Privacy policy

Who we are

This site is operated by GOLDPAID LTD (registered in England and Wales), which trades as GoldPaid. The data controller for the personal information described in this policy is Rocco Clayfield, founder of GoldPaid. ICO registration ZC214216 is held by Rocco Clayfield personally, as data controller, with GoldPaid as a trading name; it is not held by GOLDPAID LTD. The company was founded and is directed by Rocco Clayfield. Its registered office is 179 Whiteladies Road, Clifton, Bristol BS8 2AG, as recorded at Companies House. GoldPaid works from its office at Unit 217, Bristol Business Centre, 179 Whiteladies Road, Clifton, Bristol BS8 2AG, where parcels are signed for, opened and tested. It is not a shop and is not open to visitors, and items are only received by prepaid tracked label, never by unarranged drop-off. This is a clear, plain-English summary, and the date of the current version is at the end of this policy.

What we collect and why

• Contact details (name, phone, email, WhatsApp number), to answer your questions, send your label, and keep you updated.
• Transaction information (a description of your items, the assay results, the offer and your decision), to provide the service and keep an accurate record.
• Payment details (the bank account you ask us to pay), used solely to pay you for items you sell.
• Identity and ownership information. We ask every seller for a photograph of UK photo ID and for confirmation of ownership on every transaction. That is our own practice rather than a regulatory obligation: GoldPaid pays by bank transfer only and handles no cash, so it is not an HMRC-registered high value dealer and is not supervised for anti-money-laundering purposes. See payments, cash and money laundering rules.
• Label request details (your name, postal address, and an email address or phone number, plus anything you choose to tell us about your items), given when you request a prepaid Royal Mail label. We use them to post the label and to talk to you about your items. We also store, alongside the request, how you reached us: the page you landed on, the site that referred you, any campaign tags in the link, your browser’s user-agent string, and the click identifier from any Google, Microsoft or Meta advert you arrived through. That is used for one purpose, to tell which page or advert produced the request. These details are not sold or shared, and you can ask us to delete them at any time.
• Website analytics and advertising measurement, anonymised usage data via Google Analytics and, if you accept cookies, the Meta (Facebook) Pixel, which reports your visit to Meta so we can measure the adverts we run on Facebook and Instagram. Aggregate page-performance metrics come from Vercel Analytics and Vercel Speed Insights (no cookies, no cross-site tracking, no personal data). All of it is denied by default and none of it runs unless you accept. See the cookie policy.

Our lawful bases

We rely on contract (to provide the service you ask for), legal obligation (to meet company and tax record-keeping requirements), legitimate interests (to run and protect the business, including checking that items are yours to sell), and consent (for analytics and advertising-measurement cookies, including the Meta Pixel, all of which you can decline).

How long we keep it

We keep transaction and identity records for as long as the law requires. A limited company must keep its accounting records for six years from the end of the last company financial year they relate to, so a completed purchase is held for at least that long.

A label request that never became a parcel is an enquiry, not an accounting record, and is not kept indefinitely. Our retention limit for enquiries is twelve months. Removing them is a manual step rather than an automatic one, so a record can sit a little past twelve months before it is deleted. If you want yours deleted now, ask, and we will do it and confirm. Gold Letter subscriptions run for as long as you stay subscribed: unsubscribe and the address is deleted from the list, and only the signup record proving consent was properly obtained is retained, as UK GDPR Article 7 requires.

If you would like us to erase what we hold about you sooner, ask, and we will do it and confirm what was removed.

Who we share it with

We do not sell your personal information. We share it only where necessary, for example with Royal Mail to arrange postage, with our bank to make payment, with our professional advisers, or with authorities where we are legally required to. We also use service providers to run the site itself. Vercel hosts the site and stores label requests. Resend delivers the email the site sends, including your confirmation and our own copy of your request. If you accept cookies, Google Analytics measures how the site is used, the Meta (Facebook) Pixel reports your visit to Meta Platforms Ireland, and the Trustpilot review widget on the confirmation page shown after you request a label tells Trustpilot that a browser opened that page. The Trustpilot links elsewhere on this site simply take you to Trustpilot’s own pages. Meta is not simply acting on our instructions there: it uses that data for its own advertising purposes under its own terms, which is why it is behind consent and why declining stops it completely. Some of these providers process data outside the UK, under the safeguards UK data protection law requires. Service providers act on our instructions and are bound to protect your data.

The Gold Letter newsletter

If you choose to subscribe to The Gold Letter, GoldPaid’s monthly email, we collect your email address (or, if you join by WhatsApp, your WhatsApp number), together with the date, time and page on which you subscribed and the consent wording you saw, so that we can prove your consent. We use this information for one purpose only: to send you The Gold Letter, a monthly email with practical guidance on selling gold and silver by post. We do not use it for any other marketing, and we never share, sell or pass subscriber details to any third party for their own purposes. The list is held on our own infrastructure, not on a third-party marketing platform.

Our lawful basis is your consent (UK GDPR Article 6(1)(a)); subscribing is entirely optional and is never a condition of getting a valuation or using the service. You can withdraw consent at any time: every issue contains a one-click unsubscribe link, and replying “unsubscribe” to any issue works just as well. We stop emailing you promptly, and no later than before the next issue. If you unsubscribe, we stop sending you the letter and add your address to a suppression record so we do not contact you again. We also retain the original signup record (your address, the date, the page and the consent wording shown) as evidence that consent was properly obtained, as UK GDPR Article 7 requires; it is used for no other purpose. The data controller is Rocco Clayfield, founder of GoldPaid: ICO registration ZC214216 (data controller: Rocco Clayfield, trading as GoldPaid).

Your rights

Under UK data protection law you have the right to access the information we hold about you, to ask us to correct or erase it (subject to our legal retention obligations), to restrict or object to certain processing, and to data portability. To exercise any of these, contact GoldPaid on WhatsApp or by phone on 07944 014111, or email goldpaiduk@gmail.com. We will respond within one month, as UK GDPR requires. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Version and date

This is the version of this privacy policy dated 10 September 2026. If you need to know which version applied on a particular date, ask us and we will tell you.

Common questions