Privacy notice

Last updated: 3 July 2026

The short version: we collect what we need to run the service — your contact details, address, and what you tell us about your items — and nothing else. This site sets no cookies and runs no analytics. We never sell your data.

1. Who is responsible for your data

The data controller is Peter Smith, trading as SendMyGold, c/o This N That Ltd, Unit 3, 2A Cambridge Street, Bletchley, Milton Keynes MK2 2TP, United Kingdom. Contact: [email protected].

2. What we collect and why

Pack requests: your name, email, phone (optional), postal address, and what you plan to send. The request form on this site opens your own email app — we receive exactly what you choose to send us. Legal basis: taking steps to enter a contract with you.
Transactions: details of the items received, test results, photographs, offers, and payment details you give us. Legal basis: performing our contract and complying with legal record-keeping duties.
Identity documents: only where UK anti-money-laundering law requires verification. Legal basis: legal obligation.
Correspondence: emails you send us. Legal basis: legitimate interests in running the service and handling queries.

3. Cookies and tracking

This website sets no cookies and uses no analytics or advertising trackers. Two technical notes: fonts are loaded from Google Fonts, and live prices are fetched from our own price service — in both cases your browser makes a standard web request (which includes your IP address) to those services, and nothing more.

4. Who we share data with

Royal Mail, for sending and returning packs.
Our bank, to make BACS payments to you.
An identity-verification provider, only where an AML check is legally required.
Authorities such as HMRC or the police, where the law requires it.

We never sell or rent your personal data.

5. How long we keep it

Business and tax records (including transaction details) are kept for up to six years. Records connected to anti-money-laundering checks are kept for five years after the transaction. Pack requests that never turn into a transaction are deleted within twelve months.

6. Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal data; ask us to restrict or object to processing; and ask for a copy in a portable format. Email [email protected] and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.

7. Changes

If we change this notice we will update the date at the top of this page. Significant changes will be flagged on the homepage.