Privacy and cookies

Controller

GopherMerch. Contact: hola@gophermerch.com.

What data we process and why

The name, email, phone and shipping address you enter when paying, and any logo or text you upload for a personalisable item, solely to make and deliver your order, support you and meet tax obligations. Legal basis: performance of the contract (art. 6(1)(b) GDPR) and legal obligation (art. 6(1)(c)).

Who we share it with

• Stripe (payment processing).
• The companies that make and carry your order (production and parcel delivery), only with the data needed to do so.
• Cloudflare (website hosting and storage of personalised design files).
• Resend (order emails).

Some of these providers may process data outside the European Economic Area; when they do, it is with appropriate safeguards (European Commission standard contractual clauses or the EU-US Data Privacy Framework).

Retention

For as long as needed for the order and then the legal periods (6 years for tax and accounting purposes). Personalised design files are deleted when no longer needed for the order or the guarantee.

Your rights

Access, rectification, erasure, objection, restriction and portability by writing to hola@gophermerch.com. You can complain to the Spanish Data Protection Agency (aepd.es).

Cookies

This website does not use analytics or advertising cookies. We only keep your cart in your browser’s local storage, which is technically necessary and never sent anywhere. At checkout, Stripe may use strictly necessary cookies to prevent fraud.