Privacy policy
1. Who we are
This Privacy Policy explains how SoccerFresh (“SoccerFresh,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you:
-
visit (the “Site”);
-
create an account or place an order;
-
contact customer support;
-
subscribe to marketing;
-
interact with our advertisements, social-media pages, reviews, surveys, or promotions; or
-
otherwise use our products and services (together, the “Services”).
For privacy enquiries and requests, contact SoccerFresh at .
2. Scope and important definitions
This Policy applies to personal information that identifies, relates to, describes, or can reasonably be linked with an individual or household. Depending on the applicable law, this may be called “personal data” or “personal information.”
This Policy does not govern independent third-party websites, apps, or services linked from the Site. Those parties process information under their own privacy notices.
3. Personal information we collect
The information we collect depends on how you interact with us.
Information you provide directly
We may collect:
-
Identity and contact information: name, email address, telephone number, billing address, delivery address, and account details.
-
Order information: products ordered, order number, transaction amount, currency, discounts, delivery method, order status, returns, refunds, and warranty claims.
-
Payment-related information: payment method, billing details, payment status, and limited payment identifiers. Full card details are normally collected directly by our authorised payment providers and are not stored by us.
-
Account information: login credentials or other authentication details, saved addresses, preferences, and purchase history.
-
Communications: messages, customer-support enquiries, cancellation notices, complaint details, photographs or videos submitted in connection with a product issue, and other correspondence.
-
Marketing preferences: newsletter registration, consent status, preferred language or market, and records of whether you opened or interacted with marketing communications.
-
User content: reviews, ratings, photographs, comments, survey responses, and social-media content you choose to submit or tag us in.
-
Promotion information: competition, giveaway, referral, or promotional-entry information where we offer such activities.
Please do not send us sensitive personal information, such as health, biometric, religious, political, or government-identity information, unless we specifically request it and have a lawful reason to process it.
Information collected automatically
When you use the Site or interact with our communications, we and our service providers may automatically collect:
-
IP address and approximate location derived from it;
-
device type, browser, operating system, language, time zone, and device or advertising identifiers;
-
pages viewed, searches, clicks, referring URLs, session duration, cart activity, checkout activity, and interactions with Site features;
-
email-delivery, opening, and link-interaction information;
-
cookie, pixel, local-storage, and similar technology identifiers;
-
security, authentication, fraud-prevention, and diagnostic logs; and
-
information about how an advertisement led you to the Site or to a purchase.
Information from other sources
We may receive personal information from:
-
Shopify and other providers that host or operate our store;
-
payment processors and fraud-prevention providers;
-
fulfilment centres, suppliers, shipping agents, carriers, and returns partners, including a fulfilment agent in China where an order is dispatched directly from China;
-
email and customer-communication platforms, including Klaviyo where enabled;
-
advertising and social-media partners, including Meta where its advertising tools are enabled;
-
analytics, attribution, and cookie-consent providers;
-
review, referral, and customer-support platforms;
-
publicly available sources; and
-
another person who purchases a product for you or provides your details for delivery, where lawful.
If you provide another person’s information, you must have authority to do so and should direct them to this Policy.
4. How and why we use personal information
We may use personal information to:
-
provide the Site and Services;
-
process payments, accept and fulfil orders, arrange delivery, and send transactional notices;
-
provide a Chinese fulfilment agent, supplier, carrier, or customs provider with the limited information needed to pack, label, export, deliver, and support an order;
-
manage accounts, returns, refunds, warranties, chargebacks, and customer support;
-
personalise currency, language, market, content, and shopping experience;
-
remember cart contents and user preferences;
-
detect and prevent fraud, abuse, security incidents, and unlawful activity;
-
maintain, troubleshoot, analyse, and improve the Site, products, and customer experience;
-
measure marketing performance and understand how customers find and use the Site;
-
send email, SMS, or other direct marketing where permitted;
-
display, measure, and improve advertising, including interest-based or targeted advertising where permitted;
-
administer reviews, surveys, promotions, or referrals;
-
establish, exercise, or defend legal claims;
-
comply with tax, accounting, product-safety, consumer-protection, sanctions, customs, and other legal obligations; and
-
complete a corporate transaction such as a merger, financing, restructuring, or sale of assets.
We will not use personal information for a materially different purpose without providing any additional notice or obtaining any consent required by law.
