Privacy policy

Privacy Policy
Last updated: July 8th, 2026

This Privacy Policy explains how GORE (“GORE”, “we”, “us”, or “our”), collects, uses, stores, and shares your personal information when you visit shopgore.com (the “Site”), place an order, create an account, contact us, or otherwise use our services (together, the “Services”).

GORE is a UAE-based business. We aim to handle personal information in a manner consistent with applicable UAE data protection requirements, including Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data (“UAE PDPL”). Where we offer goods to individuals in the United Kingdom, certain processing may also be subject to the UK General Data Protection Regulation (“UK GDPR”).

For the purposes of applicable data protection law:

Controller: @Gore.online
Trading name: GORE
Business address: Downtown Views II, T3, Za'beel 2, Dubai, UAE
Email: Bloodgutsnkittens@gmail.com
Trade licence details: 1635835

If you have questions about this Privacy Policy or your personal information, please contact us using the details above.

1. Who this policy applies to
This Privacy Policy applies to personal information collected when you:

browse or use the Site; place an order; create or use a customer account;
contact us by email, form, chat, or social channel; interact with us in connection with our products and customer service.

2. Personal information we collect
We collect personal information that is necessary to operate the store, fulfil orders, manage customer accounts, provide customer support, and run the Site securely.

Information you provide directly
You may provide us with the following categories of information:

name;
billing address;
shipping address;
email address;
telephone number;
order details;
account login details and saved preferences;
messages and correspondence you send to us;
returns, refund, or exchange information;
any other information you choose to provide.

Information collected automatically
When you use the Site, we and our service providers may automatically collect certain technical and usage information, such as:

IP address;
browser type;
device type;
operating system;
language settings;
pages viewed;
time spent on pages;
referring website;
cart and checkout activity;
session identifiers and similar store-functionality data.
Information from third parties

We may also receive information from third parties that support the operation of the store, including:

Shopify, which hosts and powers the ecommerce store;
Shop, where you choose to use Shop-related features;
payment service providers;
shipping, delivery, and fulfilment providers;
IT, hosting, fraud-prevention, and security providers.

3. How we use personal information
We use personal information for the following purposes:

to operate the Site and Services;
to process and fulfil orders;
to take payment and manage transaction records;
to create and manage customer accounts;
to arrange shipping, delivery, returns, refunds, and exchanges;
to communicate with you about your order, account, or enquiry;
to provide customer support;
to maintain the security and integrity of the Site;
to detect and prevent fraud, misuse, and security incidents;
to comply with legal, tax, accounting, and regulatory obligations;
to establish, exercise, or defend legal claims;
to improve store functionality and service performance.

At present, based on the information provided to us, we do not state that the Site uses advertising cookies or third-party ad pixels for behavioural advertising.

4. Legal basis for processing

UAE position
Under the UAE PDPL, processing of personal data generally requires an applicable legal basis, including consent or another lawful basis recognised by the law, such as where processing is necessary for contractual performance, compliance with legal obligations, protection of public interest, or other recognised grounds under the statute.

UK position
Where UK GDPR applies, we rely on one or more of the following legal bases under Article 6(1), UK GDPR:

Contract
We process personal data where necessary to take steps at your request or to perform a contract with you, including:

processing orders;
taking payment;
delivering products;
managing your account;
providing order-related support;
handling returns and refunds.
Authority: Article 6(1)(b), UK GDPR.

Legitimate interests
We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests may include:

operating and administering the store;
securing the Site and related systems;
preventing fraud and abuse;
improving store reliability and customer experience;
keeping business records;
defending legal rights.
Authority: Article 6(1)(f), UK GDPR.

Legal obligation
We may process personal data where necessary to comply with legal obligations, including tax, accounting, consumer, regulatory, and law-enforcement-related obligations.

Authority: Article 6(1)(c), UK GDPR.

Consent
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully before withdrawal.

Authority: Article 6(1)(a), UK GDPR.

5. Cookies and similar technologies
We use cookies and similar technologies to support core site and store functionality.

Strictly necessary cookies
These may include cookies or similar technologies used to:

keep items in your cart;
support secure login and account access;
maintain checkout functionality;
remember your session;
support fraud prevention and store security;
preserve essential store settings.
Based on the information currently provided:

no advertising cookies are currently active; and
no Meta, Google, TikTok, or social-login apps are connected.
Where the Site is accessed from the UK, the use of cookies is also affected by Regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). Under Regulation 6, PECR, consent is generally required for storage/access technologies unless they are strictly necessary for a service requested by the user.

Managing cookies
Most browsers allow you to control cookies through your browser settings. If you disable strictly necessary cookies, parts of the Site, including cart, account, or checkout functions, may not work properly.

Authority: Regulation 6, PECR.

6. Marketing communications
Based on the information currently provided:

we do not currently use SMS marketing; and
we do not currently describe the Site as using advertising cookies or ad-tech integrations.
We may still send service communications where necessary, such as:

order confirmations;
payment confirmations;
shipping updates;
account/security notices;
customer service replies.
If we introduce promotional email marketing, SMS marketing, analytics tools, or advertising technologies in the future, this Privacy Policy should be updated before or when those features go live.

