Last updated: November 2, 2026
1. Data Controller
The data controller is GOOSELUX LLC, with a business address at 1057 NW 136TH AVE, MIAMI, FL 33182, United States. For any privacy questions, you can email hola@gooselux.com.
2. Cart and QA Checkout Data
The cart, name, email address, and order entered in QA Checkout are stored only in your browser's local storage. They are not sent to Gooselux or Stripe.
You can delete them at any time by clearing the site data for gooselux.com in your browser settings. Completing a QA order empties the cart but retains the local QA confirmation so it can be displayed.
3. Data from a Real Purchase
When Stripe is enabled and you choose to make a purchase, we may process:
- Name and contact or delivery email address.
- Products, quantities, amount, currency, and order identifier.
- Payment status and support communications.
- Billing information required by law.
Card information is entered directly into Stripe. Gooselux does not receive or store your full card number, CVV code, or payment method passwords.
4. Technical Data
Cloudflare, as our hosting and security provider, may log IP addresses, dates, requested URLs, user agents, and data necessary to deliver the website and prevent abuse. Fonts are served through Google Fonts, so your browser may communicate your IP address and technical request data to Google.
We currently do not use advertising pixels or our own behavioral tracking cookies. Local storage is used for the cart and QA confirmation.
5. Purposes and Legal Bases for Use
- Managing orders, deliveries, refunds, and support: performance of a contract.
- Complying with accounting, tax, and fraud prevention obligations: legal obligation and legitimate interest.
- Maintaining website security and availability: legitimate interest.
- Responding to privacy requests: legal obligation and legitimate interest.
If we send promotional communications in the future, we will request your consent where required, and you may withdraw it at any time.
6. Providers and Data Disclosures
We do not sell your personal data. We may share it only with providers necessary to operate our business, such as Cloudflare for infrastructure, Stripe for payments, and Google Fonts for typography, or with authorities when legally required.
These providers process data under their own policies and safeguards. Some may process information in the United States or countries other than yours.
7. Retention
QA data remains in your browser until you delete it. Order information is retained for as long as necessary to manage the purchase and comply with legal obligations, typically up to seven years for accounting records. Technical logs are retained according to the relevant providers' policies.
8. Security
The website uses HTTPS and security headers. We limit access to keys and prevent Stripe secrets from reaching the browser. Even so, no system offers absolute security; we recommend that you do not send sensitive information by email.
9. Your Rights
Depending on where you live, you may request access, correction, deletion, portability, restriction of or objection to processing, and withdraw your consent. Email hola@gooselux.com. We may request reasonable information to verify your identity. You may also file a complaint with the data protection authority having jurisdiction over you.
10. Children and Changes
The service is not directed to children under 13, and we do not knowingly collect their data. We will post any material changes on this page and update the revision date.