Privacy Policy
This policy explains how GoalRoxi handles personal data when you browse the website, place an order, make a payment or contact customer service.
01Data controller
The data controller for personal data processed through this website is Luoyang Mengjin District Jiangya Trading Co., Ltd., operating the brand GoalRoxi.
02Personal data categories
Orders
Name, billing and delivery details, order contents, order status and transaction-related records.
Payments
Payment-related information required to process a transaction. Card payments are processed through Stripe; we do not ask you to send full card-security data by ordinary email.
Customer service
Messages, support requests, return or refund information and other correspondence you choose to provide.
Technical information
Device, browser, network, security and website-usage information that may be processed when you access the service.
Cookies
Cookie and similar-technology data as described in the Cookie Policy, subject to consent requirements where applicable.
03Purposes and GDPR legal bases
We process personal data only where a lawful basis applies. Depending on the activity, this may include performance of a contract, compliance with legal obligations, legitimate interests, or consent.
Contract performance
To process orders, payments, delivery, returns, refunds and customer-service requests.
Legitimate interests
To operate, protect and improve the service, including appropriate fraud-prevention and security measures, where those interests are not overridden by your rights.
Legal obligations
To meet accounting, consumer-protection, regulatory or other applicable legal requirements.
Consent
For processing that requires consent, including certain non-essential cookie or similar-technology uses where enabled.
04Service providers and payment processing
We may use service providers to support hosting, order fulfilment, delivery, communications, security and other operational functions. Providers may process personal data only for relevant service purposes and subject to applicable contractual and legal safeguards.
Card payment processing is provided through Stripe. The payment methods actually displayed on the Payment or Checkout page govern availability for a specific transaction.
05International transfers
Because the website serves international customers and may use service providers in different locations, personal data may be processed outside your country. Where applicable law requires transfer safeguards, appropriate mechanisms are used for such transfers.
06Data retention
Personal data is retained only for as long as reasonably necessary for the purposes described in this policy, including order administration, customer service, security, legal compliance, dispute handling and record-keeping. Different categories may have different retention periods.
07Data subject rights
Where GDPR or other applicable data-protection law applies, you may have rights including:
- Access to personal data
- Rectification of inaccurate data
- Erasure where applicable
- Restriction of processing
- Data portability where applicable
- Objection to certain processing
- Withdrawal of consent at any time for consent-based processing
- Complaint to a competent supervisory authority
To exercise a privacy right, contact privacy@goalroxi.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
08Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration. No online system can be described as absolutely secure.
09Contact
Privacy questions, cookie questions, consent requests and data-subject requests should be sent to privacy@goalroxi.com.