7. Customer accounts, Shopify, and Shop
Customers may create an account through the store. Account and store functions may be supported through Shopify and, where chosen by the customer, Shop.

This may involve processing personal information for purposes such as:

account registration and login;
checkout and order completion;
order history and customer account access;
fraud prevention and account security;
store hosting and infrastructure support.
Depending on the processing activity, Shopify or Shop may act as a service provider/processor for store operations, and may in some contexts process data under their own platform arrangements.

Users can also review the privacy information made available by Shopify and Shop on their own websites.

8. How we share personal information
We may share personal information where reasonably necessary to run the business and provide the Services, including with:

Shopify;
Shop;
payment service providers;
shipping, logistics, and fulfilment providers;
IT, hosting, cloud, and security providers;
professional advisers, such as lawyers, accountants, insurers, and auditors;
regulators, courts, law enforcement, or public authorities, where required or permitted by law;
relevant parties in connection with a business sale, restructuring, transfer, or similar transaction, if applicable.
We may also share information where necessary to protect our rights, investigate fraud, enforce our terms, or respond to legal claims.

9. International transfers
Because we use online commerce and technology providers such as Shopify, Shop, payment providers, and delivery partners, your personal information may be processed in countries outside the UAE or outside the country where you are located.

Where UK GDPR applies and personal data is transferred outside the UK, we seek to use an appropriate transfer mechanism recognised under Chapter V, UK GDPR, such as:

an adequacy regulation;
standard contractual clauses or equivalent safeguards;
another lawful transfer mechanism recognised by law.

Where UAE law applies, we also aim to handle cross-border disclosures and transfers in a manner consistent with the UAE PDPL.

If you would like more information about cross-border processing or transfer safeguards, you may contact us.

10. How long we keep personal information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

provide the Services;
maintain customer accounts;
complete and record transactions;
comply with legal, tax, and accounting obligations;
resolve disputes;
enforce agreements;
establish, exercise, or defend legal claims.

Retention may vary depending on the category of information. For example:

order and payment-related records may be retained for accounting, tax, and audit purposes;
account information may be retained while the account remains active and for a reasonable period afterwards;
customer service communications may be retained for complaint handling and dispute-resolution purposes;
technical and security logs may be retained for security, troubleshooting, and fraud-prevention purposes.

Where personal information is no longer needed, we aim to delete it, anonymise it, or securely isolate it until deletion is feasible.

Under Article 5(1)(e), UK GDPR, personal data should be kept no longer than necessary where that regime applies.

11. Your privacy rights
UAE-related rights
Where the UAE PDPL applies, data subjects may have rights provided by that law, which may include rights relating to:

access to personal data;
correction or updating of personal data;
erasure of personal data in certain cases;
restriction or objection in certain cases;
portability, where applicable;
information about how personal data is processed.

The scope of these rights depends on the applicable law and the circumstances of the request.

UK-related rights
Where the UK GDPR applies, you may have the right to:

request access to your personal data;
request rectification of inaccurate data;
request erasure in certain circumstances;
request restriction of processing;
object to certain processing, including direct marketing;
request data portability in certain circumstances;
withdraw consent where processing is based on consent;
lodge a complaint with the Information Commissioner’s Office (ICO).
Authority: Articles 15–21 and 77, UK GDPR.

To exercise rights, please contact us using the details in this Privacy Policy. We may request information necessary to verify your identity before responding.

12. Automated decision-making
We may use tools designed to detect suspicious activity, fraud, or security risks. However, based on the information currently available, we do not state that we make decisions based solely on automated processing that produce legal or similarly significant effects within the meaning of Article 22, UK GDPR.

If that changes, this Privacy Policy should be updated.

13. Security
We use measures intended to protect personal information against unauthorised access, loss, misuse, disclosure, alteration, or destruction. These may include organisational and technical safeguards appropriate to the nature of the information and the risks involved.

However, no online system can be guaranteed to be completely secure.

Where UK GDPR applies, security obligations are reflected in Article 32, UK GDPR and the integrity/confidentiality principle in Article 5(1)(f), UK GDPR. The UAE PDPL also contemplates appropriate technical and organisational measures to protect personal data.

14. Third-party links and services
The Site may contain links to third-party websites or services. If you use those services or follow those links, your information will be governed by their own privacy notices and terms.

We are not responsible for the privacy or security practices of third-party services that we do not control.

15. Children
The Site and Services are not intended for children, and we do not knowingly collect personal information directly from children.

If you believe a child has provided personal information to us, please contact us so that we can review the issue and take appropriate steps.

16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, store settings, legal requirements, or service providers.

When we make changes, we will post the updated version on this page and change the Last updated date above.

17. Contact us
If you have questions about this Privacy Policy or wish to make a privacy request, please contact:

@Gore.online
Trading as GORE Online Seller
Email: Bloodgutsnkittens@gmail.com
Address: Downtown Views II, T3, Za'abeel 2, Dubai, UAE