Not yet open for sale. These are real pieces with real certificates, but checkout is not connected and no order can be placed. Browsing only.

GOATSports Memorabilia

Policy

Privacy policy

This policy describes what personal information we collect when you browse or buy from this site, what we do with it, and how to get it back or have it erased. It is written to be read, not to be skimmed past.

What we collect

Information you give us
Your name, email address, shipping address, billing address and phone number when you place an order, and the contents of any message you send us. Order records include what you bought and what you paid.
Payment information
Card details are entered directly into our payment processor’s hosted fields and are never transmitted to or stored on our servers. We receive only a token, the last four digits, the card brand, and the authorisation result. We could not disclose your full card number if we were asked to, because we do not have it.
Technical information
Server logs record the pages requested, the referring URL, a truncated IP address, and the user-agent string. These are used to keep the site up and to detect abuse.

Cookies and analytics

We use strictly necessary cookies: a session cookie to hold your cart and a security cookie set by our payment processor during checkout.

We also use Google Analytics 4to measure how the site is used — which pages are visited, how visitors arrive, roughly where in the world they are, and what device they are on. It sets first-party analytics cookies in your browser for this purpose. Google truncates your IP address before it is stored and we have not enabled Google Signals, advertising features, or remarketing on the property.

We do not run advertising cookies, cross-site trackers, remarketing pixels, or social-network embeds, and we never send your name, email address or order details to an analytics provider. If we ever add advertising or profiling technology, this page changes first and a consent mechanism appears with it.

Why we process it

  • To take payment and fulfil the order you placed — performance of a contract.
  • To arrange insured carriage and to file a carrier claim if one is needed.
  • To answer your questions and to administer a return.
  • To meet tax, accounting and anti-fraud obligations — a legal obligation we cannot contract out of.

We do not use your information to build an advertising profile, and we do not make automated decisions about you.

Who else sees it

We share the minimum necessary with processors acting on our instructions: our payment processor, the carrier that delivers your parcel, our hosting and database providers, our email provider, and Google Analytics for the usage measurement described above. Each is bound to use the data only to provide that service.

We do not sell or share personal information for money or for cross-context behavioural advertising. We have never done so and we do not intend to. We disclose information to a law enforcement or tax authority only where a valid legal instrument compels it.

How long we keep it

Order and transaction records are retained for seven years, which is the period tax and accounting rules require. Support correspondence is retained for two years. Server logs are retained for 90 days. Anything outside those periods is deleted.

Your rights

Depending on where you live you may have the right to access a copy of your data, to correct it, to have it deleted, to restrict or object to processing, to receive it in a portable format, and to opt out of any sale or sharing — which, as above, is not something we do. Exercising any of these rights costs nothing and we will not treat you differently for it.

Email support@goatsportsmemorabilia.com and we will acknowledge within one business dayand respond substantively within 30 days. We may need to verify your identity before releasing or deleting data, which protects you rather than us. Note that a deletion request cannot remove records we are legally required to retain, such as invoices — we will tell you precisely what was kept and why.

Security

The site is served over TLS. Access to order data is restricted to the people who need it and is logged. Card data never enters our systems. No system is perfect; if a breach affects your data we will notify you and the relevant regulator within the timeframes the applicable law sets, and we will tell you what was exposed rather than issue a vague statement.

Children

This site is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has given us data, email us and we will delete it.

Changes to this policy

If we change how we handle personal information we will update this page and, where the change is material, email customers whose data is affected before it takes effect.