GoalsTrackGoalsTrack

Privacy Policy

Last updated: February 2026

This Privacy Policy explains how E.A. Business Goals Limited ("we", "us", "our"), a company registered in England and Wales, collects, uses, shares and protects your personal data when you use GoalsTrack (the "Service") at goalstrack.co.uk and the GoalsTrack mobile app.

We are the data controller for the personal data described in this policy.

1. Who we are

  • Data controller: E.A. Business Goals Limited, registered in England and Wales.
  • Contact: support@goalstrack.co.uk

If you have any questions about this policy or how we handle your data, please contact us at the email above.

2. What personal data we collect

We collect the following categories of personal data:

  • Account information — your name and email address.
  • Task data — the tasks you create, assign, comment on or complete, including titles, descriptions, priorities, due dates and status.
  • Performance data — metrics derived from your activity, such as task completion rates, on-time performance and workload statistics.
  • Audit logs — a record of key actions (for example task creation, assignment, status changes, deletions and access), including who performed the action and when.
  • Device information for push notifications — where you enable notifications, we store the push subscription details provided by your browser or device so we can deliver alerts.
  • Billing information — where you subscribe to a paid plan, limited billing details are processed by our payment provider (see Section 4). We do not store your full card details on our servers.
  • Technical data — basic information such as your IP address (used, for example, to record the time and origin of Terms acceptance) and standard log data.

3. How we use your data

We use your personal data to:

  • Provide the platform service — create and manage your account, workspaces, departments, tasks and reports, and enforce role-based access controls.
  • Send notifications — deliver in-app and push notifications about task assignments, messages, calls and meetings where you have enabled them.
  • Process billing — manage subscriptions, trials and payments via our payment provider, Stripe.
  • Communicate with you — send service and account emails (for example invitations, password resets and important notices).
  • Maintain security and accountability — keep audit logs, prevent misuse and comply with our legal obligations.

Lawful bases (UK GDPR). We rely on: performance of a contract (to provide the Service to you); legitimate interests (to secure, maintain and improve the Service and keep audit records); consent (for example, where you enable push notifications); and legal obligation (for example, retaining certain records).

4. Who we share your data with

We share personal data only with trusted service providers (sub-processors) who process it on our behalf to run the Service:

  • Stripe — payment processing and subscription billing.
  • Resend — sending transactional and account emails.
  • VideoSDK — powering voice and video calls within the Service.
  • MongoDB Atlas — secure database storage of your workspace data.
  • Netlify — hosting and delivery of the Service.

We do not sell your personal data. We may also disclose data where required by law or to protect our legal rights.

5. International transfers

Some of our service providers may process data outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards recognised under UK GDPR (such as adequacy decisions or standard contractual clauses) to protect it.

6. How long we keep your data

We retain your personal data for the duration of your subscription plus 90 days after cancellation, after which it is deleted or anonymised, unless a longer period is required to comply with our legal obligations or to resolve disputes.

7. Your rights under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your personal data ("right to be forgotten").
  • Restriction — ask us to limit how we process your data.
  • Objection — object to processing based on our legitimate interests.
  • Portability — receive your data in a structured, commonly used, machine-readable format.
  • Complaint — lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at support@goalstrack.co.uk. We will respond within the timeframes required by law.

8. Cookies and local storage

We use essential cookies and browser local storage to keep you signed in and to remember preferences such as your language and theme. These are necessary for the Service to function and do not track you for advertising.

9. Security

We use industry-standard measures to protect your data, including encryption in transit, access controls and role-based permissions. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the relevant authorities of any breach where required.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email. The "Last updated" date above indicates when this policy was last revised.

11. Contact and governing law

For any privacy questions or to exercise your rights, contact support@goalstrack.co.uk.

This Privacy Policy is governed by the laws of England and Wales.

© 2026 E.A. Business Goals Limited · GoalsTrack