YOUR DETAILS.
HANDLED PROPERLY.

Combute LP operates Go Graft and is the controller for account, order, support, onboarding, marketing-preference and directory information.

What we collect

We collect account and contact details, domain registrant details, business and company/VAT information, website content, uploaded logos and photographs, product choices, orders, subscription status, support messages, consent records, connection tokens and security logs. Stripe processes card details; Go Graft does not store full card numbers.

How and why we use it

We use information to enter into and perform our contract, take payment, register and manage domains, build and host websites, fulfil products, run requested advertising, provide support, prevent misuse and meet accounting or legal obligations. We use consent where required for optional direct marketing and public directory publication.

Who receives it

We share only the information needed with hosting, payment, registrar, email, delivery, print, AI, advertising and connected social-platform providers. Public directory details are shown only after opt-in and approval. Some providers may process data outside the UK under their own safeguards and contractual arrangements.

Marketing and the directory

You can withdraw marketing consent at any time without affecting service messages. You can ask us to hide or update your directory listing. Service, payment, security, renewal and order-status messages are not promotional emails.

Connected accounts

When you connect a supported social account, encrypted access tokens are used only to provide the requested connection. You can revoke access through the provider or ask us to disconnect it.

Retention and security

Active-account data is kept while services are supplied. Contract, payment and tax records are retained for applicable legal periods. Unneeded uploads and expired credentials are removed or anonymised when reasonably possible. We use access controls, password hashing, protected storage and encryption for integration credentials.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction, portability or object to processing. You can complain to the UK Information Commissioner's Office. Contact enquiries@gograft.co.uk to exercise a right or ask a privacy question.

Cookies

Go Graft currently uses essential session and security cookies needed for sign-in, checkout, onboarding and fraud prevention. Optional analytics or advertising cookies are not enabled without an appropriate consent mechanism.