Privacy notice

Who we are

GoGoYears is a trading name of Mere Digital Ltd (company number 09582466, registered in England and Wales), and we are the data controller for this site. There's a real person at this end and it's me — kenny@gogoyears.co.uk.

The short version

We hold your email address if you asked for the letter, and — if you have an account — your list and what you've told us about paying for it. We don't sell it, we don't share it, we don't track you, and you can have all of it back or have it deleted by sending me one email. No form, no reason required, no attempt to talk you out of it.

If you've joined the letter

We store your email address and the dates you signed up, confirmed, and (if you do) unsubscribed. We use it for one thing: sending you the occasional email you asked for. Our lawful basis is your consent, which you give by confirming the email we send you, and you can withdraw it from the unsubscribe link at the bottom of every letter.

If you have an account

An account holds rather more, because it has to. Here is all of it:

• Your first name and email address. The name is so a list you share reads "Julia's list" and not an email address. The email is how you sign in, and it's the only way back into your account if you forget your password — which is why we ask you to confirm it.
• Your password, stored as a one-way hash. We cannot read it, and neither can anyone who steals the database. If you forget it we can only help you set a new one.
• Your household — the people who plan together and share the lists — and anyone you've chosen to share a list with by name.
• Where home is — the country you call home, the currency you'd like figures shown in, the airport you usually fly from, and whether you'd usually do things modestly, comfortably or in luxury. We hold them so journeys and prices are worked out from your own front door rather than ours, and you can change them whenever you like.
• Your bucket list: the experiences on it, your notes, the year you're aiming for, photographs you upload, and — once you've been — what it actually cost and what you'd tell the next person.
• Your budgets, including the amount you tell us you put aside each month. That figure is yours; we only ever do arithmetic on it. We will never advise you on pensions, investments or tax, and we will never suggest where the money should come from.
• How demanding each experience is — the rating that puts the treks and the long hauls into your earliest, healthiest years. See below, because it deserves its own paragraph.
• Who's coming, in age bands. "Two adults and two children aged 4–11", and nothing more. We hold it so that a week away with the grandchildren is priced with children's tickets rather than adults' — costing a family holiday at adult rates is not an estimate, it's a discouragement. We never ask for their names, and we never ask for a date of birth. A band tells us what a ticket costs; it tells us nothing about who anybody is.

Our lawful basis for all of that is performance of a contract: it is the account you asked us for, and we cannot run it without them. Joining the letter is a separate decision, with a separate tick-box and a separate confirmation email, and an account does not sign you up to anything.

The rating that says how demanding an experience is

Sequencing your list is the point of this site: the hardest things belong in the years you're at your best. That means we hold something that is, in effect, a hint about your health — and we treat it that way.

It is used for exactly two things: putting your list in an order, and shaping an itinerary. It is structurally unable to reach our marketing — not as a promise, but as a rule the code enforces and refuses to build without. Nothing about your list, your health, your budget or your savings is ever used to decide what we email you, and the only thing that crosses from your account to our mailing list is an email address.

What we never collect

• Card details. We don't take payments, so we never see them.
• Passwords to your airline or loyalty accounts. Not now, not ever. If you tell us a points balance you type the number in yourself.
• Your pension, investments, income or tax affairs. None of our business, and none of our expertise.
• The names or birthdays of the people travelling with you — including your grandchildren. We ask how many are coming and roughly what age bracket they're in, because tickets are priced that way. We do not want, and will not store, anything that says who they are.

Cookies

Only the ones the site cannot work without: one to keep you signed in, one to protect forms from being submitted by somebody else's website, and one set by the bot check on our sign-up forms.

No analytics, no advertising, no tracking, and no third-party pixels. That's why you've never seen a cookie banner here: we have nothing to ask your permission for.

Who else sees it

We don't sell your data, and we don't share it with anyone who wants to sell you something.

A small number of service providers handle it on our behalf, under contract, and only to do the job we hired them for: running the site and its database, storing the photographs you upload, sending our email, checking our forms aren't being filled in by machines, and telling us when something breaks. They may not use your data for anything else, and they don't.

Some of our pages show photographs, and one page shows a map, that come from other companies and load from their servers rather than ours. That means your browser asks them for the picture or the map, and they can see your IP address — as they can on any website that uses them.

Where it's kept, and for how long

Your account and your lists are stored in the UK and the EU. A couple of the services above are based in the United States; where data reaches them, that transfer is covered by the safeguards UK data protection law requires.

We keep your account for as long as you want it. Ask us to delete it and it goes, along with your lists — a real deletion, not a flag in a database. If you unsubscribe from the letter we keep a minimal record of the address so that we don't email you again by accident, which is the one thing we keep in order to honour the thing you asked for.

Your rights

You can ask us to show you everything we hold about you, correct it, delete it, or send it to you in a form you can take elsewhere. Email kenny@gogoyears.co.uk and I'll do it — no form to fill in, no reason required.

If we get it wrong and you aren't happy with how we've handled it, you have the right to complain to the Information Commissioner's Office (ico.org.uk/make-a-complaint), the UK's data protection regulator. We'd rather you told us first so we can fix it — but it's your right, and you shouldn't have to go looking for it.

Changes

If this notice changes in a way that matters, we'll say so on this page before it takes effect — not after.

Last updated: 16 July 2026.