5. Legal bases for EU/EEA and UK processing
Where the EU GDPR, UK GDPR, or similar law requires a legal basis, we rely on the following:
| Purpose | Categories generally involved | Legal basis |
|---|---|---|
| Taking steps requested before purchase and fulfilling an order | Identity, contact, order, payment-related, account, and communication information | Performance of a contract or steps before entering a contract |
| Returns, refunds, warranties, and customer support | Identity, contact, order, communication, and product-issue information | Performance of a contract; legal obligation; and legitimate interests in customer service and claim management |
| Tax, accounting, customs, safety, and regulatory compliance | Identity, contact, order, payment-related, and communication information | Legal obligation |
| Site security, fraud prevention, and abuse detection | Device, usage, transaction, security, and account information | Legitimate interests in protecting customers, our business, and the Services; legal obligation where applicable |
| Essential Site functionality and remembering requested settings | Cookie/device, account, cart, market, and preference information | Performance of a contract or legitimate interests; strictly necessary technologies do not require consent where the law provides an exemption |
| Non-essential analytics and advertising technologies | Device, usage, cookie, advertising, attribution, and transaction information | Consent where required; otherwise legitimate interests where permitted after balancing your rights |
| Email or SMS marketing | Contact details, marketing preferences, and engagement information | Consent where required; otherwise legitimate interests or an existing-customer marketing exception where permitted |
| Product and Service improvement | Order, communication, device, usage, and aggregated information | Legitimate interests in improving our products and Services |
| Reviews and user submissions | Identity or display name, review, rating, image, and other submitted content | Consent, performance of requested services, or legitimate interests in publishing genuine customer feedback, depending on the context |
| Legal claims and business transactions | Relevant identity, contact, order, account, communication, and transaction information | Legitimate interests in protecting legal rights and operating our business; legal obligation where applicable |
Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether your rights and interests override ours. You may object to processing based on legitimate interests as described below.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully before withdrawal.
6. Cookies and similar technologies
We use cookies, pixels, tags, software development kits, local storage, and similar technologies for the following categories:
-
Strictly necessary: operating checkout, cart, account, security, fraud-prevention, network management, and privacy-preference functions.
-
Functional: remembering language, currency, market, and other preferences.
-
Analytics: measuring Site use, traffic, performance, and customer journeys.
-
Advertising: attributing sales, measuring campaigns, building audiences, and displaying more relevant advertising on other services.
Where required, non-essential analytics, functional, and advertising technologies will not be activated until you consent. You can accept, reject, or adjust categories through the Site’s cookie or privacy settings. Withdrawing consent does not affect earlier lawful processing. Browser controls may also allow you to block or delete cookies, but doing so may affect Site functionality.
Meta, Shopify, Klaviyo, and other providers may receive device, usage, engagement, or transaction information through these technologies when their relevant services are enabled. Some providers may independently determine purposes and means of processing for parts of their services. Their own privacy notices explain those activities.
Where legally required, we recognise supported opt-out preference signals such as Global Privacy Control (GPC) as a request to opt out of sale or sharing for targeted advertising on the browser or device sending the signal.
7. Marketing communications
We may send marketing if you have consented or where another lawful marketing basis applies. You can unsubscribe at any time by using the unsubscribe link in an email, following the instructions in a message, adjusting available account preferences, or contacting us.
Even if you opt out of marketing, we may still send non-promotional communications about orders, accounts, safety notices, legal matters, or customer-service requests.
We may retain limited information on a suppression list so that we can respect your opt-out request.
8. How we disclose personal information
We may disclose personal information only as reasonably necessary for the purposes described in this Policy, including to:
-
Commerce and hosting providers: Shopify and providers supporting our storefront, checkout, accounts, and commerce operations.
-
Payment and fraud providers: payment processors, banks, card networks, buy-now-pay-later providers, and fraud-prevention services.
-
Fulfilment and delivery providers: fulfilment centres, suppliers, warehouses, postal services, carriers, customs agents, and returns processors. When an order is dispatched directly from China, our Chinese fulfilment agent may receive the customer’s name, delivery address, telephone number, email address where required for delivery notifications, ordered product, quantity, order reference, and information required for shipping or customs documentation. We do not provide the agent with full payment-card details. The agent may use the information only to process, pack, label, export, deliver, return, or otherwise support the relevant order under our instructions and applicable legal requirements. These providers may be located in Europe, the United Kingdom, China, the United States, Australia, or another country necessary to fulfil an order.
-
Communication providers: email, customer-support, SMS, and marketing platforms, including Klaviyo where enabled.
-
Analytics and advertising partners: analytics, attribution, social-media, and advertising providers, including Meta where enabled and where you have provided any consent required by law.
-
Professional advisers: accountants, auditors, insurers, banks, legal advisers, and consultants.
-
Authorities and legal recipients: courts, regulators, law-enforcement bodies, tax or customs authorities, and other parties when disclosure is required or permitted by law or reasonably necessary to protect rights, safety, and security.
