Privacy policy

GoPokeShop Privacy Policy

Last updated: August 1, 2026

This Privacy Policy explains what personal information GoPokeShop (“we”, “us”) collects when you visit or buy from gopokeshop.com (the “Site”), how we use it, who we share it with, and the choices you have. GoPokeShop is operated by RR Aesthetic & HG Capital AB (org. no. 559423-2679), Östra Storgatan 75, 553 21 Jönköping, Sweden. We sell and ship to the United States only.

Questions, requests or complaints: hello@gopokeshop.com — we reply within 1 business day.

1. Information we collect

Information you give us. When you place an order we collect your name, email address, shipping address, billing address, phone number (if you provide one) and the contents of your order. Payment card details are entered directly with our payment processors — we never see or store your full card number.

Information collected automatically. When you browse the Site we collect device and usage information: IP address, browser type and version, time zone, operating system, referring site or search terms, the pages and products you view, and how you interact with the Site. This is collected through cookies, pixels and log files.

Information you choose to submit. Newsletter signups (email address), product reviews (the name shown on the review, rating, text and any photo you upload), and anything you send us by email.

We do not knowingly collect personal information from children under 13.

2. How we use it

  • To process, fulfil and ship your order, and to send order confirmations, shipping notices and tracking.
  • To provide customer support and handle returns, replacements and refunds.
  • To detect and prevent fraud and abuse.
  • To measure how the Site performs and improve it.
  • To show you relevant advertising for GoPokeShop on Google and Meta platforms, and to measure whether that advertising works.
  • To send marketing email if you signed up for it. Every marketing email has an unsubscribe link.

3. Who we share it with

We do not sell your personal information for money. We share it with the following service providers, and only for the purposes listed:

  • Shopify Inc. — hosts the Site, runs the checkout, and stores order and customer records. Shopify privacy policy
  • Mollie B.V. — processes card and other payments at checkout. Mollie privacy policy
  • PayPal — processes payments when you choose PayPal at checkout. PayPal privacy policy
  • Google LLC — Google Analytics 4 (measurement ID G-3N0C2XB593) for site analytics, and Google Ads for advertising and conversion measurement. This includes Customer Match: we upload customer email addresses to Google in an irreversibly hashed (SHA-256) form so Google can show our ads to existing customers and to similar audiences. Google receives the hash, not the plain email address. Google privacy policy
  • Meta Platforms, Inc. — the Meta (Facebook/Instagram) pixel, id 240423477016284, is active on the Site. It records browsing and purchase events and is used for advertising and ad measurement. Under some US state privacy laws this kind of cross-context advertising is treated as a “sale” or “sharing” of personal information. Meta privacy policy
  • Judge.me — collects and displays product reviews and sends review-request emails; receives your name and email address. Judge.me privacy policy
  • Suppliers and shipping carriers outside the United States, including in China. Products are shipped directly from our suppliers. To fulfil an order we pass the recipient’s name, shipping address and phone number to the supplier and to the carrier so the parcel can be delivered and tracked. They receive nothing else — no email address, no payment details, no order history.

We may also disclose personal information to comply with applicable law, a lawful request or a subpoena, or to protect our rights.

4. Targeted advertising — and how to opt out

We use Google Ads and the Meta pixel to advertise GoPokeShop, and we upload hashed customer email addresses to Google for Customer Match audiences. This is targeted (cross-context behavioural) advertising.

You can opt out at any time:

5. Your rights — all customers

These rights apply to every customer, wherever you live. You can:

  • Know what personal information we hold about you and how we use it.
  • Get a copy of it in a portable format.
  • Correct information that is wrong or out of date.
  • Delete your personal information, subject to records we are required to keep for tax, accounting and fraud-prevention reasons.
  • Opt out of marketing email, and of targeted advertising and any sharing of your data for advertising (see section 4).
  • Not be discriminated against for exercising any of these rights — same prices, same products, same service.

To exercise any right, email hello@gopokeshop.com from the address on your order, or write to the postal address above. We reply within 1 business day and complete the request within 45 days. We may need to confirm your identity by asking about a recent order before we act. If we turn a request down we will tell you why, and you can ask us to reconsider by replying to that email.

Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana and other US states with consumer-privacy laws may have additional statutory rights; we apply the rights above to everyone rather than making you check whether your state qualifies. If you are in the UK or EU: we do not sell or ship there, but if we hold data about you, you have the same rights listed above and can also complain to your local data-protection authority.

6. Cookies and similar technologies

What Set by Why Roughly how long
_shopify_y, _shopify_s, _y, _s Shopify Session and unique-visitor tracking, keeps you signed in Session to 1 year
cart, cart_ts, cart_sig, checkout Shopify Remembers what is in your cart through checkout Up to 2 weeks
secure_customer_sig, _secure_session_id Shopify Keeps your account session secure Up to 1 year
_ga, _ga_* Google Analytics 4 Site analytics — how the Site is used Up to 2 years
_gcl_au, _gcl_* Google Ads Measures whether an ad led to a purchase Up to 90 days
_fbp, _fbc Meta pixel Advertising and ad measurement Up to 90 days
Judge.me cookies Judge.me Shows and collects product reviews Up to 1 year

You can block or delete cookies in your browser settings. Blocking essential Shopify cookies will break the cart and checkout. Blocking analytics and advertising cookies does not affect your ability to shop.

7. How long we keep it

  • Order and transaction records: 7 years, because accounting and tax law requires it.
  • Customer account and marketing-list data: until you ask us to delete it, or after 3 years with no activity.
  • Analytics and advertising data: up to 26 months at Google, up to 90 days at Meta, then aggregated or deleted.
  • Support emails: 2 years.
  • Reviews: for as long as the product is listed, unless you ask us to remove yours.

8. Security

Payment pages are served over TLS and card data is handled by Mollie and PayPal, both PCI-DSS compliant — we never store card numbers. Admin access to customer data is limited to the store owner. No system is perfectly secure, so we cannot guarantee absolute security; if a breach affects your personal information we will notify you as required by law.

9. International transfers

We operate from Sweden and use service providers in the United States, the European Union and elsewhere. Fulfilment suppliers and carriers are located outside the United States, including in China, and receive the recipient’s name, address and phone number so your parcel can be shipped and tracked.

10. Changes to this policy

We may update this policy to reflect changes to our practices or for legal reasons. The “last updated” date at the top always shows the current version.

11. Contact us