Placeholder draft — pending lawyer review. This document is not final and does not yet constitute a binding agreement.
Privacy Policy
Last updated: 2026-11-04 · Version 2026-11-04.1
Draft pending review by a licensed attorney.
Who is responsible
[COMPANY LEGAL NAME], [ADDRESS], operates GoopDrop. Contact [CONTACT EMAIL]. [EU / UK REPRESENTATIVE AND DATA PROTECTION CONTACT — to be confirmed by attorney].
Information collected
We collect account identifiers and contact details; profiles; consent versions and timestamps; listing, order, fee and payout records; chat and support messages and attachments; disputes; loyalty activity; verification status; country declarations; privacy and moderation requests. Fraud screening stores salted device/IP hashes rather than raw IP addresses in our device records. Hashes can still identify linked activity and are treated as personal information. Network, hosting, auth or provider logs may separately process IP addresses. Cookies and analytics may process device and usage information as described in the Cookie Policy.
Purposes and legal bases
We use data to provide accounts and transactions, deliver support, prevent fraud, secure the service, resolve disputes, administer loyalty benefits and comply with law. For EU/UK users, relevant bases may include contract, legal obligation, legitimate interests in security and service operation, and consent for optional tracking or marketing. [PURPOSE-BY-PURPOSE LEGAL BASIS REVIEW — attorney required].
Sharing
We share necessary information with transaction counterparties and contracted hosting, auth, support and analytics services. Payment, identity-verification and SMS providers may receive necessary details when activated. We may disclose information when legally required, to protect rights or investigate abuse, or during a business transfer with appropriate protections. We do not intentionally expose private support notes to users or public visitors. [ACTUAL PROVIDERS AND SALE/SHARING PRACTICES — confirm before launch].
Retention
We retain information for service operation, dispute resolution, security and legal obligations; then delete or de-identify it where appropriate. Account deletion does not remove records we must keep for taxes, fraud, transactions or litigation. [RETENTION SCHEDULE BY DATA CATEGORY — to be confirmed by attorney].
Security
Access controls, private attachment storage and server-side authorization help protect information. No service can guarantee absolute security. Never send passwords, card numbers or two-factor codes in chat. Report suspected compromise through human support.
Your rights
Depending on location, you may request access, portability, correction, deletion or restriction; object to certain processing; and withdraw consent prospectively. California residents may request knowledge/access, correction, deletion and opt out of sale or sharing under CCPA/CPRA without discrimination, subject to applicable exceptions. Authorized-agent requests require appropriate verification. EU/UK users may complain to their supervisory authority and exercise GDPR/UK rights. Use the privacy request form or [CONTACT EMAIL]. We verify identity proportionately and respond within applicable legal deadlines; we may explain lawful exceptions.
Children’s privacy
GoopDrop is not for anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child supplied information, contact [CONTACT EMAIL] so we can investigate and take appropriate action.
International transfers
Providers may process data outside your country. Where required, appropriate safeguards and transfer mechanisms will apply. [TRANSFER LOCATIONS, CONTRACTS AND SAFEGUARDS — confirm with attorney and providers].
Privacy choices and updates
Non-essential tracking remains off until consent. Rejecting optional tracking does not prevent essential account or transaction functions. Use Cookie Preferences or Do Not Sell or Share My Personal Information. Global Privacy Control is treated as a sale/sharing opt-out signal for optional tracking. Material policy updates carry a new version and renewed acceptance.