Privacy policy

Privacy Policy

Effective date: February 2, 2026

This Privacy Policy explains how GothRider (the “Site”, “we”, “us”, or “our”), operated by GothRider (11763113 Canada Inc), collects, uses, discloses, and protects your personal information when you visit, use our services, or make a purchase from our website.

This Privacy Policy is written to align with commonly applicable requirements in Canada (including Québec privacy rules), the United States (including California privacy rights), the United Kingdom (UK GDPR), and Australia (Privacy Act principles), where applicable. Your rights and our obligations may vary depending on your location.

1. What information we collect

We collect personal information in the following ways:

  • Information you provide: Name, billing and shipping address, email address, phone number, payment details (processed by payment providers), order details, returns and support communications.
  • Automatically collected information: IP address, device identifiers, browser type, operating system, referring pages, pages viewed, and interaction data.
  • Cookies and similar technologies: Used to operate the Site, remember preferences, and support analytics and marketing (see Section 8).

2. How we use your information

We use personal information to:

  • Process orders, payments, shipping, returns, exchanges, and customer service.
  • Verify transactions and help prevent fraud and security incidents.
  • Communicate with you about your order, account, or requests.
  • Send marketing communications when permitted (email and SMS, where applicable).
  • Improve our Site, services, product offerings, and user experience.
  • Comply with legal and regulatory obligations.

3. Legal bases for processing (UK, and similar frameworks)

Where required, we rely on one or more of the following legal bases:

  • Contract: To provide products and services you request, including processing orders.
  • Consent: For optional marketing communications, where consent is required.
  • Legitimate interests: To operate and improve the Site, prevent fraud, and maintain security, provided those interests are not overridden by your rights.
  • Legal obligations: To meet tax, accounting, and other legal requirements.

4. Consent and how to withdraw consent

How do you get my consent?

When you provide personal information to complete a transaction, verify your payment method, place an order, arrange for delivery, or return a purchase, we infer you consent to our collecting and using it for that specific purpose.

If we ask for your personal information for a secondary reason, such as marketing, we will ask you directly for your express consent or give you a clear opportunity to decline.

How do I withdraw my consent?

You can withdraw consent for marketing at any time:

  • Email: Use the unsubscribe link in our marketing emails, or contact us at support@gothrider.com.
  • SMS: Reply STOP to unsubscribe, or HELP for help. Message and data rates may apply.

You may also withdraw consent for continued collection, use, or disclosure by contacting us at support@gothrider.com or by mail at:

GothRider (11763113 Canada Inc)
CP 162, PO BUREAU-CHEF
Chambly, Quebec, J3L 4B3
Canada

5. Text marketing and notifications

By subscribing to text notifications, you agree to receive recurring automated marketing messages at the phone number provided. Consent is not a condition of purchase. Reply STOP to unsubscribe, HELP for help. Message and data rates may apply.

Additional messaging terms and privacy information may apply:

6. Disclosure of personal information

We may disclose personal information:

  • To service providers who help operate our business (for example: ecommerce platform, payment processing, fulfillment, email and SMS providers, analytics).
  • If required by law, regulation, subpoena, court order, or other lawful request.
  • To protect our rights, users, and services, including investigating fraud or security issues.
  • In connection with a business transaction (for example, merger, acquisition, or asset sale), where permitted by law.

7. Shopify hosting and payments

Our store is hosted on Shopify Inc. Shopify provides the online ecommerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases, and the general Shopify application on a secure server behind a firewall.

Payment

If you choose a direct payment gateway to complete your purchase, Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as necessary to complete your transaction. After that, the purchase transaction information is deleted.

All direct payment gateways adhere to PCI-DSS standards managed by the PCI Security Standards Council, a joint effort of brands such as Visa, MasterCard, American Express, and Discover.

For more information, you may review: Shopify Terms of Service and Shopify Privacy Policy.

