Privacy policy

Effective and last updated: August 2, 2026

This Privacy Policy explains how Go Twenties Inc., operating as Go Twenties, collects, uses, discloses, retains, and protects personal information when you visit gotwenties.com, make a purchase, create an account, subscribe to emails, submit a review, use website chat, or otherwise interact with us.

What we collect

Information needed for shopping, orders, accounts, support, reviews, communications, analytics, security, and advertising.

Why we use it

To provide the store, complete transactions, support customers, improve the business, prevent fraud, and market lawfully.

Your choices

You may manage cookies, unsubscribe from marketing, update account information, and exercise privacy rights available where you live.

Please note: This summary is provided for convenience. The complete policy below governs our privacy practices. Additional rights may apply depending on your location and whether the relevant law applies to Go Twenties or its processing activities.

1. Scope and Updates

In this policy, “Go Twenties,” “we,” “us,” and “our” mean Go Twenties Inc., operating as Go Twenties. “Services” means our website, online store, checkout, customer accounts, emails, website chat, reviews, customer support, advertising, social media interactions, and related services. “You” means any visitor, customer, account holder, subscriber, reviewer, or other person whose personal information we process.

Go Twenties currently offers its products and Services to customers in Canada and the United States. We may expand into Europe and other international markets in the future. We may also introduce additional features, including SMS marketing, product-selection quizzes, surveys, promotions, and influencer, ambassador, affiliate, or creator programs. These planned features are not necessarily available now. If we introduce them, we will provide any additional notice and obtain any consent required at or before the relevant collection or use. A regional section of this policy applies only when we offer Services in that region and the relevant law applies to our processing.

This policy applies to personal information controlled by Go Twenties. Some providers, such as payment providers, social media platforms, or third-party websites, may process information under their own privacy policies and act independently from us.

We may update this policy when our practices, services, vendors, legal obligations, or markets change. We will post the revised policy and update the date above. If required by law, we will provide additional notice or request consent before a material change takes effect.

2. Information We Collect

The information we collect depends on how you interact with us. You may choose not to provide optional information. However, if you do not provide information required for an order, payment, delivery, account, or requested service, we may be unable to provide that service.

Category Examples Main sources
Identity and contact Name, email address, telephone number, billing address, shipping address, and account identifier. You, Shopify, and service providers.
Order and transaction Products viewed or purchased, cart activity, order history, discounts, shipping, delivery, returns, refunds, payment confirmation, and transaction records. We generally do not receive or store complete payment card numbers. You, Shopify, payment providers, shipping providers, and fraud-prevention providers.
Account and preferences Saved addresses, account settings, communication preferences, product interests, shade or styling preferences, and account activity. You and Shopify.
Communications and content Emails, chat messages, support requests, complaints, feedback, reviews, testimonials, survey responses, and photos or videos you choose to submit. You, our website chat provider, review provider, email provider, and social media platforms.
Marketing Newsletter subscription, consent records, campaign engagement, advertisement interactions, audience membership, promotional preferences, and, if offered, SMS subscription and engagement information. You, Klaviyo, Shopify, Google, Meta, and advertising or analytics providers.
Optional quizzes, surveys, and promotions If offered and you choose to participate, responses, product preferences, shade or styling interests, contact details, photographs or videos you choose to provide, promotion entries, and related communications. You and providers that operate the applicable feature or promotion for us.
Influencer, ambassador, affiliate, and creator programs If offered and you choose to apply or participate, application information, identity and contact details, social media profiles, audience information, approved content, photographs, videos, program communications, performance information, and payment or tax information where required. You, public social media sources, program platforms, payment providers, and service providers that administer the program for us.
Device and online activity IP address, browser, device type, device identifiers, operating system, approximate location derived from IP address, pages viewed, links clicked, referring pages, search terms, cookie identifiers, and website interaction data. Your browser or device, Shopify, Google, Meta, Klaviyo, and related technologies.
Security and diagnostic Login events, fraud indicators, attempted transactions, chargeback information, error logs, and website performance or security data. Your device, Shopify, payment providers, and security or fraud-prevention providers.

Information about hair and appearance

You may voluntarily provide information about hair appearance, coverage preferences, product fit, photos, or styling needs when requesting support, using chat, completing an optional product-selection quiz, or submitting a review. Depending on its content and applicable law, this may be treated as sensitive personal information. Do not send medical records or other sensitive information that is unnecessary for your request. We do not use voluntarily submitted hair or appearance information to diagnose, treat, or infer a medical condition.

Additional notice for planned features

If we introduce SMS marketing, quizzes, surveys, promotions, or influencer, ambassador, affiliate, or creator programs, the feature may display additional terms or a shorter privacy notice explaining the information requested and its intended use. Participation will be optional unless clearly stated otherwise for a requested service. Any additional notice or program terms should be read together with this policy.

Information from other people

If you provide personal information about another person, such as a recipient’s delivery details, you represent that you are authorized to provide it for the relevant purpose. Do not submit another person’s photo, review, or other content without appropriate permission.

3. How We Use Personal Information

We may use personal information for the following purposes, as reasonably necessary and permitted by law:

  • provide, operate, maintain, personalize, and improve the Services;
  • process payments and fulfill, ship, track, return, exchange, or refund orders;
  • create and manage customer accounts, saved preferences, and account security;
  • respond to questions, website chat messages, complaints, and support requests;
  • publish and manage reviews or other user-submitted content;
  • send transactional communications about orders, accounts, security, support, or policy changes;
  • send newsletters and promotional communications where permitted, and manage consent and unsubscribe requests;
  • if SMS marketing is offered and you subscribe, send promotional text messages and manage subscription, consent, delivery, and opt-out records;
  • if quizzes, surveys, or promotions are offered and you participate, provide recommendations, understand preferences, administer entries, communicate about participation, and improve products or Services;
  • if influencer, ambassador, affiliate, or creator programs are offered, assess applications, verify eligibility, administer participation, communicate with participants, measure performance, prevent fraud, issue payments, maintain tax or accounting records, and use approved content in accordance with applicable program terms, permissions, and law;
  • measure website use, conversions, campaign performance, and customer engagement;
  • personalize content, recommendations, or advertising where permitted;
  • detect, prevent, investigate, and address fraud, abuse, security incidents, chargebacks, unauthorized activity, and technical problems;
  • maintain business, tax, accounting, audit, warranty, product-safety, and legal records;
  • enforce our terms and policies and establish, exercise, or defend legal claims;
  • comply with applicable law and lawful requests; and
  • complete a merger, financing, reorganization, sale, transfer, insolvency process, or other business transaction, subject to applicable law.

Legal grounds where required

Where applicable law requires a legal ground, we rely on one or more of the following: your consent; performance of a contract or steps requested before entering a contract; compliance with a legal obligation; our legitimate interests or those of another party where those interests are not overridden by your rights; and the establishment, exercise, or defence of legal claims. The applicable ground depends on the purpose and context.

Where we rely on consent, you may withdraw it, subject to legal or contractual restrictions and reasonable notice. Withdrawal does not affect processing already carried out lawfully.

4. Cookies, Analytics, and Personalized Advertising

We and our providers use cookies, pixels, tags, local storage, software development kits, and similar technologies. These technologies may support essential store functions, security, accounts, carts and checkout, preferences, analytics, email measurement, advertising, attribution, and personalization.

Type Purpose Can it be limited?
Essential Store security, network management, fraud prevention, cart, checkout, payments, accounts, and requested features. These are generally necessary for the Services to function.
Functional Remember choices and improve convenience or personalization. Where available, use our privacy settings or browser controls.
Analytics Understand traffic, interactions, conversions, errors, and store performance. Where required, these operate after consent. You may also use our privacy settings or browser controls.
Advertising Measure ads, attribute purchases, retarget visitors, create or suppress audiences, and personalize advertising. Where required, these operate after consent. Applicable opt-out rights are described below.

Tools currently used

Our current technology and marketing environment includes Shopify, Google, Meta, and Klaviyo. We may also use service providers that support customer reviews and website chat. Their technologies may collect identifiers, online activity, purchase events, campaign engagement, and similar information for the purposes described in this policy.

We do not sell personal information for money. However, disclosing identifiers and online activity to advertising partners such as Google or Meta for personalized advertising may be defined as “selling,” “sharing,” “targeted advertising,” or “cross-context behavioural advertising” under certain laws.

Managing privacy choices

You may use any cookie or privacy preference tool available on our website, change browser or device settings, use platform advertising controls, or contact us. Blocking technologies may affect store features. Where legally required and technically supported, we recognize applicable consent choices and browser-based opt-out preference signals, such as Global Privacy Control.

