Privacy policy

Privacy Policy

Last updated: 1.07.26

Goldentag operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Goldentag is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
• Account information including your username, password, security questions, preferences and settings.
• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
• Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
• Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

2. Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
• From our partners or other third parties.

3. Legal Basis for Processing (EEA, UK and Swiss Residents)

Where applicable, we process personal information on one or more of the following legal grounds:

• Performance of a contract;
• Compliance with legal obligations;
• Legitimate business interests;
• Consent where required by law.

Our legitimate interests include fraud prevention, cybersecurity, business administration, customer support, debt recovery, legal claims management, service improvement, direct marketing where permitted by law, and protection of our business operations.

4. How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

5. Provide, Tailor, and Improve the Services.

We use your personal information to:

• Process orders and payments;
• Fulfill deliveries;
• Manage subscriptions;
• Provide customer support;
• Maintain accounts;
• Facilitate returns and exchanges;
• Personalize shopping experiences;
• Improve products and services.

6. Marketing and Advertising.

We may use personal information to send promotional communications and display personalized advertising where permitted by law. You may unsubscribe from marketing communications at any time.

Where required by law, customers may object to or opt out of certain uses of personal information for targeted advertising, profiling, or cross-context behavioral advertising. Requests may be submitted by contacting us at info@goldentag.com.

7. Security and Fraud Prevention.

We use personal information to:

• Authenticate users;
• Prevent fraud and abuse;
• Protect customers and business operations;
• Detect suspicious activity;
• Secure payment processing;
• Enforce our Terms and Policies.

Customers are responsible for maintaining the confidentiality of their login credentials.

8. Automated Fraud Prevention and Risk Assessment

To protect our customers, suppliers, payment partners, and business operations, Goldentag may use automated systems, fraud detection tools, transaction monitoring technologies, and risk-scoring mechanisms.

Orders, subscriptions, payments, accounts, or transactions that appear suspicious, fraudulent, abusive, unauthorized, or otherwise high-risk may be delayed, restricted, suspended, canceled, or subject to additional verification requirements.

Goldentag reserves the right to refuse, limit, or cancel any transaction where fraud, abuse, or misuse is reasonably suspected.

9. Communicating with You.

We use personal information to:

• Respond to inquiries;
• Provide customer support;
• Send service-related communications;
• Maintain our business relationship with customers.

10. Legal Reasons.

We may process personal information to:

• Comply with legal obligations;
• Respond to lawful requests from public authorities;
• Enforce our agreements;
• Protect our rights and property;
• Establish, exercise, or defend legal claims.

11. How We Disclose Personal Information

We may disclose personal information:

• To Shopify;
• To payment processors;
• To logistics and shipping providers;
• To customer service providers;
• To cloud hosting providers;
• To analytics and marketing partners;
• To professional advisers including lawyers, auditors, insurers, and consultants;
• To government authorities when required by law;
• To affiliates within our corporate group.

12. Chargebacks and Dispute Management

If a customer initiates a chargeback, payment dispute, refund claim, or similar action, Goldentag may retain and process relevant transaction information, communications, shipping records, device information, fraud-prevention data, and account history.

Such information may be shared with payment providers, banks, card networks, legal advisers, insurers, and competent authorities for the purpose of defending legal rights and resolving disputes.

13. Relationship with Shopify

The Services are hosted by Shopify. Information submitted through the Services may be processed by Shopify and its authorized service providers. Please review Shopify's privacy documentation for additional information regarding Shopify's processing activities.

14. Data Controller Status

Goldentag acts as the data controller with respect to customer information collected through the Services.

Certain service providers, including Shopify, may process personal information on our behalf as processors or service providers.

Where applicable, customers should direct privacy requests concerning purchases made through the Services to Goldentag as the primary point of contact.

15. Third Party Websites and Links

The Services may contain links to third-party websites.

Goldentag is not responsible for the privacy practices, content, availability, or security of third-party websites.

Accessing third-party websites is done at your own risk.

16. Children's Data

The Services are intended only for individuals who are at least 18 years old or the age of majority in their jurisdiction.

We do not knowingly collect personal information from children.

