Privacy policy

Last updated: April 20, 2026

SkinnyGoose Corp. OÜ operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Our Services are powered by Shopify, which enables us to provide them to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Data Controller

The data controller responsible for your personal information is:

SkinnyGoose Corp. OÜ
Sakala tn 7-2, Tallinn, 10141, Estonia
Email: support@justsaystop.com

For questions about this Privacy Policy, to exercise your data protection rights, or for any other data-related inquiry, please use the contact details above.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. We may collect or process the following categories of personal information:

Contact details including your name, address, billing address, shipping address, phone number, and email address.
Financial information including payment card information, transaction details, and payment confirmation. We do not store full payment card details on our servers; this information is processed directly by our payment providers.
Account information including your username, password, security questions, preferences and settings.
Transaction information including the items you view, put in your cart, purchase, return, exchange or cancel and your past transactions.
Communications with us including the information you include when sending a customer support inquiry.
Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
Marketing preferences including your consent choices, subscription status, and engagement with our marketing communications.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
Automatically through the Services including from your device when you visit our website, and through the use of cookies and similar technologies;
From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
From our partners or other third parties including affiliates participating in our Affiliate Program, social media platforms, and advertising partners.

Legal Basis for Processing (GDPR)

Where applicable law requires us to identify a legal basis for processing your personal information, we rely on the following bases under Article 6 of the GDPR:

Performance of a contract — when we process your personal information to fulfil an order or provide you with our Services;
Consent — when you have explicitly agreed to the processing, such as for marketing communications or non-essential cookies. You may withdraw your consent at any time;
Legitimate interests — when processing is necessary for our legitimate business interests, such as preventing fraud or improving our Services, provided these interests are not overridden by your rights;
Legal obligation — when we are required to process your personal information to comply with applicable laws.

How We Use Your Personal Information

We may use personal information for the following purposes:

Provide, Tailor, and Improve the Services. To process payments, fulfil orders, manage your account, arrange shipping, facilitate returns, and create a customised shopping experience.
Marketing and Advertising. To send marketing communications by email or postal mail, and to show you relevant advertisements on other websites. We rely on your consent for marketing to new customers and on our legitimate interests for marketing to existing customers, subject to your right to opt out at any time.
Security and Fraud Prevention. To authenticate your account, provide a secure shopping experience, and detect or investigate fraudulent or malicious activity.
Communicating with You. To provide customer support and maintain our business relationship with you.
Legal Reasons. To comply with applicable law or respond to valid legal process.

How We Disclose Personal Information

We may disclose your personal information to the following categories of third parties:

Platform provider: Shopify Inc. and its affiliates, which host our store and process transaction and customer data on our behalf.
Payment processors: Shopify Payments, PayPal, and other payment providers enabled in our checkout.
Shipping and fulfilment partners: DPD, DHL, UPS, Smartpost, Lpexpress and FedEx, who receive shipping information to deliver your order.
Marketing and email service providers: Klaviyo, which processes email addresses, order history, and engagement data for our marketing communications.
Analytics and advertising partners: Google (Google Analytics 4, Google Tag Manager), Meta Platforms (Facebook and Instagram Pixel), and TikTok (TikTok Pixel).
Affiliate Program platform: Shopify Collabs and associated payout providers (Wise, PayPal).
Professional advisors: lawyers, accountants, and auditors, where required.
Public authorities: where required by law, court order, or a valid legal request.
Corporate transactions: potential acquirers or successors in connection with a merger, acquisition, or similar transaction.

We do not sell your personal information for monetary consideration.

International Transfers

We are established in the European Union and primarily store and process your personal information within the European Economic Area (EEA). However, some of our service providers, including Shopify, Klaviyo, Google, Meta, and TikTok, may process your personal information outside the EEA, including in the United States.

Where we transfer your personal information outside the EEA to a country without an adequate level of protection, we rely on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit may be shared with Shopify and third parties located in countries other than where you reside. In these circumstances, Shopify is responsible for the processing of your personal information for those purposes. To learn more, visit the Shopify Consumer Privacy Policy. You may exercise certain rights with respect to Shopify's processing at https://privacy.shopify.com/en.

Cookies and Similar Technologies

We use cookies and similar technologies to operate essential functions, remember your preferences, measure performance, and deliver personalised marketing where you have consented. For detailed information, please see our separate Cookie Policy, accessible from the footer of our website.

Automated Decision-Making and Profiling

We do not make decisions that produce legal or similarly significant effects on you based solely on automated processing. We may use profiling techniques in the context of marketing to tailor product recommendations to your interests. You may object to such profiling at any time by contacting us or adjusting your cookie and marketing preferences.

Third Party Websites and Links

The Services may provide links to websites operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites. Our inclusion of such links does not imply any endorsement of their content.

Children's Data

The Services and our products are intended for use by persons aged 16 and over. We do not knowingly collect personal information from children under the age of 16. If you are the parent or guardian of a child under 16 who has provided us with their personal information, please contact us at support@justsaystop.com to request that it be deleted.

Security and Retention of Your Information

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction, including encrypted connections (TLS/SSL) and access controls. No security measures are perfect, and we cannot guarantee absolute security.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

Order and transaction records: seven (7) years from the date of the transaction, in accordance with Estonian accounting and tax obligations.
Customer account data: for as long as your account remains active, and up to three (3) years after the last activity.
Customer support communications: up to three (3) years from the date of the last communication.
Marketing data: until you withdraw your consent or object to processing.
Cookies and tracking data: as specified in our Cookie Policy, typically between 1 day and 24 months.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

Right to Access / Know — request access to personal information we hold about you.
Right to Delete — request deletion of your personal information.
Right to Correct — request correction of inaccurate personal information.
Right of Portability — receive a copy of your personal information and request its transfer to a third party.
Right to Object — object to our processing on the basis of legitimate interests, including for direct marketing.
Right to Restriction — ask us to restrict our processing in certain circumstances.
Right to Withdraw Consent — withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint — lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, https://www.aki.ee).
Managing Communication Preferences — opt out of marketing emails at any time using the unsubscribe link in our emails.

You may exercise any of these rights by contacting us at support@justsaystop.com. We will respond within one (1) month of receipt. To learn more about how Shopify uses your personal information, visit https://privacy.shopify.com/en.

Data Protection Officer

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 of the GDPR. All data protection inquiries can be directed to support@justsaystop.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised Policy on this website, update the "Last updated" date, and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at: