Only the data we need to get your order to you.

This site is operated by GOCHA INC ("Gocha", "we", "us"). For any privacy question, write to support@getgocha.com. We are the data controller for the information described here.

• Order details — name, email, shipping address, phone number, the items you bought and the amount paid.
• Account details — if you create an account, your email and the order history linked to it.
• Support messages — anything you send us by email or the contact form.
• Technical data — basic device, browser and page-view information used to keep the store running and to spot fraud.

We never see or store your full card number. Card details are entered on our payment provider's hosted checkout and stay with them.

• To take payment, ship your order and email you tracking updates (performing our contract with you).
• To handle returns, refunds and warranty claims.
• To prevent fraudulent orders and protect the store (our legitimate interest).
• To send marketing email only if you opted in — every message has a one-click unsubscribe.
• To meet tax and accounting obligations.

We share the minimum necessary with the partners that make an order possible. None of them may use your data for their own marketing:

• Amazon Multi-Channel Fulfillment — receives your name, shipping address, phone number and the items ordered so the parcel can be picked, packed and shipped. It does not receive payment details.
• Carriers (UPS, USPS, FedEx, Amazon Logistics) — receive delivery address and contact details to complete the delivery.
• Our payment processor — handles the card transaction and returns only a confirmation and the last four digits to us.
• Our hosting, database and email providers — store order data and send transactional email on our behalf.
• Authorities, where the law requires it.

We do not sell or rent your personal information, and we do not share it with advertising networks for cross-context behavioural advertising.

We use cookies and local storage to keep your cart and session working, and limited analytics to understand which pages are useful. You can clear or block cookies in your browser; essential cookies are required for checkout to function.

Order records are kept for 7 years to satisfy tax and accounting rules. Account data is kept while your account is open. Support emails are kept for 2 years. Marketing consent records are kept until you unsubscribe, plus a short period to prove the opt-out.

Depending on where you live (including under GDPR and the CCPA/CPRA) you can ask us to:

• Give you a copy of the data we hold about you.
• Correct anything inaccurate.
• Delete your data, where we're not required to keep it.
• Stop using it for marketing, at any time.
• Confirm that we have not sold or shared your personal information.

Email support@getgocha.com and we respond within 30 days. We will never charge you or treat you differently for exercising these rights.

Traffic is encrypted with TLS, access to order data is restricted to authorised staff, and every admin action is logged. No system is perfect — if a breach ever affects you, we will tell you.

Our store is not intended for children under 16, and we do not knowingly collect their data. If this policy changes we update the date at the top of the page, and we email account holders about material changes.