Privacy policy

 

Last updated: October 30, 2025

This Privacy Policy explains how GOS STUFF (“we”, “us”, “our”) processes personal data when you visit our website or make a purchase. GOS STUFF uses Shopify’s technology and infrastructure to operate the store.

By using our services, you confirm that you have read and understood this policy.

1. Data Controller

Controller: GOS STUFF — Carmen Pena Arriaza
VAT/NIF: ES45943996R
Address: Carrer de Déu i Mata 140, Atico, 08029 Barcelona, Spain
Contact email: hello@gosstuff.com

2. Personal data we process

We collect and process data that identifies you or makes you identifiable, such as:

Contact details: name, email, phone number, shipping and billing address.
Account data: username/password (if you create an account), preferences.
Purchase and payment data: items purchased, amounts, payment method, confirmations
(payments are processed through secure gateways; we do not store full card numbers).
Communications: support messages, reviews.
Technical/usage data: IP address, device, browser, cookies, and interactions with the website (see Cookie Policy).

3. Purposes and legal bases (GDPR art. 6)

  • Order, payment, and delivery management (contract performance, art. 6.1.b).

  • Customer service and transactional communications (contract performance, art. 6.1.b).

  • Customer account and preferences (contract performance/pre-contractual measures, art. 6.1.b).

  • Fraud prevention and security (legitimate interest, art. 6.1.f; legal obligations, art. 6.1.c).

  • Marketing (newsletter, offers) with your consent (art. 6.1.a). You can withdraw it at any time.

  • Website improvement and analytics (legitimate interest/consent through cookies).

  • Legal and tax compliance (art. 6.1.c).

4. Who we share data with

We share data with service providers who help us deliver our services, under data processing agreements:

  • Shopify (store platform and hosting).

  • Payment gateways (e.g., Shopify Payments/Stripe/PayPal): securely process payments.

  • Logistics/shipping services (e.g., Sendcloud and carriers).

  • Email/automation (e.g., Shopify notifications and, if integrated, Klaviyo or similar).

  • Analytics/ads tools (only if you accept marketing cookies).

We may also disclose data when required by law (tax authorities, official bodies) or during corporate operations (merger/sale), always with appropriate safeguards.

5. Shopify and advanced features

Our store is hosted on Shopify, which may use certain information (pseudonymized or aggregated) to improve its platform and services. For these purposes, Shopify acts as an independent controller.
More information and rights management with Shopify: https://privacy.shopify.com/en

6. International transfers

Some providers may be located outside the EEA/EU (e.g., Canada/USA). Where transfers occur, we apply Standard Contractual Clauses or other recognized mechanisms and, when necessary, additional safeguards.

7. Data retention periods

  • Orders and invoicing: legal retention periods (typically up to 6 years for accounting/tax obligations).

  • Customer account: until you close it or after a reasonable period of inactivity.

  • Support/inquiries: up to 2 years after last interaction.

  • Marketing: until you withdraw consent or unsubscribe.

  • Security/fraud: for the duration of the investigation and applicable legal periods.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction, portability, and withdrawal of consent by emailing hello@gosstuff.com.
We may need to verify your identity. You may also appoint a representative.

If you are not satisfied with our response, you may file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

9. Minors

Our services are not directed at minors. If you believe a minor has provided us with data, please contact us and we will delete it.

10. Security

We implement appropriate technical and organizational measures, but no system is completely infallible. Please avoid sending sensitive information through unencrypted channels.

11. Marketing communications

We will only send marketing communications if you have opted in, or if a prior relationship exists as permitted by law. You can unsubscribe at any time via the link in the email or by contacting us.

12. Cookies

We use first-party and third-party cookies for functionality, analytics, and (with your consent) marketing. More details, categories, and consent management are available in our Cookie Policy.

13. Changes to this policy

We may update this policy for legal or operational reasons. We will publish the updated version and indicate the date of the last revision.

14. Contact

Email: hello@gosstuff.com
Postal address: Carrer de Déu i Mata 140, Atico, 08029 Barcelona, Spain