• Account information: your name, email address, and password when you create an account.
• Order & shipping information: your shipping address, the items you order, and your order history.
• Payment information: payments are collected and processed by our payment processor, Stripe. We do not store your full card number on our servers.
• GUSU Credit: your store-credit balance and the activity associated with it (credit earned, applied, and reversed).
• Communications & content: messages you send us through customer support, and reviews or other content you choose to post.
• Marketing sign-ups: your email address if you subscribe to our updates.

• Usage data: how you interact with the Site, such as pages visited and features used.
• Device data: IP address, browser type, device type, and operating system.
• Cookies & similar technologies: used to keep you signed in, remember your cart, and understand how the Site is used (see Section 4).
• Analytics: aggregated statistics about Site usage from analytics tools.

• To operate the store: create and manage your account and provide our services.
• To process orders: handle payments, fulfill and ship your orders, and process returns and refunds.
• To manage GUSU Credit: calculate, issue, apply, and reverse store credit.
• To communicate with you: send order confirmations, shipping and return updates, and respond to support requests.
• To market to you: send promotional emails, but only if you have opted in.
• To improve the Site: analyze usage to improve our features and your experience.
• For security: detect and prevent fraud, abuse, and other harmful activity.
• For legal compliance: meet our obligations under applicable laws.

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers: trusted companies that help us run the Site and fulfill orders, including Stripe (payment processing), our hosting provider, our analytics provider, and email/communications providers. They may access information only as needed to perform services for us.
• Shipping carriers: we provide your name and address to carriers (such as USPS) so they can deliver your order.
• Legal requirements: when required by law, or to protect our rights, our customers, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of all or part of our business.

We use cookies and similar technologies to provide and improve our services:

• Essential cookies: required for basic functionality such as signing in, sessions, and your shopping cart.
• Analytics cookies: help us understand how the Site is used so we can improve it.
• Your control: you can manage or disable cookies through your browser settings, though disabling essential cookies may affect how the Site works.

Because we do not sell or share your personal information for cross-context behavioral advertising, there is no such activity for you to opt out of.

We use appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We keep your personal information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account information: kept while your account is active and for a reasonable period after it is closed.
• Transaction records: kept as required for accounting and tax purposes.
• Communications: kept for record-keeping and support purposes.

Depending on where you live, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information, subject to legal exceptions.
• Portability: request a copy of your information in a portable format.
• Marketing opt-out: unsubscribe from promotional emails at any time.

To exercise any of these rights, contact us at contact@gusu.co.

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you additional rights:

• Right to know: what personal information we collect and how we use it.
• Right to access & portability: request a copy of the personal information we hold about you.
• Right to delete: request deletion of your personal information, with certain exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing: we do not sell your personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of.
• Right to non-discrimination: we will not treat you differently for exercising your privacy rights.

To exercise these rights, email us at contact@gusu.co or reach us through our Contact page. We may need to verify your identity before responding.

Our Site and services are intended for adults aged 18 and older. We do not direct our services to, or knowingly collect personal information from, children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

We send marketing emails about GUSU, new products, and offers only if you opt in. You can unsubscribe at any time by:

• Clicking the unsubscribe link in any marketing email;
• Updating your preferences in your account settings; or
• Contacting us directly.

Please note: you cannot opt out of transactional messages (such as order confirmations, shipping updates, and security notices), as these are necessary to provide our service.

Our Site may contain links to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to review their privacy policies before sharing any personal information.

Our Site and services are currently available only to customers located in the United States. If you access the Site from outside the United States, you do so at your own risk and are responsible for compliance with your local laws.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. For material changes, we will post the updated policy on the Site and update the effective date, and we may notify registered users by email. Your continued use of the Site after changes take effect means you accept the updated Policy.

We will respond to your request within the time required by applicable law (generally within 45 days for California requests).