Your details.
Your business.

Who is responsible?

Getonline Limited operates this service under the name MobileRenewal.com and is the data controller. For privacy questions and requests, use our contact page. The service was initially intended mainly for UK use; users worldwide are welcome.

Only the information we need

We collect the minimum information necessary to provide your reminder: an email address, a mobile number or reference, a contract expiry date and your chosen notice period. Your email can be any valid address you can access and confirm; it does not have to be associated with your mobile account. Your reference can be a mobile number or simply “John’s Mobile”. Neither a mobile number nor your full name is required if you choose a label. Avoid unnecessary personal information in that reference.

We also store random record identifiers, confirmation timestamps, hashed private-link tokens, and limited email delivery and retry records. These allow us to confirm consent, protect your details, deliver the requested reminder and prevent duplicate scheduled sends. Contract dates are supplied by you and are not independently verified with a network.

Confirmation, messages and your choices

Registration sends a confirmation email. Reminders only activate after you review and confirm on the website. We send the requested renewal reminder and management links you ask for. These messages are part of the service you request; there is no marketing subscription or sharing with mobile networks for advertising.

A private management link lets you update or delete a reminder. Emails also provide a stop-and-delete link; supported mail clients can use one-click unsubscribe. Deleting a reminder removes its saved contract details and stops future scheduled messages for it. An email already handed to the delivery provider may still arrive. Treat private links like passwords and do not share them.

Why we use information

We process the details necessary to provide the reminder service you request on the basis of performing our agreement with you. We rely on legitimate interests for proportionate fraud and abuse prevention, protecting the service, handling enquiries and resolving delivery problems, where those interests are not overridden by your rights. We may process information to meet a legal obligation.

Storage, email delivery and international processing

Cloudflare hosts the website, stores reminder records in D1, and delivers messages through Cloudflare Email Service. Our database is initially located in Western Europe. Cloudflare processes network and request information, including IP addresses, browser information and requested URLs, to deliver and secure the service, and may process data internationally. Private links are included in requested URLs, so we disable application request logging and send no-referrer and no-store headers on private pages.

Cloudflare processes recipient addresses, email contents, acceptance and delivery information, bounces and complaints under its privacy policy. Its suppression lists help prevent further delivery to bounced or complaining addresses. Where international transfers we arrange require safeguards, appropriate safeguards must be in place. We do not sell personal information or share it for other organisations’ marketing.

How long we keep information

Unconfirmed registrations are removed after 24 hours. Confirmed contract records remain until you delete them or until 30 days after the saved expiry date. Updating the expiry date changes that retention date. Automatic cleanup runs every ten minutes, so deletion at a retention deadline can take until the next run.

Confirmation links expire within 24 hours and are invalidated on confirmation. Management links expire after 30 days; you can request fresh ones. Expired tokens and temporary abuse counters are cleared automatically. Email job and delivery-attempt records are kept for up to 30 days, or removed earlier when you delete the associated reminder. Cloudflare’s own delivery, security and suppression records follow its policies and service settings; database recovery copies may persist for the provider’s recovery period.

Cookies, tracking and abuse prevention

We do not set application cookies, use browser storage, load advertising trackers or use email open-tracking pixels. Registration and management forms work without JavaScript. The contact form requires JavaScript for its Turnstile security check. Cloudflare security features may set necessary security cookies or present checks if enabled.

We keep short-lived hashed counters for email addresses and network addresses to limit repeated registration and management requests. Raw IP addresses are not saved by our application. Cloudflare independently processes network metadata. The application does not create visitor profiles.

Enquiries

Our contact form collects your name, email address and enquiry details. Cloudflare Turnstile processes browser and network signals to check submissions for abuse, under Cloudflare’s privacy policy. We verify the result on the server before accepting a message. We use these details to deliver, reply to and follow up on your enquiry and meet applicable obligations. Your message is saved in a private D1 delivery queue for retries, then removed when Cloudflare Email Service accepts delivery, or within 24 hours if delivery fails. D1 recovery copies may persist under Cloudflare’s recovery policy. Received messages are retained in our support mailbox as needed to resolve the enquiry or a related dispute or legal requirement. Do not send passwords, payment details or unnecessary account information. Enquiries are not added to marketing lists.

Policy against unsolicited advertising

MobileRenewal.com must not be promoted through unsolicited messages. This includes email, text messages, private or social-media messages, forum spam and comment spam, sent individually or in bulk. No affiliate, contractor, user or third party has permission to send unsolicited promotions for the site or claim to do so on our behalf.

We do not buy or rent mailing lists, use purchased marketing lists, or sell, rent or share enquiry or subscriber addresses for marketing. If you receive unwanted advertising promoting this site, report it with sender details, the date, and the original message or full headers where possible. Such promotion is unauthorised; we will investigate and take reasonable action against misuse. If someone entered your address without permission, ignore the confirmation email or use its delete link.

Your rights and complaints

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your information, and object to processing based on legitimate interests. Use your private link to correct or delete a reminder, or contact us for other requests. We may need proportionate information to locate your records and confirm your identity. You can complain to the UK Information Commissioner’s Office and, where applicable, your local data protection authority.

Changes

We will update this notice when our processing changes. The date above identifies this version.