If we become aware that personal information has been collected from a child without appropriate authorization, we will take reasonable steps to delete such information.

17. Security and Retention of Your Information

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However:

• No system is completely secure;
• No method of electronic transmission is completely secure;
• We cannot guarantee absolute security.

Goldentag does not guarantee uninterrupted, error-free, or completely secure operation of the Services and makes no warranty that personal information will never be accessed, disclosed, altered, or destroyed despite reasonable safeguards.

Unless a longer retention period is required by law, we retain personal information only as long as necessary for:

• Providing Services;
• Maintaining customer accounts;
• Legal compliance;
• Tax and accounting obligations;
• Fraud prevention;
• Enforcement of agreements;
• Resolution of disputes.

Certain transaction, accounting, tax, and compliance records may be retained for up to ten (10) years or longer where required by law.

While we respect your choices regarding your data, we cannot fulfill a deletion request for information that remains strictly necessary to complete ongoing services, manage active customer accounts, perform mandatory financial reporting, prevent fraudulent activity, or handle potential legal claims.

18. Business Transfers

In connection with a merger, acquisition, restructuring, financing transaction, sale of assets, bankruptcy, insolvency proceeding, or similar corporate event, personal information may be transferred as part of the transaction, subject to applicable legal requirements.

19. Your Rights and Choices

Subject to applicable law, you may have the right to:

• Access your personal information;
• Correct inaccurate information;
• Delete personal information;
• Restrict processing;
• Object to processing;
• Withdraw consent;
• Receive a portable copy of your information.

These rights may be limited where legal exemptions apply.

20. Verification of Requests

To protect personal information and prevent unauthorized access, Goldentag may require reasonable identity verification before responding to privacy requests. If identity cannot be reasonably verified, Goldentag may deny or limit a request as permitted by law.

21. Managing Communication Preferences

You may unsubscribe from marketing communications at any time.

Even if you opt out of marketing communications, we may continue sending:

• Order confirmations;
• Shipping notifications;
• Account notices;
• Security alerts;
• Legal and compliance communications.

22. International Transfers

Personal information may be transferred to and processed in countries outside your country of residence. Where required by law, Goldentag relies on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, the Swiss Transatlantic Data Privacy Framework, or specific transfer mechanisms recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC) where applicable.

23. Limitation of Liability

To the fullest extent permitted by law, Goldentag shall not be liable for indirect, incidental, consequential, punitive, or special damages arising from:

• Unauthorized access to personal information;
• Cyberattacks;
• Service interruptions;
• Third-party failures;
• Internet infrastructure failures;
• Events beyond Goldentag's reasonable control.

Nothing in this Privacy Policy excludes liability that cannot be excluded under applicable law.

24. No Waiver of Legal Rights

Nothing in this Privacy Policy limits Goldentag's right to retain, use, disclose, or otherwise process personal information where required or permitted by applicable law, legal process, regulatory requirements, law enforcement requests, or for the establishment, exercise, or defense of legal claims.

25. Complaints

If you believe your privacy rights have been violated, please contact us first so that we can attempt to resolve the issue. You may also have the right to lodge a complaint with a competent data protection authority.

If you are a resident of Switzerland, you may lodge a complaint directly with the Federal Data Protection and Information Commissioner (FDPIC).

26. Cookies and Similar Technologies

Goldentag and its service providers, including Shopify, may use cookies, pixels, tags, SDKs, and similar technologies to:

- Operate and secure the Services;

- Remember customer preferences;

- Analyze website traffic and performance;

- Measure marketing effectiveness;

- Personalize content and advertisements;

- Detect and prevent fraud.

Depending on your location, you may have the ability to manage cookie preferences through browser settings or consent management tools made available on the Services. Disabling certain cookies may affect the functionality of the Services.

27. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will become effective upon posting the updated version on the website unless otherwise required by applicable law.

28. Contact

For privacy-related inquiries or requests:

Email: info@goldentag.com

Address: 59, Archiepiskopou Makariou III, Larnaca, 6017, Cyprus

Goldentag acts as the data controller for purposes of applicable data protection laws.