Privacy and cookies

GetOnIt and GOI are trading names of Rapidez Internet Solutions Limited (“we”, “us”), registered in England and Wales, company number 13185548, with its registered office at 124-128 City Road, London, EC1V 2NX, United Kingdom. We are the data controller for the personal data described here. Contact us about privacy at team@getonit.club.

• Your name and email address
• Your plan, renewal date, and your choices in account settings
• Your mobile number, eSIM details, and the network’s record of your usage (how much data you have used)
• Payment records — the amount, date and outcome of each charge, and receipts
• A reference to your saved card from Stripe (card brand, last four digits and expiry — never the full card number)
• Requests you make: number transfers (including your PAC and the number being moved), new eSIMs, plan changes and cancellations
• Support tickets, help chat conversations, and the emails we send you
• Security records: login codes (stored hashed) and when you last signed in
• Your GetOnIt Club member number
• If you link Discord to join the Club Discord: your Discord user ID and username. We do not keep your Discord password or sign-in tokens
• If you apply to be a partner: the name, email, phone number and social media accounts you give us, your rough follower count or (for campus ambassadors) your university and year of study, and what you tell us about how you would share GetOnIt; if accepted, your partner link, the sign-ups made through it (as counts, not the new customers’ details), your points and the gift cards you swap them for
• If your student society partners with us: the name, email and committee role of its contact, how the society wants to be paid (in words, such as which union account and reference; we do not keep bank account numbers), and the payments we make. We do not tell the society who its members are

• To provide your service — setting up your line and eSIM, taking payment, moving your number, and handling support. Basis: our contract with you.
• To send you service messages — receipts, renewal reminders and payment problems by email, and low-data alerts and replies to the PAC, STAC, INFO and RATES short codes by text. You can turn reminders and low-data alerts off in your account settings. Basis: our contract with you.
• To meet legal obligations — keeping financial records, and complying with telecoms regulation and lawful requests. Basis: legal obligation.
• To prevent fraud and keep the service secure. Basis: our legitimate interests.
• To run the partner programme — reviewing your application (including looking at the public social media accounts you give us), counting sign-ups through your link and sending your gift cards. Basis: our agreement with you under the partner terms.
• To run society partnerships: counting the members who join with a society's code, sending its statements and paying it. Basis: our agreement with the society under the society partner terms, and our legitimate interests.
• To send customers the odd offer about our own service, such as one text a week after your line goes live about inviting friends. You can say no when you sign up, turn these off in your account under Settings, and every message tells you how to stop them. Basis: our legitimate interests, under the rules that let a business tell its own customers about similar services (the “soft opt-in”).
• To ask customers once for a review of our service (for example on Trustpilot), whatever their experience. You can say no with the link in that email or in your account under Settings. If we use Trustpilot's invitation service, Trustpilot receives your name and email address to send the invitation. Basis: our legitimate interests in hearing how we are doing and showing honest reviews.
• To send GetOnIt Club news and offers to anyone else, only if you asked us to. Basis: your consent.

We do not sell your personal data. If you allow the optional Reddit cookie (section 7), Reddit receives information about your visit to measure our ads; we do not build profiles of you ourselves.

We use a small number of providers, each doing one job:

• Stripe — takes and stores your card details and processes payments.
• Brevo — sends the emails you receive from us.
• Webex Interact (Cisco) — sends the texts you receive from us: low-data alerts and replies when you text PAC, STAC, INFO or RATES. We give it your mobile number and the message.
• Amazon — only for partners swapping points: we give Amazon the email address the gift card should be sent to.
• Shaka — our network provider, who set up and run your mobile line. They hold your eSIM, number and usage records.
• Your old or new mobile provider — when you move a number in or out, as the UK switching rules require.
• Reddit — only if you allow the optional advertising cookie (section 7). Reddit then receives your IP address, device details and which GetOnIt pages you view, and when you sign up or pay.
• Discord — only if you choose to link your Discord account. We add you to the GetOnIt Club server and tell Discord which member roles you have (for example Club Member). Unlink any time on the Club page of your account. Discord’s own privacy policy covers what you do on Discord.

The help chat on our site answers from our own published answers. Nothing you type is sent to an AI provider.

We may also disclose data where the law requires it (for example, to the emergency services or law enforcement), or to establish or defend a legal claim.

Our systems are hosted in the United Kingdom. Some of our providers process data outside the UK; where they do, the transfer is covered by the UK’s approved safeguards, such as an adequacy decision or the International Data Transfer Agreement.

While you are a customer, and then for up to seven years afterwards for accounting and legal reasons. If you delete your account we remove your personal details straight away and keep only the minimum payment records the law requires.

Support tickets, and help chats that became one, are kept as part of your support history. Other help chats are deleted after 90 days without activity, and expired sign-in codes and sessions are deleted within a day or two.

The only optional cookie is Reddit’s advertising pixel, and it stays off unless you say yes. We advertise on Reddit. If you allow it, Reddit’s pixel sets a cookie and tells Reddit which pages you looked at and when you sign up or pay, so we can see which ads work and Reddit can show our ads to similar people. Reddit receives your IP address, device details and that activity, and acts as an independent controller for it under Reddit’s privacy policy. Our basis is your consent, and saying no changes nothing about how the site or your service works. You can change your mind at any time:

Everything else we use is strictly necessary, or first-party only:

• goi_session — keeps you signed in to your account. Cleared when you sign out.
• goi_signup — remembers your name and email between the signup steps. Expires after a short time.
• goi_chat_session — lets the help chat know it is the same conversation. Holds nothing else.
• goi_src — if you arrive through one of our own links or QR codes, remembers which one for 30 days so we can tell where sign-ups come from. Never shared with anyone.
• Theme — if you pick light mode, your browser remembers it (local storage, never sent to us).

On pages where you enter card details, Stripe sets its own cookies to prevent fraud. Those are covered by Stripe’s privacy policy.

Traffic to this site is encrypted. Card details never reach our servers. Login codes and session tokens are stored hashed, and access to customer data is limited to staff who need it. No system is perfectly secure, but if a breach put your rights at risk we would tell you and the ICO as the law requires.

GetOnIt is sold to adults. We do not knowingly collect data from anyone under 18, and will delete it if we find we have.

Under UK GDPR you can ask for a copy of your data, correct it, delete it, take it elsewhere, restrict or object to how we use it, and withdraw consent at any time.

You can do the most common ones yourself in your account under Settings: download my data and delete my account. For anything else, email team@getonit.club and we will reply within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk — though we would like the chance to put it right first.

If we change this policy we will update the date at the top, and email you if the change materially affects you.