Legal
Privacy notice
Last updated 6 October 2026
GoalMerch Ltd is the controller of your personal data (ICO registration [ICO registration number]). Contact us about privacy at hello@goalmerch.com.
What we collect and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, delivery address, email, phone | Processing and delivering your order, customer service | Contract |
| Payment details | Taking payment. Card details go directly to Stripe; we never see or store them. | Contract |
| Order history | Returns, refunds, accounting and tax records (kept 6 years) | Legal obligation |
| Email and club preference (if you opt in) | Newsletters, offers and gift reminders | Consent |
| Back-in-stock requests | One email when the item returns | Your request |
| Fraud signals (IP address, device) | Preventing payment fraud and bots | Legitimate interests |
Who we share it with
- Our fulfilment partner, a licensed UK merchandise supplier who packs and ships your order: your name, address and the items ordered.
- Carriers (Royal Mail, UPS): delivery details.
- Stripe: payment processing and fraud prevention.
- Cloudflare: website hosting, security and email delivery.
- Our accountants and authorities where the law requires.
We never sell your data. Some providers process data outside the UK under UK-approved safeguards.
Your rights
You can ask to access, correct or delete your data, object to processing, or withdraw marketing consent at any time using the unsubscribe link in any email. You can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See our cookie notice.