Privacy Policy

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.

When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.

Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.

How do you get my consent?

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

How do I withdraw my consent?

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at hello@itsthat.shop

SECTION 3 – DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

SECTION 4 – GELATO

Most of our store orders are processed by Gelato. They provide the ability to manufacturer certain products, send them from their worldwide production and distribution networks.

For more insight, you may also want to read Gelato’s Terms of Service or Privacy Statement.

SECTION 5 – THIRD-PARTY SERVICES

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

Links

When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECTION 6 – SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

SECTION 7 – COOKIES

Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.

__ssid, unique token, sessional, Allows us to store information about your session (referrer, landing page, etc).

__stripe_mid, no data held, Stripe payment processor to validate user

_ga, user information shared with Google Analytics to track number of visits to the site.

There may be other cookies stored by Third Party plugins and applications which are not relevant to you as a customer or user, they simply store information to keep the site running for the session you are connected.

When you have an account with us there are other cookies stored to store your login data.

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

SECTION 9 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

SECTION 10 – SOCIAL MEDIA & CONNECTED PLATFORMS

We operate official brand accounts on social media platforms including TikTok, YouTube, Instagram, Facebook, Reddit and Mastodon. Our in-house publishing tools connect to these platforms’ official APIs (including TikTok for Business, YouTube API Services and the Meta Graph API) solely to publish our own original content to our own accounts, to view engagement statistics for our own posts, and to read and respond to public comments left on our content.

Through these APIs we access and store: our own account identifiers and profile details; secure access tokens (held encrypted on our own servers and never shared with third parties); and engagement data relating to our own posts. If you comment on our content, we may process your public username and comment text solely in order to reply to you. We do not use these tools to collect, profile or store personal information about platform users, and we never sell such data.

Our tools use YouTube API Services. Information relating to YouTube is also handled in accordance with the Google Privacy Policy. Data accessed from TikTok is handled in accordance with TikTok’s Terms of Service and applicable developer policies.

To request deletion of any personal data held in this context (for example, a record of a comment interaction), contact us at hello@itsthat.shop and we will remove it within 30 days. You can also revoke our tools’ access at any time from your settings on the relevant platform, which immediately invalidates the associated access tokens.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at hello@itsthat.shop.

Blog Policy

Who we are

Our website address is: https://itsthat.shop/. Our business name is Go Kat Me Ltd, registered in the United Kingdom under Companies House as a registered business trading under number 14603586

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

PLATFORM DATA & PUBLISHING TOOLS

Its.That. operates its own social media accounts (including TikTok, YouTube, Instagram and Facebook) and uses an in-house publishing tool to post content to those accounts. When we connect this tool to a platform such as TikTok, it accesses only data belonging to our own brand accounts: the account ID, display name, avatar, and the access tokens the platform issues to authorise posting.

Access tokens are stored securely server-side and are never shared with third parties. Our publishing tool does not collect, store, or process any data about other users of those platforms — no follower data, no viewer data, and no data from anyone interacting with our content on those platforms.

DATA DELETION REQUESTS

You may request deletion of any personal data we hold about you at any time by emailing hello@itsthat.shop. We will confirm receipt and complete the deletion within 30 days, except for data we are legally required to retain (such as tax records for completed orders). See our data deletion instructions for details.