Privacy & Cookies

Gold Card Exchange collects the details you give us to run your membership, handle a dental enquiry and contact you. We do not sell your data.

Last updated 13 October 2026.

1. Who we are

Gold Card Exchange is operated by GOLD CARD NETWORK LTD, company number 16466466 (“Gold Card Exchange”, “we”, “us” or “our”).

Our registered address is:

Unit 5 Flemming CourtCastlefordWF10 5HWEngland

2. What we collect

When you join we ask for:

your name
email address
UK mobile number
postcode or town, so we can show nearby offers
a password, stored as a hash, not in plain text

We also create a Gold Card number for you. If you tap “Use my location” in the app or on the website, your device may share a location so we can list offers near you. We do not use that pin as a home address, and we do not keep a live track of where you go.

If you send a dental enquiry, we ask for your name, email address, UK mobile number, postcode and the treatment you are interested in. You do not need to join to send one.

3. How we use it

We use your details to:

create and run your membership
show your Gold Card in the app and on the website
show nearby member offers
pass on a dental enquiry, if you send one
contact you about your membership, and to help if something goes wrong
understand whether a campaign email or invite link was useful — for example whether someone opened a page after a link and later joined — so we can improve those emails

We do not use your data for ads, and we do not sell it.

4. Who we share it with

Partner businesses see your Gold Card when you redeem an offer at the till. They do not get a copy of your account from us.

When you join, we send your name, email address, mobile number, postcode and the code you joined through, if any, to Gold Card’s CRM, the system the Dentist Gold Card team uses to run your Gold Card and any referrals.

When you send a dental enquiry, we send it to Gold Card’s CRM too, so the team can contact you about it. If you send it from someone’s referral page, we include their code so they can be credited. We also send how you reached us, as history for staff: the code on a referral link you opened here in the last 30 days, and the code you joined through if you are a member. On our general dental form that history never decides who is credited.

A referral link opens a page that shows who recommended Gold Card: the business name for a business partner, or the first name only for a person. Anyone who opens the link can see it. We never show a surname, email address or phone number there.

We use our own operations systems, and trusted hosting, to run the service. We only share what is needed to do that.

5. How long we keep it

We keep your account while your membership is active. You can permanently delete it from Account in the app or on this website. That removes your Gold Card and the details we hold for the membership.

6. Your rights

You can ask us for a copy of the details we hold, ask us to correct them, or ask us to delete your account. Email hello@goldcardexchange.com.

7. Cookies and on-device storage

We use a small number of first-party cookies and saved preferences so the site can sign you in, remember a place, note a referral link if you arrived from one, and — when you open a campaign email link — connect that click to the next steps on our own site. They are there to run and improve the service. We do not use them to advertise to you on other websites, and we do not use advertising or social pixels.

Analytics

We use Vercel Web Analytics to understand how our website is used and to help us improve it. The analytics are used for aggregated website usage statistics and are not used for advertising or cross-site tracking.

We configure analytics so that sensitive URL information, including query parameters and authentication, password-reset, activation and unsubscribe tokens, is not collected.

Gold Card Exchange does not use advertising cookies, and does not use advertising, Meta Pixel, TikTok Pixel, Hotjar, or session-replay tools.

Cookies we set

gcl_session — keeps you signed in. It holds a signed reference to your account, not your password. Necessary. About 30 days, or until you sign out.
gcx-member-place — remembers the postcode or town you last used, so nearby offers can open on that area. Functional. About 180 days. Signed-in members use the postcode on their account instead.
gcl_ref — set only when you open a referral page (/refer/…, including by scanning a member’s card) or a page address includes a referral code (?ref=). It records the code, as how you arrived. If you join, it can be saved as how you joined and sent to Gold Card’s CRM with your membership; a member who shared the link sees only a count of friends who joined. If you send a dental enquiry, it goes with it as history for staff. It never decides who is credited for an enquiry on our general dental form. It is not used for advertising or to follow you across other websites. About 30 days. If there is no referral code, this cookie is not set.
gcl_journey — first-party campaign journey cookie. Set only when you open a link from one of our campaign emails (or a matching invite link on this site) and journey measurement is switched on. The cookie value is a random token only — not your name, email, phone number or password. We use it on goldcardexchange.com so we can see, in aggregate and for that campaign, whether people reached a landing page, started joining, or finished joining after the click. If you later create an account, we may link that journey to your membership so staff can see that the invite worked. It is not used for advertising, not shared with ad platforms, and not used to follow you on other websites. About 30 days. If journey measurement is off, or you did not arrive from a campaign link, this cookie is not set. You can clear it by clearing site cookies in your browser.
gcl_view_as_return — staff only. Lets an admin step back out of a preview. Necessary for that tool. About 4 hours.
gcl_issued_login — staff only. A short-lived reference so a newly issued merchant login can be shown once on the next screen. The cookie is a random token. It does not contain the password. About 10 minutes.
Location prompt — saved in this browser as gcl_location_prompt if you dismiss the “use my location” note. It only records that you dismissed it. It stays until you clear site data.
Merchant tour — saved in this browser as gcx-merchant-tour plus the business id, after a merchant closes the welcome tour. It stays until you clear site data.

The iPhone and Android app stores a sign-in token on the phone so you stay signed in. It is not an advertising identifier.

8. Location, maps, and other requests

Browser location. If you choose “Use my location”, or you have already allowed location and the site is filling nearby offers, the browser can share a one-off position so we can find a nearby postcode. We ask only for that search. We do not keep a live track of where you go. Checking whether location is already allowed does not read your coordinates.

Google Maps. City and offers pages that show a map load Google Maps. That is so you can see businesses on a map. Google receives the request needed to draw the map, and may set its own cookies as part of that. We do not use Google for advertising on this site.

YouTube. A business video, if we switch one on, plays from YouTube’s privacy-enhanced player (youtube-nocookie). The current For businesses and Rewards pages do not load a YouTube video. If one is added later, YouTube receives the request needed to play it.

Unsplash. Some venue and offer photos are loaded from Unsplash (images.unsplash.com) when we do not have our own picture. Your browser requests that image from Unsplash. We do not use Unsplash for advertising.

Questions: hello@goldcardexchange.com.