elsewhere, where an address contains an identifier, it is replaced before anything is reported.

7. Who we share it with

• The business you bought from sees its own members and bookings. No business can see another’s.
• Stripe processes payments and holds card and bank details under its own terms.
• Resend delivers our service emails, through infrastructure in the European Union.
• Google receives analytics data, and only if you have agreed to it under section 6.
• Railway hosts the service. Your data is stored in the European Union.
• A court or regulator, where the law requires it. Nobody else, in any circumstances.

Where a recipient is outside the United Kingdom, the transfer relies on UK adequacy regulations or on the International Data Transfer Addendum to the standard contractual clauses. Each of these companies is engaged under a written agreement that restricts what they may do with the data.

8. Your rights

Under the UK GDPR you have the right to:

• be told what we hold about you, and to receive a copy of it;
• have inaccurate information corrected;
• have your data erased, subject to section 9;
• restrict how we use it while a question about it is resolved;
• object to processing we carry out on the basis of legitimate interests;
• receive it in a portable format, or have it sent to another provider;
• withdraw consent at any time, where consent is the basis we rely on. This does not affect anything done before you withdrew it.

To exercise any of these, email hello@monthlygo.com. We will respond within one month, and there is no charge. We may ask you to confirm your identity first, which protects you rather than us.

If you are not satisfied with our response you may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, or by telephone on 0303 123 1113. We would prefer the chance to put it right first, but you are not required to come to us before going to them.

9. Deleting your account, and what is kept

You can delete your account yourself, from your account page. Cancel any membership still running first, so that you keep the period you have paid for.

Removed: your name, email address and telephone number; every membership record in your name and any family members on your plans; the notes on your bookings; any sign-in links still outstanding; the push notification token for any device you installed the app on; and your customer record at Stripe.

Retained: the payment records themselves, which HMRC requires for six years, and the invoices a business’s accountant may need. Your name is removed from all of them. A business you left keeps a count of the visits it served, which it needs in order to file its accounts, and which no longer identifies you.

These records are anonymised rather than deleted outright because visit balances and a business’s accounts are calculated from an append-only ledger. Removing entries from it would break the accounts of a business that has done nothing wrong. We therefore remove the person from the record rather than the record itself. Once this is done you cannot be identified from anything we hold.

10. The records a business holds separately

A business using Monthlygo is a joint controller, not our processor. Its own notebook, diary, till and telephone are its records, not ours. Deleting your Monthlygo account does not reach any of them, and a request made to us is not a request made to the business.

If you want your data removed from both, ask both. Each of us has one month to respond.

11. How long we keep things

• Account and membership records: until you delete the account.
• Payments, refunds and invoices: six years, as HMRC requires.
• Service emails: the record that one was sent is kept; its contents are removed when the account is deleted.
• Sign-in links: fifteen minutes, after which they expire and are deleted.
• Push notification tokens: until the account is deleted or the app is removed.
• Analytics: as set by Google, typically up to fourteen months.

12. Keeping it safe

Data is encrypted in transit, and the site refuses to be served over an unencrypted connection. Payment credentials are held by Stripe and never reach our servers. Sign-in is by single-use link or password; links expire after fifteen minutes, and session cookies cannot be read by scripts. Access to production data is limited to those who need it.

If a breach occurs that is likely to result in a risk to your rights, we will report it to the Information Commissioner’s Office within 72 hours of becoming aware of it, and tell you directly where the risk to you is high.

13. Changes to this policy

We may update this policy. Where a change materially affects how we use your data, we will tell you before it takes effect. The date at the top of this page is when it was last revised.

Related

Terms of Use · Pricing