What we collect

We only collect what we need to provide and improve our services.

Identity & contact:

• Name, surname
• Email address
• Phone number
• Billing/shipping address

Order & support

• Products purchased, order history, payment status
• Messages you send to support (and our responses)

Device & usage

• Browser, device type, IP address, basic diagnostics
• How you navigate our site (pages viewed, clicks, time on page)
• Cookies and similar technologies (see “Cookies & tracking”)

We do not intentionally collect special category data.

Why we use your data (lawful bases)

• Process your order & deliver products (contract): to take payment, fulfil, ship, and handle returns.
• Customer support (contract/legitimate interests): to respond to enquiries and fix issues.
• Improve our store & prevent fraud (legitimate interests): to keep the site secure, reliable, and easy to use.
• Marketing with your consent (consent): email newsletters or promotions if you opt in. You can unsubscribe anytime.
• Legal & tax compliance (legal obligation): maintain records required by law.

Sharing your data (processors & partners)

We share only what’s necessary with trusted third parties, under data-processing agreements:

• Payment processors (e.g., card payments): cardholder name, email, transaction details—for payment verification and processing.
• Warehousing/fulfilment: order contents and shipping details—to assemble and dispatch your order.
• Shipping carriers / postal services: name and address—to deliver your package.
• Email service providers: email address (for transactional emails; for marketing only if you opted in).
• Analytics & site performance tools: device/usage data—to improve the site experience.

We do not sell your personal data.

International transfers

If data is transferred outside the EEA/UK, we use appropriate safeguards (e.g., Standard Contractual Clauses) where required.

How long we keep data

We keep data only as long as needed for the purpose collected, including:

• Orders & invoices: typically retained for the period required by tax/accounting laws.
• Support records: for as long as necessary to resolve your inquiry and maintain service history.
• Marketing data: until you unsubscribe or withdraw consent.
• Analytics cookies/ids: per tool settings or until you clear them—see “Cookies & tracking.”

Your rights (EU/UK GDPR)

You can exercise these at any time by contacting us:

• Access your data and get a copy
• Rectify inaccurate or incomplete data
• Erase data (“right to be forgotten”) where applicable
• Restrict or object to certain processing
• Data portability (receive data in a machine-readable format)
• Withdraw consent where processing is based on consent (e.g., marketing)

You also have the right to lodge a complaint with your data protection authority (e.g., ICO in the UK, or your local EU authority).

Cookies & tracking

We use cookies and similar technologies to:

• keep your session and cart working,
• understand site usage and improve performance,
• personalize content and measure campaigns (only with consent where required).

You can manage cookies in your browser settings. Some features may not work without essential cookies.

Children’s privacy

Our site is intended for adults. If you are under 18, use the site only with a parent or legal guardian. We do not knowingly collect personal data from children.

Security

We use administrative, technical, and organizational safeguards to protect personal data against unauthorized access, loss, or alteration. No method is 100% secure, but we continuously improve our protections.

Changes to this notice

We may update this policy from time to time. We’ll post the new version with an updated “Last updated” date. Continued use of the site means you accept the changes.

How to reach us

Questions or requests about your data?

Email: goppatches@gmail.com

We’ll respond as quickly as possible and within the timeframes required by GDPR.