Privacy Policy

Privacy Policy

Last Updated: 1 September 2025

Data Controller: General Goodsy OÜ (to be updated with your Estonian registration number and address upon registration)
Email: customersupport@generalgoodsy.store

This Privacy Policy describes how General Goodsy™ ("we," "us," or "our") collects, uses, and protects the personal data of users in the European Union (EU) and the United Kingdom (UK), in compliance with the General Data Protection Regulation (GDPR) and UK GDPR.

1. What Personal Data We Collect & Our Legal Basis

We collect information that you provide directly to us. The table below outlines what we collect and why, as required by GDPR.

Category of Data Purpose of Processing Legal Basis for Processing
Identity & Contact Data (name, email, shipping address, phone number) To process and fulfill your orders, manage your account, and communicate with you. Necessary for the performance of a contract with you.
Payment Information (card details processed by PCI-compliant partners) To complete your transaction. Necessary for the performance of a contract.
Technical & Device Data (IP address, browser type, device info) To analyze website performance, prevent fraud, and improve our services. Our legitimate interest in maintaining a secure and functional website.
Marketing & Communications Data To send you marketing communications with your consent. Your consent (which you can withdraw at any time).
SMS Subscription Data (phone number) To send you automated marketing messages and order updates via SMS. Your consent (which you can withdraw by replying STOP).

2. How We Use Your Personal Data

We use your data for the following purposes, supported by a legal basis:

  • Order Fulfillment: To process your orders and manage returns (Legal basis: Contract).

  • Customer Service: To respond to your inquiries and support requests (Legal basis: Legitimate Interest).

  • Marketing: To send you promotional offers, abandoned cart reminders, and product updates (Legal basis: Consent).

  • Security & Fraud Prevention: To protect our website and users (Legal basis: Legitimate Interest).

  • Legal Compliance: To meet our tax and regulatory obligations (Legal basis: Legal Obligation).

3. International Data Transfers

Your data may be transferred outside the EU/UK to countries that may not have equivalent data protection laws. When we do this, we ensure your data is protected by using one of the following safeguards:

  • Adequacy Decisions: Transfers to countries deemed 'adequate' by the European Commission.

  • Standard Contractual Clauses (SCCs): We use EU-approved contractual clauses with our third-party providers (e.g., Shopify, US carriers, email marketing services) to ensure they protect your data to EU standards.

4. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For example, we retain order information for a minimum of 7 years for tax compliance purposes.

5. Your Data Protection Rights (GDPR & UK GDPR)

Under data protection law, you have rights including:

  • Access: The right to request copies of your personal data.

  • Rectification: The right to request correction of inaccurate or incomplete data.

  • Erasure ("Right to be Forgotten"): The right to request we delete your personal data.

  • Restriction of Processing: The right to request we suspend processing of your data.

  • Data Portability: The right to request the transfer of your data to another organization.

  • Objection to Processing: The right to object to processing based on legitimate interests.

To exercise any of these rights, please contact us at customersupport@generalgoodsy.store.

6. Cookies and Similar Technologies

We use cookies to analyze site traffic and personalize content. You can manage your preferences via our cookie banner when you first visit our site or through your browser settings.

7. Children’s Privacy

Our service is not intended for children under 16. We do not knowingly collect data from children. If you believe we have, please contact us immediately.

8. Changes to This Policy

We may update this policy to reflect legal or operational changes. We will notify you of any significant changes by email or a notice on our website.

9. How to Contact Us

For questions about this policy or to exercise your rights, please contact our Data Protection team at:
Email: customersupport@generalgoodsy.store
Phone: +1 (512) 900-9530 (US business line - for EU/UK queries, email is preferred)

Supervisory Authority:
If you have a complaint about our use of your data, you have the right to lodge a complaint with your local Supervisory Authority (e.g., the Information Commissioner's Office (ICO) in the UK or the Data Protection Inspectorate (AKI) in Estonia).