-
Corporate transaction parties: prospective or actual purchasers, investors, lenders, or advisers in connection with a merger, financing, reorganisation, insolvency, or sale of all or part of the business, subject to appropriate confidentiality protections.
-
At your direction: another recipient when you ask us or consent to disclose information.
We do not disclose personal information to unrelated parties merely for them to use for their own general direct-marketing lists.
Our fulfilment agent must not use customer information for its own advertising, add customers to marketing lists, sell customer information, or contact customers for purposes unrelated to order fulfilment, except where independently required by law.
9. International transfers
We are established in Slovenia and sell internationally. Personal information may be accessed, stored, or processed in countries other than your own, including Slovenia, other EEA countries, the United Kingdom, the United States, Canada, Australia, and China, depending on the providers and fulfilment route used. In particular, where a product is shipped directly from China, the limited order and delivery information described in Section 8 is transferred to and processed by our Chinese fulfilment agent and relevant delivery providers.
For transfers subject to EU or UK data-protection law, we use a lawful transfer mechanism where required, such as:
-
an adequacy decision or adequacy regulation;
-
the European Commission’s Standard Contractual Clauses;
-
the UK International Data Transfer Agreement or UK Addendum;
-
another approved safeguard; or
-
a limited legal derogation where applicable.
We also take supplementary technical, contractual, and organisational measures where appropriate. You may contact us for information about the safeguard relevant to a transfer, subject to protection of confidential information.
Where required, our arrangement with a Chinese fulfilment agent includes data-processing obligations and applicable international-transfer safeguards. These may include the European Commission’s controller-to-processor Standard Contractual Clauses and, for transfers governed by UK law, the UK International Data Transfer Agreement or UK Addendum. We assess the transfer and limit access to information reasonably necessary to fulfil the order.
Where Australian privacy law applies, we take reasonable steps required by law in relation to overseas recipients.
10. Data retention
We retain personal information only for as long as reasonably necessary for the relevant purpose, including to meet legal, accounting, tax, product-safety, fraud-prevention, dispute, and recordkeeping requirements.
Retention is generally determined as follows:
-
Order, payment, invoice, tax, and delivery records: for the contract period and the applicable statutory accounting, tax, consumer-claim, and limitation periods.
-
Information provided to fulfilment agents and carriers: for the period reasonably necessary to dispatch, deliver, trace, return, or resolve the order, followed by deletion or anonymisation unless longer retention is required by customs, tax, safety, fraud-prevention, or other applicable law.
-
Account data: while the account remains active and for a reasonable period after closure to resolve transactions, enforce rights, and meet legal requirements.
-
Customer-support, complaint, return, and warranty records: for the time needed to resolve the matter and through relevant warranty, claim, and limitation periods.
-
Marketing records: until you withdraw consent or object, followed by retention of minimal suppression information where necessary to honour your preference.
-
Cookie and advertising information: according to the lifetime stated in our consent tool or cookie details and the provider’s applicable retention settings.
-
Security, fraud, and technical logs: for a period proportionate to the risk and investigation need, or longer when required for an active incident or legal claim.
-
Reviews and public submissions: while published or until deletion is appropriate, subject to legal, evidentiary, and backup requirements.
When information is no longer needed, we delete it, anonymise it, or securely isolate it until deletion is possible.
11. Your privacy rights
Your rights depend on where you live and which law applies. We will not unlawfully discriminate against you for exercising a privacy right.
EU/EEA and UK rights
Subject to legal conditions and exceptions, you may have the right to:
-
be informed about processing;
-
access your personal data and receive a copy;
-
correct inaccurate or incomplete data;
-
request deletion;
-
restrict processing;
-
receive certain data in a structured, commonly used, machine-readable format and transmit it to another controller;
-
object to processing based on legitimate interests;
-
object at any time to direct marketing;
-
withdraw consent at any time; and
-
obtain safeguards relating to certain solely automated decisions with legal or similarly significant effects.
You may complain to the supervisory authority where you live or work, where an alleged infringement occurred, or in Slovenia:
Information Commissioner of the Republic of Slovenia\
Ireland-based individuals may contact the Irish Data Protection Commission at . UK-based individuals may contact the Information Commissioner’s Office at .
United States privacy rights
Residents of California and certain other US states may, where the relevant law applies to us, have rights to:
-
know or access categories and specific pieces of personal information;
-
delete personal information;
-
correct inaccurate personal information;
-
receive a portable copy of certain information;
-
opt out of the sale of personal information, sharing for cross-context behavioural advertising, or processing for targeted advertising;
-
limit certain uses or disclosures of sensitive personal information;
-
opt out of certain profiling with legal or similarly significant effects; and
-
appeal a refusal of a request, where applicable.
We do not use sensitive personal information to infer characteristics about you. We do not knowingly sell or share the personal information of consumers under 16.
