Last updated: 19 August 2026
This policy explains what personal data GoviLoop, 2553 Neptune Pl, Port Hueneme, CA 93041, United States, collects through goviloop.com, why, and what you can do about it. We are the data controller. Questions: info@goviloop.com.
1. What we collect
| Data | When | Why |
|---|---|---|
| Name, e-mail, phone, billing and delivery address | When you place an order or create an account | To take payment, clear the shipment through customs, deliver it and handle returns |
| Order history and communications | When you order or contact us | Customer service, warranty and returns handling, accounting records |
| Payment confirmation (last four digits, authorisation result) | At checkout | To reconcile orders and issue refunds. Full card numbers are handled by our processor and never reach our servers. |
| Unboxing videos and photographs you send us | When you make a damage or fault claim | To approve a replacement and to support a claim against the carrier |
| Account username and hashed password | If you create an account | To let you sign in |
| Message content from the contact form | When you write to us | To answer you |
| IP address, browser type, pages viewed | Automatically | Security, fraud prevention and keeping the site working |
We do not knowingly collect data from children under 13. We do not ask for or store any special-category data.
2. Legal bases
We process order data to perform our contract with you; customs and export declarations to comply with legal obligations; security, fraud-prevention and service-improvement data on the basis of our legitimate interests; tax and accounting records to comply with legal obligations; and marketing e-mail only with your consent.
3. Cookies
The site sets cookies that are strictly necessary to work: a cart cookie so your basket survives page loads, a session cookie at checkout, and a login cookie if you sign in. These cannot be switched off without breaking the store. If we later add analytics or advertising cookies we will ask for consent first and update this page. We do not currently set advertising cookies. You can delete cookies in your browser settings at any time.
4. Who we share data with
- Payment processors — PayPal and our card processor, to take payment and issue refunds.
- The carrier — FedEx, who receive the delivery name, address, phone number and e-mail needed to deliver and to lodge the import entry.
- Customs authorities — US Customs and Border Protection and the Hong Kong customs authority receive the consignee name and address and a description and value of the goods, as required by law for every cross-border parcel.
- Our fulfilment warehouse in Hong Kong, which receives the delivery details needed to pick, pack and label your parcel.
- Hosting and e-mail providers — who store the site and transmit transactional e-mail on our instruction.
- Professional advisers and authorities — accountants, or law enforcement where we are legally required to disclose.
We do not sell, rent or trade personal data, and we do not share it with data brokers.
5. Where data is stored
Data is stored on servers operated by our hosting provider. Order and delivery details are also processed at our fulfilment warehouse in Hong Kong so that parcels can be picked and shipped. Where a provider processes data outside the United States, that transfer is covered by the provider’s standard contractual clauses.
6. How long we keep it
Order, customs and transaction records are kept for seven years to meet tax, accounting and import record-keeping requirements. Account data is kept until you ask us to delete the account. Claim photographs and videos are kept for two years. Contact-form messages are kept for two years. Server logs are kept for 12 months.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or send it to another provider. Write to info@goviloop.com and we will respond within 30 days. We may need to verify your identity first, and we may have to keep transaction and customs records that we are legally required to hold.
California residents
Under the CCPA/CPRA you may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, and correct inaccurate information. We do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right. Use the same address: info@goviloop.com.
8. Marketing
We only send marketing e-mail to people who asked for it. Every such e-mail has a working unsubscribe link, and unsubscribing takes effect immediately. Transactional e-mail about an order you placed — confirmation, dispatch, refund — is not marketing and is sent regardless.
9. Security
The site runs over HTTPS with a valid TLS certificate on every page. Passwords are stored hashed, administrative access is restricted, and payment card data never touches our servers. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authority as required by law.
10. Changes
If this policy changes materially we will update the date above and, where the change affects how we use existing data, e-mail account holders.
11. Contact
GoviLoop
2553 Neptune Pl
Port Hueneme, CA 93041, United States
info@goviloop.com