Legal

Privacy Notice

Last updated: October 2026

Who we are

Goodday is operated by Lalor Labs, trading as Goodday. We are the data controller for the personal data described in this notice — meaning we decide how and why it is processed.

What we collect and why

  • Account data — your name and email address and login credentials, used to create and secure your account (legal basis: performance of our contract with you).
  • Your logged days — the activities, times and notes you record, used to provide the scoring, trends and coach features (legal basis: performance of our contract).
  • Support messages — anything you send through the contact form, used to respond to you (legal basis: legitimate interests).
  • Usage and device data — such as IP address, device identifiers and basic telemetry, used for security, fraud prevention and improving the product (legal basis: legitimate interests).

Payment data is collected and processed by Paddle (our Merchant of Record), not by us — we never see or store your card details.

Who we share it with

  • Service providers — hosting, database and analytics providers who process data on our behalf under contract.
  • Paddle — our Merchant of Record, for the sale of membership, subscription management, payments, tax compliance and invoicing.
  • Professional advisers — such as accountants or lawyers, where needed.
  • Authorities — where the law requires it.

International transfers

Some of our service providers process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

How long we keep it

We keep your data for as long as your account is active and for a limited period afterwards where required for legal, tax or security reasons. When data is no longer needed, it is deleted or anonymised.

Your rights

Under data protection law (including the GDPR) you have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You also have the right to complain to your supervisory authority (in Ireland, the Data Protection Commission). We respond to requests within one month. To exercise any of these rights, use the contact page.

Security

We use appropriate technical and organisational measures — including encryption in transit and strict access controls — to protect your data.

Cookies

Goodday uses essential cookies and local storage to keep you signed in and remember your preferences. We do not use marketing or advertising cookies. You can clear cookies and site data at any time through your browser settings, though signing in will no longer persist if you do.