Advertising disclosures involving cookie identifiers, device identifiers, internet activity, approximate location, and commercial information may be treated as a “sale,” “sharing,” or “targeted advertising” under certain US state laws, even when no money is exchanged. Where applicable, you may opt out through the Site’s “Your Privacy Choices” or cookie settings link, by sending a GPC signal, or by contacting us.
Australian privacy rights
Where the Australian Privacy Act 1988 and Australian Privacy Principles apply, you may request access to and correction of personal information we hold about you. You may also make a privacy complaint using the contact details below. We will respond within a reasonable period. If you are dissatisfied, you may contact the Office of the Australian Information Commissioner at .
12. California notice at collection
This section applies only to the extent the California Consumer Privacy Act, as amended (CCPA), applies to us. In the preceding 12 months, we may have collected the following categories:
| CCPA category | Examples | Main sources | Main purposes | Categories of recipients |
|---|---|---|---|---|
| Identifiers | Name, email, postal address, IP address, account and device identifiers | You; devices; commerce, advertising, and service providers | Orders, accounts, support, security, analytics, and marketing | Commerce, payment, fulfilment, communication, analytics, advertising, professional, and legal recipients |
| Customer-record information | Contact, billing, delivery, and account details | You; commerce and payment providers | Orders, delivery, support, accounting, and compliance | Commerce, payment, fulfilment, professional, and legal recipients |
| Commercial information | Products viewed or bought, cart, order, return, warranty, and promotion history | You; Site activity; commerce and payment providers | Transactions, support, personalisation, analytics, and marketing | Commerce, fulfilment, communication, analytics, and advertising recipients |
| Internet or electronic activity | Browsing, clicks, referral, interaction, cookie, pixel, and log data | Devices; Site; analytics and advertising providers | Functionality, security, analytics, attribution, and advertising | Commerce, security, analytics, and advertising recipients |
| Geolocation data | Approximate location inferred from IP or delivery region | Devices; you; service providers | Market selection, security, fraud prevention, delivery, and advertising | Commerce, security, fulfilment, analytics, and advertising recipients |
| Audio, electronic, or visual information | Product-issue photos or videos, reviews, and communications | You | Support, claims, reviews, and fraud prevention | Customer-support, commerce, fulfilment, professional, and legal recipients |
| Inferences | Likely interests, product preferences, or audience segments | Activity and transaction information; advertising partners | Personalisation, analytics, and advertising | Analytics and advertising recipients |
We collect and retain these categories for the purposes and periods described elsewhere in this Policy. Depending on how advertising tools are configured, we may share identifiers, commercial information, internet activity, approximate geolocation, and inferences with advertising partners for cross-context behavioural advertising. We do not knowingly sell personal information for money.
To exercise applicable opt-out rights, use the Site’s “Your Privacy Choices” or cookie settings link, enable GPC in a supported browser, or contact us. An authorised agent may submit a request where permitted; we may require proof of authorisation and identity verification.
13. How to exercise your rights
Send a request to . Please state the right you wish to exercise and the country or US state where you live.
We may request information reasonably necessary to verify your identity and protect personal information from unauthorised disclosure. We will use verification information only for that purpose. If we cannot verify a request, we may be unable to fulfil it. We will respond within the period required by applicable law.
You may use an authorised agent where local law permits. We may require evidence of the agent’s authority and may ask you to verify your identity directly. If we deny a request, you may have a right to appeal by replying to our decision and stating that you wish to appeal.
14. Automated processing
We and our providers may use automated tools to detect fraud, secure payments, screen transactions, measure advertising, and personalise content. Payment and fraud providers may independently decide to approve, decline, or review a transaction under their own policies.
We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects about you, except where permitted by law with required safeguards. Where applicable, you may request human review, express your point of view, or challenge a decision.
15. Security
We use reasonable technical, organisational, and contractual measures designed to protect personal information, taking account of the nature of the information and relevant risks. However, no transmission or storage system can be guaranteed completely secure.
You are responsible for protecting your account credentials and should contact us promptly if you suspect unauthorised account activity or a security incident affecting your information.
16. Children’s privacy
The Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal information directly from children under 16. If you believe a child has provided personal information to us, contact us so we can investigate and delete it where required.
We do not knowingly sell or share for targeted advertising the personal information of anyone under 16.
17. Changes to this Policy
We may update this Policy to reflect changes to our practices, technologies, Services, or legal obligations. We will post the updated version on the Site and change the “Last updated” date. If required, we will provide additional notice or obtain consent before a material change takes effect.
18. Contact and complaints
For privacy questions, requests, or complaints, contact:
SoccerFresh Privacy Team
Email: