Privacy Policy

Last updated: 22 August 2026

This Privacy Policy explains how GOTO HNK LTD ("we", "us", "our") trading as GOUPICK collects, uses, shares, and protects your personal information when you visit https://goupick.com, place an order, or otherwise interact with us (the "Services"). Please read this policy carefully. It does not form part of any contract to purchase goods or services, but sets out our approach to your personal data.

1. Who We Are – Data Controller

We are the data controller responsible for your personal data collected through the Services.

Trading Name	GOUPICK
Legal Company Name	GOTO HNK LTD
Company Number	12815965
Registered Office Address	Unit A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom
Website	https://goupick.com
Email	support@goupick.com

We are registered in England and Wales, and we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Geographical Scope

Our Services and deliveries are currently offered exclusively to customers within the United Kingdom. If you access our website from outside the UK, please note our Services are not specifically directed at users outside this country.

3. Personal Information We Collect

a) Information you give us directly

Contact details – name, address, email address, and phone number.
Order information – billing and delivery address, items purchased, order value, and payment confirmation.
Account information – username, password, and order history, if you create an account.
Customer support information – anything you tell us via email, contact form, or phone.
Marketing preferences – if you choose to subscribe to our newsletter or marketing emails.

b) Information collected automatically

Technical data – IP address, browser type and version, device and operating system information.
Usage data – pages visited, time and date of access, referring website, and interaction with our Services.
Cookies and similar tracking technologies, including Google Analytics and Google Ads conversion tracking (see Section 6 below).

c) Information from third parties

Our website and e-commerce platform provider.
Payment processors, who share confirmation and fraud-prevention data relevant to your order.
Delivery and logistics partners, who share status updates relevant to your order.
Analytics and marketing platforms, where enabled.

We do not knowingly collect more personal data than is necessary to provide our Services.

4. Legal Bases for Processing

We only process your personal data where we have a valid legal basis to do so. Depending on where you live, we rely on the following:

Performance of a contract – to process and deliver your order, handle payments, and provide customer service.
Legal obligation – to meet tax, accounting, and other regulatory requirements.
Legitimate interests – to operate, secure, and improve our website, prevent fraud, and manage our business relationship with you, provided this does not override your rights.
Consent – for sending marketing communications and for using non-essential cookies, which you may withdraw at any time.

5. How We Use Your Information

To process, fulfil, and deliver your orders.
To manage your account, if you create one.
To communicate with you about your order, including confirmations, shipping updates, and customer support.
To process payments and prevent fraudulent transactions.
To send marketing communications, only where you have given consent, and to let you opt out at any time.
To operate, personalise, and improve our website and Services, including through Google Analytics.
To measure and improve the performance of our advertising, including through Google Ads conversion tracking and remarketing.
To comply with our legal and regulatory obligations, including tax and accounting requirements.

6. Cookies

We use cookies and similar technologies to keep our website functional, remember your cart and preferences, process checkout, prevent fraud, understand website performance, and – where enabled and consented to – support marketing and analytics.

We use Google Analytics to understand how visitors use our Website, and Google Ads conversion tracking to measure the performance of our advertising and to show you relevant ads based on your prior visits to our Website (sometimes called "remarketing" or "interest-based advertising"). Google may use the data collected to contextualise and personalise the ads shown to you across its own advertising network.

You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, and manage or opt out of personalised advertising using Google's Ad Settings (adssettings.google.com) or the Network Advertising Initiative opt-out page (networkadvertising.org/choices).

You can manage or disable cookies at any time through your browser settings or our cookie consent banner. Please note that blocking certain cookies may affect the functionality of our website. Full details of the specific cookies we use, including those set by Google, are available in our Cookies Policy.

7. How We Share Your Information

We do not sell your personal data. We only share it with trusted third parties where necessary to operate our business, including:

E-commerce platform and website hosting providers.
Payment processors, to securely process your payment.
Delivery and logistics partners, to fulfil and deliver your order.
Email and marketing service providers, to send transactional and (where consented to) marketing communications.
Google, via Google Analytics and Google Ads, to help us understand website usage and measure and improve our advertising. Google's use of this data is governed by the Google Privacy Policy (policies.google.com/privacy) and, where applicable, the Google Ads Data Processing Terms.
Professional advisers, regulators, and law enforcement, where required by law.
A buyer or successor, in the event of a business sale, merger, or restructuring.

Any third party we share your data with is required to keep it secure and to use it only for the purposes we specify.

8. International Transfers

As our business grows, your personal data may be transferred to, stored, and processed in countries other than the one in which you live, including countries where our service providers, warehouses, or offices are located. Where we transfer personal data internationally, we use appropriate safeguards required by the applicable law, such as the UK's International Data Transfer Agreement, the European Commission's Standard Contractual Clauses, or by relying on a transfer to a country recognised as providing an adequate level of data protection.

9. Data Retention

Order & transaction records	Retained for 7 years to comply with tax and accounting obligations
Customer support communications	Retained for up to 2 years
Marketing data	Retained until you withdraw your consent or unsubscribe
Account data	Retained for as long as your account remains active

We only keep personal data for as long as necessary for the purposes described in this policy, or as required by law.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. Payment details are encrypted and processed in accordance with PCI-DSS standards. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Data

Our Services are not directed at, or intended for use by, children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Your Rights

Depending on where you live, you may have some or all of the rights described below in relation to your personal data. These rights are not absolute and may be subject to exceptions and limitations under the law applicable to you.

Right of access – request a copy of the personal data we hold about you.
Right to rectification/correction – request correction of inaccurate or incomplete data.
Right to erasure/deletion – request deletion of your personal data, in certain circumstances.
Right to restrict processing – request that we limit how we use your data.
Right to data portability – request a copy of your data in a portable format.
Right to object – object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent – withdraw consent at any time, without affecting processing carried out before withdrawal.
Right to non-discrimination – we will not discriminate against you for exercising any of your rights.

To exercise any of these rights, please contact us at support@goupick.com. We may need to verify your identity before responding, and we will respond within one month as required by law.
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, although we would appreciate the opportunity to resolve your concern directly first.

13. Marketing Communications

We will only send you marketing emails if you have opted in to receive them. You can unsubscribe at any time using the link in any marketing email, or by contacting us directly. Opting out of marketing will not affect transactional communications relating to your orders.

14. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites, and we encourage you to review their privacy policies separately.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal and regulatory requirements. Any changes will be posted on this page with a revised "Last updated" date.

16. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email	support@goupick.com
Phone	+44 7412 812590
Customer Service Hours	Mon–Fri, 9:00 AM–5:00 PM, GMT
Registered Address	Unit A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom

We aim to respond to all privacy enquiries within one month, in line with our obligations under the UK GDPR.