8. Cookies and similar technologies

We use cookies and similar technologies to operate the Site, remember preferences, support shopping cart functionality, and help us understand site usage. You can manage cookies through your browser settings and, where available, through on-site cookie controls.

Examples of cookies that may be used:

  • _session_id, unique token, sessional, allows Shopify to store information about your session (referrer, landing page, etc.).
  • _shopify_visit, no data held, persistent for 30 minutes from last visit, internal stats tracker.
  • _shopify_uniq, no data held, expires midnight of the next day, counts visits by a single customer.
  • cart, unique token, persistent for 2 weeks, stores information about the contents of your cart.
  • _secure_session_id, unique token, sessional.
  • storefront_digest, unique token, indefinite, used if the shop has a password.
  • PREF, set by Google, tracks visits and origin.

Google Analytics

We may use Google Analytics to help us learn about who visits our site and what pages are being viewed.

9. International transfers

We may transfer, store, or process your personal information outside your province, state, or country, including in the United States or other jurisdictions, where our service providers or their facilities are located.

Where required, we take steps designed to ensure an appropriate level of protection for transferred personal information, consistent with applicable legal requirements.

10. Data retention

We keep personal information only as long as necessary for the purposes described in this Privacy Policy, including to provide services, comply with legal obligations (for example, tax and accounting requirements), resolve disputes, and enforce agreements. When information is no longer required, we take reasonable steps to delete, anonymize, or securely destroy it, as appropriate.

11. Security

We take reasonable precautions and follow industry best practices to help protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.

If you provide payment information, it is encrypted using SSL technology and handled under PCI-DSS standards through our payment providers. No method of transmission or storage is 100 percent secure, but we use safeguards designed to reduce risk.

12. Your privacy rights

Depending on your location, you may have rights regarding your personal information, such as the right to:

  • Request access to personal information we hold about you.
  • Request correction of inaccurate or incomplete personal information.
  • Request deletion of personal information (subject to legal exceptions).
  • Object to or restrict certain processing (where applicable).
  • Withdraw consent where processing is based on consent.
  • Request portability of certain information (where applicable).

Canada (including Québec)

You may request access or correction by contacting us using the details in Section 15. Where applicable, you may also have the right to ask questions about how information is used, and to file a complaint with a privacy regulator.

United States, including California

If you are a California resident, you may have rights such as the right to know, delete, and correct personal information, and the right to opt out of the sale or sharing of personal information for targeted advertising, where applicable. We do not sell personal information in the traditional sense, and we do not knowingly sell personal information of minors under 16.

If we engage in sharing for cross-context behavioral advertising in the future, we will provide an opt-out mechanism as required. Some browsers or extensions may send a Global Privacy Control (GPC) signal, which may be treated as an opt-out of sale or sharing where applicable.

You may exercise applicable rights by contacting us (Section 15). We will not discriminate against you for exercising your rights.

United Kingdom (UK GDPR)

If the UK GDPR applies, you may have the right to access, rectify, erase, restrict, object, and portability, and the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Australia

If Australian privacy law applies, you may request access or correction of personal information, and you may complain if you believe we have mishandled your information. You may also contact the Office of the Australian Information Commissioner (OAIC).

13. Third-party links

When you click on links on our Site, they may direct you away from our Site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

14. Age of consent

By using this Site, you represent that you are at least the age of majority in your state, province, or country of residence, or that you are the age of majority and you have given us your consent to allow any of your minor dependents to use this Site.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Changes and clarifications take effect immediately upon posting on the Site. If we make material changes, we will post an updated version on the Site.

If our business is acquired or merged with another company, your information may be transferred to new owners so that we may continue to sell products to you.

16. Questions and contact information

If you would like to request access, correction, amendment, or deletion of personal information we have about you, register a complaint, or request more information, contact our Privacy Compliance Officer:

Email: support@gothriderbrand.com
Mail:
GothRider (11763113 Canada Inc)
Re: Privacy Compliance Officer
CP 162, PO BUREAU-CHEF
Chambly, Quebec, J3L 4B3
Canada