Legal

Privacy Policy

Plain English on what we collect when you contact us, why we hold it, how long we keep it, and how to get it removed.

Last updated: 1 August 2026

Who we are

Go Vista AI ("we", "us") is a search and AI visibility agency based at 6 St Peter’s Street, St Albans, Hertfordshire, AL1 3LF, United Kingdom. We are the data controller for personal data collected through this website.

Questions about this policy or your data: info@govistaai.com.

What we collect

  • Enquiry details you give us: first name, last name, email address, company or website, the goal you select, and anything you write in the message field.
  • Email correspondence: if you email us or reply to us, we hold that thread.
  • Technical data: IP address, browser type, device type, pages visited and referring URL, collected in server logs and — with your consent — analytics tools.
  • Cookie preferences: your accept or reject choice, stored in your browser.

We do not knowingly collect special category data, and we do not ask for payment card details through this website.

Why we use it, and our lawful basis

  • Responding to your enquiry — lawful basis: steps taken at your request prior to entering a contract, and our legitimate interest in running the business.
  • Delivering services to clients — lawful basis: performance of a contract.
  • Occasional follow-up about relevant services — lawful basis: legitimate interest, and consent where required. You can opt out at any time.
  • Measuring and improving the website — lawful basis: consent, via the cookie banner.
  • Site security and fraud prevention — lawful basis: legitimate interest.

We do not sell your data

We never sell, rent or trade personal data. We share it only with the service providers listed below, who process it on our instructions, and with authorities where the law requires it.

Who processes data on our behalf

ProviderWhat they doWhere
Microsoft 365 (Outlook)Receives and stores enquiries submitted through our website forms, and our email correspondence with you.EU / UK and United States
HubSpotCustomer relationship management — storing enquiry details and tracking our conversations with prospective clients.EU and United States
Google AnalyticsAggregated website usage measurement. Only loaded if you accept analytics cookies.EU and United States
Google Search ConsoleSearch performance reporting. Uses aggregated search data, not identifiable visitor data.EU and United States
Lovable / CloudflareWebsite hosting, content delivery and security. Processes server logs including IP addresses.Global edge network

Where a provider processes data outside the UK, that transfer is covered by the UK International Data Transfer Addendum, Standard Contractual Clauses, or an adequacy decision.

How long we keep it

  • Enquiries that don't become clients: up to 24 months from your last contact with us, then deleted.
  • Client records: for the duration of the engagement and 6 years afterwards, to meet UK tax and accounting requirements.
  • Server and security logs: typically up to 12 months.
  • Analytics data: up to 14 months in aggregated form.

How we protect it

Access to enquiry data is limited to the people who need it. Accounts use multi-factor authentication, data in transit is encrypted over HTTPS, and our providers hold data on encrypted infrastructure. No system is perfectly secure, so we don't promise absolute security — we do promise to tell you and the ICO promptly if a breach affects your rights.

Your rights

Under UK GDPR you can ask us to:

  • Give you a copy of the personal data we hold about you.
  • Correct anything inaccurate or incomplete.
  • Delete your data where we no longer need it.
  • Restrict or object to how we use it, including direct marketing.
  • Transfer your data to another provider in a portable format.
  • Withdraw consent at any time, where consent is the basis we rely on.

Email info@govistaai.com and we'll respond within one month. If you're unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We explain every cookie we use, and how to change your choice, in our Cookie Policy.

Other websites

Our site links to third-party websites and case study clients. We're not responsible for their privacy practices — check their own policies before sharing anything with them.

Changes to this policy

We update this policy when our practices or providers change. The date at the top always reflects the current version.