5. How We Disclose Personal Information

We may disclose personal information to the following recipients for the purposes described in this policy:

  • Shopify and ecommerce providers for hosting, storefront operation, checkout, accounts, analytics, security, and related services;
  • payment, fraud-prevention, and chargeback providers to process and protect transactions;
  • shipping, logistics, and fulfilment providers to deliver and manage orders;
  • Klaviyo and communications providers for newsletters, transactional or marketing communications, consent records, and campaign measurement;
  • SMS, quiz, survey, promotion, and program providers if those features are introduced, to operate the feature, deliver communications, administer participation, process rewards or payments, prevent fraud, and maintain required records;
  • Google, Meta, and analytics or advertising providers for measurement, attribution, audience services, and advertising where permitted;
  • review, website chat, and customer-support providers to operate those customer-facing features;
  • cloud, security, IT, and professional service providers that help us operate, protect, audit, insure, or advise the business;
  • government authorities, regulators, courts, law enforcement, or other parties when we reasonably believe disclosure is required or permitted by law or necessary to protect rights, safety, property, users, or the Services; and
  • parties to a business transaction in connection with due diligence, financing, merger, acquisition, reorganization, sale, insolvency, or transfer of all or part of the business, subject to appropriate safeguards and applicable law.

Providers may process information outside your province, state, or country. Some recipients, such as payment platforms or social media services, may determine their own purposes and be independently responsible for certain processing.

We do not authorize service providers to use personal information for unrelated purposes, except where they act independently under applicable law or their own relationship with you.

6. Your Choices

  • Emails: Use the unsubscribe link in a marketing email. We may still send non-promotional messages about orders, accounts, security, support, legal notices, or requested services.
  • SMS marketing: If SMS marketing becomes available and you choose to subscribe, consent will not be a condition of purchase. Message frequency may vary, and message and data rates may apply. You may withdraw consent using the instructions in the messages or another method we make available. We may retain limited suppression and consent records as required or permitted by law.
  • Cookies and advertising: Use available website privacy controls, browser or device settings, platform ad settings, or legally recognized opt-out signals where applicable.
  • Customer account: Sign in to update information available through your account, or contact us for assistance.
  • Reviews and public content: Contact us to request removal or correction. Removal may be limited where retention is required by law, the content has been lawfully reproduced elsewhere, or another lawful basis applies.
  • Consent: Contact us to withdraw consent where consent is the applicable basis. This may limit our ability to provide certain optional features or services.

7. Retention and Security

Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide Services, maintain business and transaction records, resolve disputes, prevent fraud, enforce agreements, and comply with legal, tax, accounting, product-safety, and regulatory requirements.

Retention periods vary by category and context. For example, transaction and tax records may be kept for seven years or another period required or permitted by applicable law. Account information may be kept while an account remains active. Marketing information may be kept until consent is withdrawn or it is no longer needed, subject to suppression records used to honour opt-out requests. Security, fraud, complaint, and legal-claim information may be retained through applicable limitation or dispute periods. Backups may retain information for a limited additional period before deletion or overwrite.

When information is no longer required, we take reasonable steps to securely delete it or render it anonymous or de-identified where and to the extent permitted by applicable law.

Security

We use reasonable administrative, technical, contractual, and physical safeguards designed to protect personal information, taking account of its sensitivity, amount, purpose, format, storage, and foreseeable risks. Access is limited to people and providers who reasonably need it for authorized purposes.

No system, transmission, platform, or storage method is completely secure. We cannot guarantee absolute security. You are responsible for protecting account credentials and for notifying us promptly if you suspect unauthorized access.

We assess and respond to privacy incidents in accordance with applicable law, including recordkeeping and notification to regulators or affected individuals where required.

8. International and Cross-Border Transfers

Go Twenties is based in Canada. Personal information may be stored, accessed, or processed in Canada, the United States, and other countries where Shopify and our service providers operate. Local authorities in those jurisdictions may be able to access information under applicable law.

Before transferring information outside Quebec or another jurisdiction where an assessment is required, we take the steps required by applicable law. Depending on the circumstances, safeguards may include privacy impact assessments, contractual requirements, data processing terms, adequacy decisions, standard contractual clauses, or other recognized measures.

Where EEA or UK data protection law applies to a restricted transfer, we rely on an available lawful transfer mechanism and supplementary safeguards where required. You may contact us for information about applicable safeguards, subject to legal and confidentiality restrictions.

