CampusGo

Privacy notice

Last updated 28 September 2026

This explains what personal data CampusGo collects, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). CampusGo is run by the CampusGo team, who is the data controller.

1. What we collect

  • Account details: your university email, name, optional profile photo and bio, and a scrambled (hashed) password if you set one. We can't see your password.
  • Approximate location: either an area you choose or, if you allow it, your device location rounded to about 500 m before it's stored. We only ever show others an approximate distance.
  • What you post: listings, services, housemate posts, tickets, sport sessions, events and their photos. Hidden photo data such as GPS is removed when photos are uploaded.
  • Messages, reviews and reports you send or receive on CampusGo.
  • Payments (only if protected payments are on): order amounts and status. Card and bank details are handled by Stripe and never stored by CampusGo.
  • Technical data: a session cookie to keep you logged in, and basic server logs used to keep the service secure.

2. Why we use it (and our lawful basis)

  • To provide CampusGo: verifying you're a student, showing your posts, delivering messages and processing protected payments (performance of a contract).
  • To keep the community safe: investigating reports, preventing scams and enforcing our guidelines (legitimate interests).
  • To keep payment records required by law (legal obligation).
  • We don't sell your data, and we don't use it for advertising.

3. Who can see what

  • Other students see your first name and last initial, university, Verified Student badge, approximate area, your posts and ratings. Never your email.
  • People you message see what you send them.
  • Admins can see account details, posts, reports and payment status to moderate the service.

4. Services we use

  • Netlify: website hosting, database and photo storage.
  • Email provider (Google Gmail or Resend): sending verification codes and account emails.
  • Stripe: payments and payouts, only when protected payments are switched on.
  • Some of these providers may process data outside the UK, under the safeguards UK law requires.

5. How long we keep it

  • Your account and posts: until you delete them or your account.
  • When you delete your account, your name, photo, bio, location, email and password are wiped straight away and your posts are taken down. Messages you sent stay in the other person's inbox as “Deleted user”.
  • Verification codes expire after 15 minutes. Payment records are kept for 6 years for tax and legal purposes.

6. Cookies

We only use essential cookies: one to keep you logged in, one to remember a rep code you followed, and a short-lived one while you verify a new account. No tracking or advertising cookies.

7. Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, or for a copy to take elsewhere. You can edit your profile at any time and delete your account yourself.

To make a request, use the Report button on any page, or message the CampusGo admin team. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

8. Changes

If we make important changes to this notice, we'll let you know in the app.

Privacy notice · CampusGo