9. Privacy Rights and Requests

Depending on where you live and whether the relevant law applies, you may have rights to:

  • know whether we process your personal information and access it;
  • correct inaccurate or incomplete personal information;
  • request deletion or erasure;
  • receive a portable copy of certain information;
  • withdraw consent;
  • object to or restrict certain processing;
  • opt out of sale, sharing, targeted advertising, or certain profiling;
  • request information about certain automated decisions;
  • appeal a decision on a request where applicable;
  • receive equal service and not be unlawfully discriminated against for exercising a right; and
  • complain to a privacy or data protection regulator.

Rights are not absolute. We may deny or limit a request where permitted by law, such as when we cannot verify identity, an exception applies, another person’s rights would be affected, or information must be retained for legal obligations, security, fraud prevention, transactions, or legal claims.

To submit a request, email gotwentiesofficial@gmail.com with “Privacy Request” in the subject line and describe the request. We may ask for information reasonably necessary to verify identity, authority, jurisdiction, and the scope of the request. Authorized agents may be required to provide proof of authority. We will respond within the period required by applicable law.

How we handle privacy complaints

We will acknowledge a privacy complaint, review the circumstances, and may request additional information reasonably necessary to investigate it. We will communicate our findings or available next steps and respond within the period required by applicable law, including within 30 days where required under Quebec law. If additional time is permitted and reasonably necessary, we may extend the response period and provide notice as required by law.

10. Regional Notices

These notices supplement the rest of this policy. They apply only if the relevant law applies to Go Twenties or the processing at issue.

Canada and Quebec

Go Twenties is accountable for personal information under its control. We collect, use, and disclose personal information for identified and appropriate purposes, obtain valid consent where required, limit collection and retention, and use reasonable safeguards.

Quebec residents may have rights of access and rectification, withdrawal of consent, cessation of dissemination or de-indexing in certain circumstances, and portability where applicable. They may also submit a complaint to the Commission d’accès à l’information du Québec. The privacy officer contact is listed in Section 12.

If we use technology that identifies, locates, or profiles a person, we provide the notice and activation choices required by Quebec law. Advertising or analytics technologies that profile interests or behaviour are managed through the consent and privacy controls described in Section 4.

United States state privacy laws

Residents of states with applicable comprehensive privacy laws may have the rights described in Section 9. For the categories collected, sources, purposes, and recipients, see Sections 2 through 5.

We do not sell personal information for money. Our use of advertising technologies may be considered sale, sharing, or targeted advertising under certain state laws. Where required, you may opt out using our website privacy controls, a recognized opt-out preference signal, or the contact method in Section 12.

We do not knowingly sell or share personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes requiring a separate right to limit under California law unless we provide the required notice and choice.

European Economic Area, United Kingdom, and Switzerland

If we offer goods or Services to you in these regions and applicable data protection law applies, Go Twenties Inc. is the controller for the processing described in this policy unless stated otherwise. The legal grounds are described in Section 3.

You may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and complaint to your local supervisory authority. Where processing is based on legitimate interests, you may object based on your particular situation. You may object to direct marketing at any time.

If applicable law requires us to appoint a local representative or data protection officer before actively offering Services in a region, we will provide the relevant contact information before or when that requirement applies.

Other countries and regions

If we offer the Services in additional countries or regions, local law may provide additional rights or impose additional requirements. We may update this policy or provide supplemental notices, consent mechanisms, representatives, or request methods before or when those Services become available. We will honour legally applicable rights where the relevant law applies to Go Twenties or the processing at issue.

11. Children, Reviews, and Public Content

Children

Our Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from a child under 16 without legally valid authorization. If you believe a child has provided personal information, contact us so we can review and take appropriate action.

Reviews, testimonials, photos, and social media

If you submit a review, testimonial, comment, photo, video, social media tag, or other content for public display, the content and any name or identifier displayed with it may be visible to others. Public information can be copied or used by other people outside our control.

Submitting content through a review feature does not automatically grant us every possible marketing right. If we want to use identifiable customer content in advertising, promotional campaigns, or other contexts beyond the feature through which it was submitted, we will rely on applicable terms, permissions, consent, or another lawful basis as required.

Third-party links and services

The Services may link to third-party websites, applications, payment services, or social media platforms. Their privacy practices are governed by their own policies. Go Twenties is not responsible for third-party privacy or security practices except to the extent required by applicable law.

12. Contact Us

Questions, complaints, and privacy requests may be directed to:

Go Twenties Inc.
Privacy Officer: Go Twenties Privacy Team
Email: gotwentiesofficial@gmail.com
Website: gotwenties.com

Please include enough information for us to understand and respond to your request. Do not send passwords, complete payment card numbers, government identification, or unnecessary sensitive information by email.